Google FRP Lock Explained: How Factory Reset Protection Works

An Android phone has just been factory reset. You pick a language, join Wi-Fi, and then setup stops on a screen that says “This device was reset. To continue, sign in with a Google Account that was previously synced on this device.” There is no skip button. That is Factory Reset Protection (FRP) — Google’s answer to Apple’s Activation Lock, and the reason a stolen Android phone is worth far less than it used to be.

FRP is simple to avoid if you’re the owner and maddening if you’re not. Below we explain exactly what triggers it, why it survives resets, how owners clear it the legitimate way, and what buyers should check so they never end up holding a phone that is locked to a stranger’s account.

How Factory Reset Protection works

FRP has been part of Android since version 5.1. It switches on automatically when two conditions are met on the phone:

• A Google Account is signed in, and
• A screen lock (PIN, pattern or password) is set.

There is no separate toggle. While both are present, Android records that the device belongs to that account. If the phone is then wiped in a way the system doesn’t consider authorized — most commonly a reset from recovery mode using the volume and power buttons, or a reset by someone who doesn’t know the screen lock — the next setup demands proof of ownership: either the Google Account that was on the phone, or on many recent devices the old screen lock.

The protection works because the lock state is stored in a protected partition that a normal reset does not erase, and setup checks with Google’s servers before letting you in. Wiping the phone’s data doesn’t wipe the record that says “this phone belongs to someone.”

FRP versus other Android locks

A Galaxy can carry FRP and a Samsung account lock at the same time; a Xiaomi can carry FRP and a Mi Account lock. Clearing one doesn’t clear the other. For Xiaomi specifics see our Mi Account lock guide, and for company-enrolled devices see what an MDM lock is.

What triggers FRP — and what doesn’t

• Recovery-mode reset with a Google Account still on the phone: FRP triggers.
• Remote erase from Google’s Find My Device (android.com/find): FRP triggers. That’s by design — the owner erased a lost phone, and it stays locked to them.
• Reset after removing every Google Account first: no FRP. The phone goes straight to normal setup.
• Reset from Settings while accounts remain: behavior differs by brand and Android version. Some phones treat it as a trusted reset after you confirm the screen lock; others still ask for the account afterward. Don’t gamble — remove accounts first.

The right way to reset your own phone: remove the account first

If you’re selling, trading in or sending a phone for repair, this order prevents FRP entirely.

Pixel and most Android phones

1. Open Settings › Passwords, passkeys & accounts (older versions: Settings › Accounts).
2. Tap each Google Account and choose Remove account. Confirm with your screen lock.
3. Go to Settings › Security & privacy (or Security) and set the screen lock to None or Swipe if your phone allows it.
4. Reset from Settings › System › Reset options › Erase all data (factory reset).

Samsung Galaxy

1. Settings › Accounts and backup › Manage accounts — remove the Google Account and the Samsung account.
2. Check Settings › Security and privacy › Lost device protection (Find My Mobile on older One UI) is off.
3. Reset from Settings › General management › Reset › Factory data reset.

Our full factory reset guide covers other brands and how to confirm the wipe worked. After the reset, the phone should land on the welcome screen and let you finish setup without any sign-in — test that before you hand it over.

Locked out of your own phone? The legitimate routes

1. Sign in with the account you used

Many people hit FRP on their own phone because they forgot which Google Account was on it. Try every address you own, including old Gmail accounts and work accounts. On many recent phones you can alternatively enter the previous screen lock PIN or pattern — the one you used before the reset.

2. Recover the Google Account

If you know the address but not the password, use Google’s official recovery at accounts.google.com/signin/recovery on another device. Answer from a device and location you’ve used before when possible, and provide the recovery phone or email you set up. Once recovered, wait for any security delay to pass, then sign in on the locked phone.

3. Go to the manufacturer with proof of purchase

If the account can’t be recovered — say the phone was set up by a relative who has passed away, or by a shop that disappeared — the manufacturer is the legitimate fallback. Samsung service centers, Google’s device support, and authorized service centers for other brands can verify ownership and restore the device. Bring:

• The original receipt or invoice showing the IMEI or serial number,
• Your ID matching the purchase, and
• The phone itself.

Policies and fees vary by country and brand; a phone bought second-hand without a receipt is usually not eligible. In that case, your realistic option is contacting the seller and asking them to sign in and remove their account.

Why FRP “bypass” methods are a bad bet

Search results are full of FRP bypass tools, APK files and “one-click” services. Beyond the obvious problem — on a phone that isn’t yours, bypassing FRP means defeating an anti-theft protection on someone else’s property — they are a poor deal even on paper:

• Google patches the holes. Each Android security update closes the setup-screen tricks that bypasses rely on, and Android 15 made FRP considerably harder to skip by restricting what works before setup is complete.
• The lock often returns. A bypass that skips setup without removing the owner’s link can relock after the next update or reset.
• Malware and scams. Unofficial tools and “remote unlock” sellers are a common source of infected PCs and lost money.
• Warranty and resale. A phone with a tampered setup can be refused at service centers and is hard to resell honestly.

Buying a used Android: how to avoid an FRP-locked phone

FRP status isn’t published in any public database, so the decisive check happens with the phone in your hands. Combine it with remote checks that catch the other problems that tend to travel with locked phones:

1. Get the IMEI with *#06# and run a GSMA blacklist check. A phone reported stolen is often also FRP-locked.
2. Confirm the model and region with Samsung Info for Galaxy phones, the Google Pixel Info check for Pixels, or the Xiaomi check for Xiaomi/Redmi/POCO.
3. Check network lock with a carrier + SIM-lock check so the phone works with your SIM.
4. Rule out company enrollment with an MDM status check if it looks like an ex-corporate device.
5. In person: open Settings › Accounts and confirm the seller removes every account, then factory reset together and make sure setup completes with your Google Account.

Our check before buying page puts these steps in one place.

Run the checks

Enter the IMEI once and pick the reports you need — blacklist, model and carrier — before you meet:

The verdict: FRP is a feature, not a fault. If you own the phone, remove your accounts before every reset and you’ll never see it. If you’re buying, a phone that stops at “Verify your account” belongs to someone else until they sign in — walk away.