The situation when a person finds a lost smartphone or buys a used device with a locked screen occurs quite often. In such cases, the Android security system, known as Factory Reset Protection (FRP), does not allow the new user to access the gadget's functions without entering the password from the previous owner. This is a security mechanism designed to make it more difficult to use stolen devices, but it often becomes an obstacle for honest finders.
An attempt to bypass the protection using simple methods, such as a full reset through the Recovery menu, usually only leads to an activation screen where the system requires you to enter the data of the last synchronized one. Google account. Without this data, the phone turns into a “brick” for the average user. It is important to understand that the legal way to unlock someone else’s device is only to return it to the owner or contact law enforcement agencies, however, the technical nuances of removing the lock are often of interest to both owners who have forgotten their data and those who found the gadget.
In this material we will analyze in detail the technical aspects of FRP protection, consider possible options for action when finding a phone and we will explain why a standard data reset does not remove the link to the cloud profile. You will learn about the risks of independently interfering with the system and what steps to take to ensure that the device becomes useful again in your hands or returns to the owner.
The principle of operation of FRP protection on Android
The mechanism Factory Reset Protection was introduced by Google starting with version Android 5.1 Lollipop. Its main purpose is to prevent someone from using the device after performing a factory reset. When you add a Google account to your phone and set a screen lock (PIN, pattern, or fingerprint), the system will automatically activate this protection.
If someone tries to reset the phone through the Recovery menu or third-party utilities, the system will ask for authorization upon first boot. This is not just a login form, but a rigid link device serial number to a specific Google ID. Google servers check the entered data and only allow further configuration if it matches. It becomes more and more difficult to bypass this check using software methods with each security update.
It is worth noting that the protection works even if the phone was reset not by the owner, but, for example, by a service center without first logging out of the account. Therefore, before selling or transferring a device, you must always follow the Settings → Accounts → Delete accountprocedure. Ignoring this step guarantees problems for the future user.
⚠️ Attention: Attempts to use unofficial software to bypass FRP may lead to a violation of the warranty terms and potential blocking of the device by the manufacturer at the server level.
There is a misconception that removing the SIM card or having no Internet will help avoid being asked for a password. In fact, modern versions of Android require a network connection to check the lock status. Without access to Wi-Fi or a mobile network, it is impossible to complete the activation, since the phone will not be able to contact the verification servers.
What to do if you find someone else's smartphone
If you find a lost phone, the most ethical and legal action is to try to return it to the owner. Often people lose gadgets under stress and hope for the honesty of the finder. Modern smartphones have functions that allow you to contact the owner even from a locked screen. For example, the lock screen usually has an "Emergency Call" button.
Try dialing numbers saved in favorites or recent calls, if the interface allows this. Often there you can find contacts “Mom”, “Home” or “Work”. It's also worth checking if the feature to display owner information on the lock screen is enabled. Some users specifically indicate an alternative phone number for communication there.
- 📞 Try calling contacts from the emergency call menu on the lock screen.
- 🔍 Inspect the case or protective glass - the owners often put notes with the phone number there.
- 👮 Take the find to the nearest police department or bureau lost and found if the phone is found on public transport.
If the phone is locked with a password and you decide to keep it, you will encounter the FRP problem described above. In this case, the device will be useless for full use, and an attempt to flash it may take a lot of time and not produce results.
Methods for resetting a Google account through the Recovery menu
Many users believe that entering Recovery mode and executing the command Wipe Data/Factory Reset completely clears the phone of traces of the previous owner. This is partially true: user data (photos, contacts, applications) are indeed deleted. However, information about linking the account is stored in a protected memory section, which is not affected by a standard reset.
To enter recovery mode on most devices, you need to turn off the smartphone and then hold down the button combination. Most often this is Volume Down + Power or Volume Up + Power. Devices from different manufacturers, such as Samsung, Xiaomi or Pixelmay have their own unique keyboard shortcuts. After the logo appears, you need to release the power button while continuing to hold the volume key.
In the Recovery menu, control is carried out with the volume buttons to move through the items and the power button to confirm the selection. Find the item Wipe data/factory reset and confirm the action. After the process is completed, select Reboot system now. The phone will reboot, but, as already mentioned, it will most likely require you to enter a password for your Google account.
⚠️ Attention: On some smartphone models (especially Samsung), after resetting, you may need to wait 24 hours before attempting to enter a new account if the system suspects suspicious activity.
If the phone was reset correctly by logging out of the account before, then FRP protection will not be activated. But in the case of a found device where access to settings is blocked, this method only clears user data, leaving the blocking active. This is a dead end for unlocking, but a necessary step before selling the device for spare parts or returning it to the owner in a cleaned form.
☑️ Actions before resetting via Recovery
Using Google device search services
If you are the legal owner of the phone, but forgot the password, or if you found the phone and want to help the owner, you can use service Find My Device from Google. This tool allows you to remotely control the device if the Internet and geolocation are enabled on it. The service can be accessed from any computer or other smartphone through a browser.
To use the function, you need to know the login and password for the Google account that was synchronized with the found phone. If you found a phone and the owner is unknown, this method will not work for you, since you do not have access to the account. However, if you have made an appointment with the owner, he can independently unlock the device remotely or erase the data.
| Function | Description of action | Requirements |
|---|---|---|
| Ring | The phone starts ringing at full speed volume 5 minutes | Internet, sound on |
| Lock | Sets a new password and displays a message on the screen | Internet, screen on |
| Clean device | Full data reset (FRP will remain active) | Internet, owner account |
The “Wipe device” function deletes all files, but, as in the case of Recovery, does not remove FRP protection. After cleaning, the phone will ask for the password for the account from which the command was made. This once again confirms that deleting data and removing activation lock are two different processes from the point of view of the Android security architecture. Sometimes owners use third-party tracking services, such as functions from manufacturers (Samsung, Xiaomi). These services may have broader powers than the standard Google tool, and in some cases allow you to unlock a device remotely if it has been registered in the brand's ecosystem.
Sometimes owners use third-party tracking services, such as functions from manufacturers (Find My Mobile from Samsung, Mi Cloud from Xiaomi). These services can be more powerful than Google's standard tool, and in some cases allow you to unlock your device remotely if it has been registered in the brand's ecosystem.
What to do if the phone is offline?
If the device is not connected to the Internet, commands from the Find My Device service will be executed automatically as soon as the phone is online. You will receive a notification about this in your Google account.
Unlock specifics for different manufacturers
Various brands implement FRP protection with their own characteristics. For example, devices Samsung are known for one of the most stringent implementations of this system. It is often impossible to bypass the blocking on them even through engineering menus without special equipment or paid service accounts. Series models Galaxy S and Note require special attention when resetting.
Smartphones Xiaomi and Redmi use additional Mi Account protection. Even if you reset your Google account, the phone may ask you to log in to your Mi account. This creates a double barrier to unauthorized access. Such a lock can be officially removed only at an authorized service center upon presentation of a purchase receipt.
Devices from Motorola and Google Pixel follow a more standard Android implementation, but they also regularly receive security updates that close vulnerabilities that were previously used to bypass FRP. Methods that worked a year ago on a specific firmware version may no longer be relevant today.
Always check the Android security version in the settings (if you have access) or on the box. The more recent the security patch date, the more difficult it is to bypass the protection using non-standard methods.
Owners of older devices with Android versions below 7.0 are luckier: there are many software vulnerabilities for them that allow you to reset your account through a browser or special applications. However, on modern gadgets with Android 10, 11, 12 and higher, these holes are closed, and intervention requires deep knowledge in the field of mobile development.
Legal aspects and risks of self-hacking
It is important to be aware of the legal side of the issue. In most countries, bypassing information security measures on someone else's device without the owner's consent may fall under articles of the criminal code on unlawful access to computer information. Even if you find a phone on the street, it remains someone else’s property until the owner is identified or the statute of limitations for the discovery expires.
Using paid unlocking services in dubious workshops also carries risks. You don’t know what software will be installed on your phone or whether it contains malicious modules. In addition, such actions often void the warranty if it was still valid at the time of finding or purchasing a used device.
⚠️ Attention: Purchasing locked phones on the secondary market (“for restoration”) is often the purchase of stolen property. Be vigilant and ask for a receipt or a box with a serial number when purchasing.
If you bought a phone secondhand and it turned out to be locked, the only legal solution is to contact the seller. A conscientious seller must provide account information or help with removing the block. If the seller has disappeared and the receipt is missing, it will be extremely difficult to prove ownership, and the phone will most likely remain blocked forever.
The only guaranteed safe and legal way to unblock Google is by entering information from the previous owner's account or providing purchase documents to the service center.
Frequently asked questions (FAQ)
You can Is it possible to reset your Google account via a computer?
No, it is impossible to directly reset the account link on your phone via a computer without access to the device itself. The Find My Device service only allows you to erase data, but FRP protection will remain active.
What happens if you enter the wrong password several times?
The system will temporarily block the ability to enter a password for a certain time (from 30 seconds to 24 hours). This is protection against brute-force password guessing.
Will flashing the phone help unlock it?
In most modern cases, no. Information about the lock is stored in a special protected memory section, which is not erased during normal flashing. Special service equipment is required.
How to find out if the phone is linked to an account before resetting?
Go to Settings → Accounts. If there is an added Google account there and the “Find Device” function is enabled, then after the reset the FRP protection will work.
Is it possible to bypass FRP on a phone without the Internet?
No, the process of activating and verifying the account requires a mandatory connection to the network. Without the Internet, the phone will not be able to contact Google servers for verification.