Create an Android Factory Reset Protection Policy

The Android Factory Reset Protection Policy helps you protect company-owned devices in the event they are lost or stolen by preventing unauthorized users from performing a factory reset. You can also control who can unlock a device that has gone through an untrusted factory reset.


A factory reset removes all data from the device.


To create an Android Factory Reset Protection policy:

  1. Log in to the JumpCloud Admin Portal.
  2. Go to DEVICE MANAGEMENT > Policy Management.
  3. In the All tab, click (+).
  4. On the New Policy panel, select the Android tab.
  5. Select the Factory Reset Protection policy from the list, then click configure.
  6. (Optional) On the New Policy panel, enter a new name for the policy, or keep the default. Policy names must be unique.
  7. For Policy Notes, enter details like when you created the policy, where you tested it, and where you deployed it.
  8. Under Settings, complete these fields:
    1. Select Disable Factory Reset to prevent factory resetting fully managed and dedicated devices from the device settings.
    2. Under Factory Reset Protection, determine if verification is required to unlock a device after it has gone through an untrusted factory reset.
      • Select Require Verification to require users to perform account verification via a new Google Admin account.
      • Select Disable Verification to skip Google account verification and not provide factory reset protection.
    3. If Require Verification is selected in the previous step, click Add Email under Google Account Email to enter the Google email addresses of IT admins. If the device is factory reset, the admins specified here will be required log in with their Google account to unlock the device. 


If you don’t provide at least one email address in the Google Account Email field, the device will not be protected against a factory reset.

Configure Factory Reset Protection Policy in the JumpCloud Admin Portal.
  1. (Optional) Select the Device Groups tab. Select one or more device groups where you will apply this policy. For device groups with multiple OS device types, the policy is applied only to the supported devices.
  2. (Optional) Select the Devices tab. Select one or more devices where you will apply this policy.


For this policy to take effect, you must specify a device or a device group in Step 9 or Step 10.

  1. Click save.
Back to Top

Still Have Questions?

If you cannot find an answer to your question in our FAQ, you can always contact us.

Submit a Case