How to hack an Android phone if you forgot your password: Complete guide

After five incorrect attempts to enter a pattern or PIN code, the screen of your Android smartphone will lock, displaying a countdown timer and an authentication error message, instantly blocking access to contacts, photos and important applications.

Fortunately, the operating system architecture Android provides for several scenarios for restoring access, although most of them involves the risk of losing personal information. Modern versions of firmware, starting from Android 6.0 and ending with the latest releases in 2026, have significantly tightened encryption policies. This means that a simple reset via the engineering menu may be the only option if security measures have not been taken in advance. In this article, we will analyze in detail legal ways to bypass the blocking, assess the risks and prepare a step-by-step action plan for various smartphone models.

Using the Find My Device service from Google

The most civilized and safest method of regaining control over the device is to use a cloud service Google Find My Device. For this method to work, it is critical that you log in to your account on the locked smartphone Google, the device is connected to the Internet (via a mobile network or Wi-Fi), and the geolocation function is active. If these conditions are met, you can remotely control the phone from any other device that has access to the network.

The procedure begins by going to the official website of the service and logging in under the same account that is used on the blocked gadget. The system will automatically detect the location of your device and offer three options: play sound, lock the device or clean it. It is the option data clearing (Erase Device) that allows you to remove a forgotten password, as it initiates a full reset to factory settings. Please note that after this procedure, all photos, contacts and applications not saved in the cloud will be irretrievably lost.

⚠️ Attention: If memory encryption is enabled on the device (which is standard for all modern smartphones), data deleted during the reset process cannot be restored even with specialized software. Make sure you have an up-to-date cloud backup before confirming the operation.

After confirming the wipe command, the phone will reboot and start in initial setup mode. You will need to enter the login and password for the account Googlethat was the main one on this device before the blocking. This is an anti-theft measure (FRP Lock) that will prevent an attacker from using the phone even after a reset. If you do not remember the password for the account itself Google, you must restore it through the access return form on the search engine website before you start unlocking the phone.

Reset via Recovery mode (Hard Reset)

If remote access is not possible due to lack of Internet on the phone, the only option is to use hardware mode recovery, known as Recovery Mode. This method works at the bootloader level and does not require logging into the operating system. The interface of this mode is usually minimalistic and controlled by the volume and power buttons, since the touch screen often does not function in this state.

To enter recovery mode, you must completely turn off the smartphone. Then you need to press a specific key combination, which depends on the device manufacturer. For example, on smartphones Samsung this is often a combination of the power button and volume up, sometimes with a USB cable connected to the computer. On devices Xiaomi or Pixel combinations may differ. Hold the buttons until the brand logo or menu with text in English appears.

In the Recovery menu, navigation is carried out using the volume buttons (up/down), and the selection of an item is confirmed with the power button. You need to find the item containing the words Wipe data/factory reset. Selecting this item initiates the process of formatting the user memory section. The system may request additional confirmation to avoid accidental pressing. After the process is completed, which usually takes several minutes, you should select the option Reboot system now to reboot.

⚠️ Attention: On some new smartphone models, especially with processors Snapdragon of the latest generations, entering Recovery may require connecting the device to the PC via a USB cable while it is turned off. Without a cable, the phone can simply boot in normal mode, ignoring button presses.

It is important to understand that this method is not a “hacking” in the hacker sense, but is a standard disaster recovery procedure. It deletes all user content, including settings, downloaded apps, and media files. However, system files and the operating system itself remain untouched, which ensures that the device is operational after switching on. If after rebooting the phone asks for the old account, this is normal operation of FRP protection.

Bypassing the lock via Smart Lock

The feature Smart Lock, introduced into Android several years ago, allows the device to remain unlocked if certain conditions are met. This could be being in a trusted location (eg home), connecting to a trusted Bluetooth device (headphones, car stereo, smartwatch) or using face/voice recognition. If you have previously configured these settings, you have a chance to access the data without resetting.

Try moving to a location that you have designated as safe. If the phone "recognizes" the geolocation, the screen lock may disappear, allowing you to go into settings and disable the password. Likewise, if you have paired Bluetooth headphones, turn them on and go to your phone. At the moment of connection, the device can be automatically unlocked. This method only works if the feature was activated before you forgot your password.

How to check that Smart Lock is active without unlocking?

If a lock icon appears on the lock screen that says “Trusted Device” or “Trusted Location,” then Smart Lock is active. Try activating the appropriate condition (turn on Bluetooth, go to the window). If there is no icon, the function is either disabled or does not currently work.

It is worth noting that the effectiveness of Smart Lock depends on the firmware version and power consumption settings. On some devices, the system may require you to enter the master password after a long reboot or after 24 hours of inactivity, ignoring trusted conditions. If the phone requires you to enter a PIN code immediately after turning it on, this method, unfortunately, will not work, and you will have to resort to more radical measures.

Using USB and ADB debugging

For advanced users who had USB debugging (USB Debugging) enabled in advance, it is possible to delete the file with passwords via a computer. This method requires a tool package installed on the PC Android Debug Bridge (ADB) and drivers for a specific device. The essence of the method is to directly interact with the phone’s file system through the command line.

Connect the locked smartphone to the computer using a high-quality USB cable. Open a command prompt or terminal on your PC in the folder where ADB is installed. Enter the command to check the connection:

adb devices

If the list displays the serial number of your device with status device, then the connection is established. Next, you need to enter a command to delete the system file that stores the pattern or password:

adb shell rm /data/system/gesture.key

Or, in some cases:

adb shell rm /data/system/locksettings.db

After executing the command, restart the phone. In an ideal scenario, the system will not find the file with the key and will allow you to log in without entering a password, or will offer to install a new one. However, on modern versions of Android (from 7.0 and higher), this method often does not work due to the enhanced encryption of the partition /data. Without unlocking the bootloader or having root access, access to this file may be closed even for ADB.

Unlocking specifics Samsung smartphones

Owners of devices from the South Korean company Samsung are in a more advantageous position due to the presence of their own service Find My Mobile. Unlike the standard Google solution, this service allows you to remove the lock screen without losing data, but only if an account has been created and activated on the phone Samsung Accountand the remote control function is enabled.

To use this method, go to the site Find My Mobile from a computer or another smartphone. Log in with your Samsung account. In the device management menu, select the option Unlock (Unlock). The system will require you to re-enter your account password to confirm your identity. After this, the screen lock (pattern, PIN, password, fingerprint) will be deleted, and all data on the device will remain intact.

Method	Saving data	Requirements	Difficulty
Find My Device (Google)	No (full reset)	Internet, Google account	Low
Find My Mobile (Samsung)	Yes	Samsung account, internet	Low
Hard Reset (Recovery)	No (full reset)	Physical access to buttons	Medium
ADB Command	Yes (theoretically)	USB debugging enabled, PC	High

A unique feature of some older Samsung models is the ability to reset the failed attempt counter through a service code #0# or special engineering menus, but in the current One UI firmware these loopholes are closed. If the Find My Mobile service does not work, check the status of the device in your personal account: if the phone is displayed as “offline”, remote unlocking is not possible until it is connected to the network.

⚠️ Attention: The interface and available functions of the Samsung Find My Mobile service may vary depending on the region and firmware version. In some countries, due to local regulations, the remote unlock function without resetting data may not be available.

Prevention and creation of backup copies

The best way to deal with a forgotten password is prevention. Regularly backing up your data ensures that if you need to make an emergency reset, you won't lose important information. Modern smartphones offer flexible tools for synchronizing with cloud storage. Set up automatic uploading of photos to Google Photos or the manufacturer's cloud, and synchronize your contacts with your Google account.

It is also recommended to write down your passwords and pattern keys in a safe place, for example, in a password manager or an encrypted file on your computer. Don't rely on memory alone, especially if you're using complex combinations to improve security. Remember that biometric data (fingerprint, face) may stop working due to contamination of the sensor or changes in appearance, so knowledge of the backup PIN code is mandatory.

In conclusion, it is worth noting that “hacking” someone else’s phone without the owner’s knowledge is an illegal act. All the methods described above are intended solely to restore access to your own device in the event of loss of credentials. If you purchased a used phone and it is locked by the previous owner (FRP lock), you can legally unlock it only by contacting the seller to remove the device from his account.

Is it possible to unlock a phone without losing data?

Saving data is only possible in two cases: if the Smart Lock function worked (the phone unlocked itself under certain conditions) or if you use Find My Mobile service from Samsung if you have a registered account. In all other cases, including resetting via Google Find My Device and Hard Reset, the data will be deleted.

What is FRP Lock and how to bypass it?

FRP (Factory Reset Protection) is reset protection. If you did a Hard Reset, the phone will require you to enter the password for the Google account that was synchronized with the device before the reset. The only way to get around this is by remembering your account password. Unofficial methods for bypassing FRP exist, but they are complex, depend on the Android version and are often covered by security updates.

Will calling a locked phone help?

On very old versions of Android (before 5.0) there was a bug that allowed you to get into the settings through the call menu. This method does not work on modern devices. However, if your phone has voice answer or headset unlock enabled, accepting a call may temporarily wake up the screen, but you still won't be able to access the settings menu without entering the password.

How many times can you enter the wrong password?

Usually, after 5 unsuccessful attempts, the phone is locked for 30 seconds. With each subsequent series of unsuccessful entries, the blocking time increases (1 minute, 5 minutes, 15 minutes). After a certain number of errors (often about 15-20), the device may offer to reset settings through a Google account or be completely blocked for a long time, requiring a connection to the network to verify the owner’s rights.