FRP Lock Explained – What It Is and How It Works (2026)
📌 Quick Summary: FRP (Factory Reset Protection) is a Google security feature designed to prevent thieves from using a stolen Android phone after performing a factory reset. When FRP is active, after a factory reset, the device requires the previous owner's Google account credentials to complete setup—effectively locking the device to the original account. FRP automatically activates when you add a Google account to your device and becomes "triggered" when a factory reset is performed through recovery mode or system settings without first removing the Google account. This guide explains how FRP works, when it activates, legitimate ways to bypass it (using your own credentials), and common misconceptions about FRP removal tools.
You bought a used phone online. It arrived, you turned it on, and after going through the setup screens, you hit a wall: "This device was reset. To continue, sign in with a Google account that was previously synced on this device."
You're locked out. The previous owner didn't remove their Google account before resetting. This is FRP—Factory Reset Protection—in action.
FRP is one of the most misunderstood security features on Android. To legitimate users, it can feel like an obstacle. But to thieves, it's a powerful deterrent. Since its introduction with Android 5.1 Lollipop, FRP has dramatically reduced the resale value of stolen Android devices, making theft less profitable.
This guide explains everything you need to know about FRP:
- What FRP is and how it works – The technical explanation in plain English.
- When FRP activates – The specific conditions that trigger the lock.
- How to avoid triggering FRP – Important steps before resetting or selling your device.
- Legitimate ways to bypass FRP – Using your own credentials or manufacturer support.
- FRP removal tools and myths – What actually works and what's dangerous.
Let's start with the most important thing to understand: FRP is a security feature, not a bug or a lock that you've been "trapped" by—unless you're not the original owner.
What is FRP (Factory Reset Protection)?
Factory Reset Protection is a Google security feature introduced with Android 5.1 Lollipop in 2015. Its purpose is simple: prevent unauthorized users from using a stolen Android device after performing a factory reset .
Before FRP, a thief could steal an Android phone, perform a factory reset (usually through recovery mode), and set it up as a new device—completely wiping any trace of the original owner. The phone would be clean and usable, ready to be sold on the black market .
FRP closes this loophole. When FRP is active, a factory reset doesn't fully wipe the device. It leaves behind a "latch" that requires the previous Google account credentials to complete setup . Without those credentials, the device becomes an expensive paperweight.
The Simple Analogy
Imagine you have a safe with a combination lock. You store your valuables inside, then close the door. FRP is like a secondary lock that activates when someone tries to force the safe open. Even if they crack the main lock, they still need a second key—one that only you have—to access the contents.
In technical terms, FRP works by storing a token on the device's persistent data partition. This token is tied to the Google account that was last active on the device. When a factory reset occurs, the token remains, and the setup wizard checks for it. If a token exists, the wizard demands the associated Google credentials .
How FRP Works – The Technical Explanation (Simplified)
Here's what happens behind the scenes when FRP is active on your device.
Step 1: FRP Becomes Active
FRP automatically activates when you do two things:
- Add a Google account to your device (during initial setup or later).
- Set a screen lock (PIN, pattern, password, or biometric).
Once both conditions are met, the device is "FRP-protected." The Google account's unique identifier is stored in a secure partition that survives factory resets .
Step 2: Factory Reset is Performed
When someone performs a factory reset—either through Settings or recovery mode—the main user data partition is wiped. However, the secure partition containing the FRP token remains untouched .
Step 3: Device Reboots to Setup Wizard
After the reset, the device boots into the Android setup wizard (the same screens you see when you first unbox a new phone). The wizard checks for an FRP token. If found, it adds an extra step: Google account verification .
Step 4: Account Verification Required
The user is prompted to sign in with a Google account that was previously synced on the device. This doesn't have to be the exact same account—any Google account that was ever active on the device before the reset will work. If the user cannot provide valid credentials, the setup cannot proceed .
✅ Important: FRP only locks the setup wizard. If you know your Google account credentials, you can simply sign in and continue. FRP is not a permanent lock—it's a verification step.
When Does FRP Activate?
FRP activates under specific conditions. Understanding these helps you avoid accidentally triggering it.
| Action | Does FRP Trigger? | Why / Why Not |
|---|---|---|
| Factory reset from Settings (with Google account still signed in) | ✅ YES, after reset | The reset wipes data, but the FRP token remains. The device will ask for Google credentials on next setup. |
| Factory reset from Settings (after removing Google account first) | ❌ NO | Removing the Google account clears the FRP token. The device resets clean with no FRP lock. |
| Factory reset from recovery mode (with Google account on device) | ✅ YES | Recovery mode wipes data but cannot remove the FRP token. The token survives the wipe. |
| Flashing stock firmware via PC tool (Odin, Mi Flash, SP Flash Tool) | ⚠️ DEPENDS | If the flash wipes the userdata partition but leaves the FRP partition intact, FRP may remain. Some tools can wipe the FRP partition. |
| Flashing custom ROM or TWRP | ⚠️ DEPENDS | Custom recoveries can wipe the FRP partition. This is how some FRP bypass tools work. |
📌 Critical Note for Sellers: If you're selling or giving away your phone, always remove your Google account before performing a factory reset. Go to Settings → Accounts → Google → Remove account. Then perform the factory reset. This prevents FRP from locking the device for the new owner.
How to Avoid Triggering FRP (Legitimate Users)
If you're the legitimate owner of your device, avoiding FRP lock is simple: don't factory reset without first removing your Google account.
Proper Steps Before Selling or Giving Away Your Phone
- Back up your data – Photos, messages, contacts, and app data.
- Remove your Google account(s):
- Settings → Accounts → Google → Select your account → Remove account.
- Repeat for any additional Google accounts.
- Remove your screen lock (optional but recommended):
- Settings → Security → Screen lock → Set to "None".
- Perform a factory reset:
- Settings → System → Reset options → Erase all data (factory reset).
- Verify the device boots to setup without Google account prompt – The new owner should be able to set up the device with their own Google account.
What If You Forgot to Remove Your Google Account?
If you've already performed a factory reset and the device is asking for a Google account, don't panic. You have two legitimate options:
- Enter your Google account credentials – If you remember the email and password, simply sign in. The setup will complete normally.
- Recover your password – Use Google's account recovery process (google.com/account/recovery) if you've forgotten your password.
Common FRP Myths and Misconceptions
| Myth | Reality |
|---|---|
| "FRP is a bug or glitch" | No. FRP is an intentional security feature designed to deter theft. It works as designed. |
| "Flashing stock firmware removes FRP" | Not always. Most stock firmware flashes leave the FRP partition intact. Some tools have options to wipe it. |
| "Removing the battery removes FRP" | No. FRP data is stored in persistent flash memory, not volatile RAM. Removing the battery does nothing. |
| "FRP can be bypassed with a simple code" | No. While exploits exist, they are patched quickly by Google and are not universal across all devices or Android versions. |
Legitimate FRP Bypass Methods (For Your Own Device)
If you're locked out of your own device because you forgot to remove your Google account before resetting, you have several options.
Method 1: Simply Sign In
This is the easiest and most legitimate method. Enter the Google account email and password that was previously on the device. If you've forgotten your password, use Google's account recovery process.
Method 2: Use a Previously Synced Google Account
FRP doesn't require the exact last account—it accepts any Google account that was ever synced on the device before the reset. If you had multiple accounts on the device, try each one.
Method 3: Contact Your Device Manufacturer
Some manufacturers (Samsung, Google, OnePlus) can help you bypass FRP if you provide proof of purchase. You'll need to contact their support and provide the original receipt or invoice showing you are the legitimate owner.
Method 4: Use Find My Device (Google)
If you can access Google's Find My Device portal (android.com/find), you can remotely lock or erase the device. In some cases, this can reset the FRP state.
🚨 WARNING: FRP Bypass Tools Are Often Scams
Many websites and YouTube videos promote "FRP bypass tools" or "FRP unlockers" that claim to remove FRP for free. Most of these are malware, adware, or scams. They may steal your personal information, install viruses on your computer, or simply waste your time. Legitimate FRP bypass is complex and device-specific—there is no "one-click" universal solution. If you're locked out of your own device and can't sign in, contact the manufacturer or use official Google recovery methods.
FRP and Custom ROMs / Rooting
If you're an enthusiast who installs custom ROMs or roots devices, understanding FRP is essential.
Does FRP Affect Custom ROM Installation?
Yes. If you perform a factory reset or wipe data in TWRP without removing your Google account first, FRP will be triggered. When you boot into the new custom ROM, the setup wizard will ask for your Google credentials—the same as on stock.
How to Avoid FRP When Flashing Custom ROMs
- Before wiping anything, go to Settings → Accounts → Google → Remove your account.
- Then reboot to TWRP and perform the wipe (Dalvik, System, Data, Cache).
- Flash your custom ROM and GApps.
- Reboot. The setup wizard should not ask for Google credentials because the FRP token was cleared when you removed the account.
Can TWRP Remove FRP?
Yes, TWRP can wipe the FRP partition. In TWRP, you can go to Advanced → Terminal and run:
dd if=/dev/zero of=/dev/block/by-name/frp This command zeros out the FRP partition, effectively removing the lock. This should only be done on your own device—using it on a stolen device is illegal.
FRP on Different Manufacturers
While FRP is a Google feature, manufacturers implement it slightly differently.
| Manufacturer | FRP Behavior | Special Notes |
|---|---|---|
| Samsung | Standard Google FRP | Samsung adds Knox security, but FRP is separate. FRP lock does not trip Knox. |
| Xiaomi / Redmi / POCO | Google FRP + Mi Account lock | Xiaomi adds its own FRP-like feature (Mi Account lock). You may need to remove both Google and Mi accounts before resetting. |
| OnePlus / Oppo / Realme | Standard Google FRP | MSM Download Tool can sometimes wipe FRP partition during full firmware restore. |
| Google Pixel | Standard Google FRP | Flashing factory image with flash-all.bat (which includes the -w wipe flag) typically wipes FRP as well. |
Frequently Asked Questions (FAQs)
1. I bought a used phone and it's FRP-locked. What can I do?
Contact the seller. The previous owner must remove their Google account from the device remotely or provide you with their credentials. If the seller cannot do this, return the device for a refund. There is no legitimate way for you to bypass FRP on a device you didn't own.
2. Does FRP lock the phone permanently?
No. FRP only locks the setup wizard. If you know the Google account credentials that were previously on the device, you can sign in and unlock it. If you don't, the device is locked to that account. Google does not provide an official backdoor.
3. Will a factory reset from recovery mode trigger FRP?
Yes. If a Google account was on the device before the reset, performing a factory reset from recovery mode will trigger FRP. The only way to avoid FRP is to remove the Google account before resetting.
4. Can I bypass FRP by flashing stock firmware?
Not always. Most stock firmware flashes leave the FRP partition intact. Some manufacturer tools (like MSM Download Tool for OnePlus) have options to wipe the FRP partition. On Samsung, flashing with Odin's CSC (not HOME_CSC) may wipe FRP, but it's not guaranteed.
5. Does FRP affect custom ROMs?
Yes. If you wipe your device in TWRP without first removing your Google account, the custom ROM's setup wizard will also ask for Google credentials. Remove your Google account before wiping to avoid this.
6. How do I know if FRP is active on my device?
There's no direct indicator in settings. The only way to know is to perform a factory reset (without removing your Google account) and see if the setup wizard asks for credentials. If you're preparing to sell your device, assume FRP is active and remove your Google account before resetting.
7. Can a thief bypass FRP?
Sometimes, but not easily. FRP exploits exist, but they are patched quickly by Google. Modern Android versions (13+) have made FRP significantly harder to bypass. Most thieves simply part out stolen devices for components rather than trying to bypass FRP—which is exactly what Google intended.
Conclusion: Respect the Security Feature
FRP is one of the most effective anti-theft measures Google has ever introduced. Since its debut in 2015, it has dramatically reduced the black market for stolen Android phones . A stolen device is now far less valuable because the average thief cannot bypass FRP to resell it as a working phone.
For legitimate users, FRP is simple to manage:
- Before resetting your device: Remove your Google account first.
- Before selling or giving away: Remove your Google account, then factory reset.
- If you're locked out of your own device: Sign in with your Google credentials or recover your password.
Your FRP checklist:
- ☐ Before factory resetting, always go to Settings → Accounts → Google → Remove account.
- ☐ For Xiaomi devices, also remove your Mi Account.
- ☐ For Samsung devices, also check if Samsung account is signed in.
- ☐ After removing accounts, perform the factory reset through Settings (not recovery mode).
- ☐ If buying a used phone, ensure the seller demonstrates that FRP is not active before you pay.
FRP is not your enemy. It's a security feature designed to protect you if your device is ever lost or stolen. Treat it with respect, understand how it works, and you'll never be locked out of your own device.
This article is for educational purposes only. Bypassing FRP on a device you do not own may be illegal in your jurisdiction. The author and platform do not condone the use of FRP bypass tools on stolen devices. The information presented here is current as of April 2026 and is based on Google's official documentation and community-verified knowledge.
Your path to FRP-free device management begins not with bypass tools—but with remembering to remove your Google account before you reset.