Factory Reset Protection Explained for Store Owners

Factory Reset Protection (FRP) is an Android security feature introduced in Android 5.1 that prevents a device from being used after a factory reset unless the original Google account is entered. For device financing, this is a critical layer of security — but it only works if your MDM enrollment leverages it correctly.

What Happens During a Factory Reset?

When a customer performs a factory reset on an enrolled device, two things happen in a properly configured MDM system: First, the Device Owner issues a remote wipe command. Second, FRP kicks in, requiring the enrolled Google account credentials before the device can be set up again. Without these credentials — which are controlled by your MDM — the device becomes unusable.

The Firmware Flash Scenario

More technically sophisticated customers may attempt to flash a custom ROM to bypass FRP. Rectym's hardware-level binding provides protection beyond standard FRP. Our enrollment writes policy to the device's secure enclave, meaning even a complete OS flash leaves the lock intact.

SIM-Change Protection

A common misconception is that removing the SIM card will prevent the lock command from being received. Our platform uses an offline lock queue — if the device cannot receive the command immediately, it is stored and executed the moment the device reconnects to any network, including Wi-Fi.

What You Should Do

• check_circleAlways enroll devices using Rectym's QR provisioning — not manually
• check_circleTest your enrollment by attempting a factory reset on a demo device before going live
• check_circleInclude an explicit clause in your financing agreement about remote device management
• check_circleMonitor the 'Last Seen' status in your dashboard — devices offline for 5+ days warrant follow-up