Android FRP Update Requires Second Reset to Prevent Theft

Key Takeaways

1. Smartphones remain popular targets for theft, prompting Google to enhance Factory Reset Protection (FRP).
2. Current FRP measures require the last used Google account or screen-lock information after a reset, but criminals have found ways to bypass these protections.
3. Android 15 introduces stronger FRP features that prevent unauthorized account creation and app installations during the setup process.
4. The new FRP enhancement will require a second factory reset and original credentials if an unauthorized reset is detected.
5. Stolen Android phones reset outside proper settings will soon be completely unusable, losing resale value for thieves.

Smartphones are still major targets for thieves, and Google’s Factory Reset Protection (FRP) has been an attempt to make stolen phones useless. Recently, the company discussed a stronger version of FRP that will be introduced later this year.

Existing FRP Measures

Currently, FRP activates when a device is reset via recovery mode or through Google’s Find My Device service. During the setup process, the phone requires the last used Google account or screen-lock information; without this, the activation cannot proceed. The mechanism that enforces this requirement is kept in secure storage and remains intact after a reset, but criminals have discovered methods to bypass the setup wizard and regain some basic functions.

Enhancements in Android 15

Android 15 has already addressed multiple vulnerabilities by preventing new account creation, changes to screen locks, and app installations when the setup wizard is bypassed. The next enhancement goes even further: if Android notices an unauthorized reset or a bypass of the wizard, it will require a second factory reset and will not boot until the original credentials are provided. A message shown during The Android Show: I/O Edition makes it clear—if authentication fails, the device loops back to a reset screen, disabling all features, including making calls.

Google has stated that this upgraded FRP will be available “later this year.” Since Android 16 is anticipated to launch in June and this feature is not included in the latest beta, it is likely that the upgrade will come in a later Quarterly Platform Release instead of on launch day.

Impact on Stolen Devices

If the timeline remains accurate, stolen Android phones that are reset outside the proper settings will soon be entirely unusable. Owners who manage to get their devices back can still unlock them using their previous passcode or Google account, but anyone else will find themselves with a locked device that holds no resale value.

Source:
Link