In a bid to combat smartphone theft, Google is introducing an advanced layer of protection for Android devices by strengthening Factory Reset Protection (FRP). The new measure will ensure that stolen phones cannot be easily repurposed without proper authorization. Announced during The Android Show: I/O Edition, this enhancement will force another factory reset if any unauthorized bypassing of the setup wizard is detected, thus blocking usage until verified ownership through either a Google account or screen lock credentials. Although Android 15 had already fortified FRP against common bypass methods, the upcoming feature is expected to launch later this year, possibly as part of Android 16’s updates.

Smartphones have long been attractive targets for thieves due to their valuable personal data and high resale value on secondary markets. To counteract this, Android incorporates robust theft deterrents such as FRP, which locks down stolen devices after improper resets. When a thief attempts to wipe a phone intended for sale, FRP ensures the device remains inaccessible unless previous ownership is authenticated. This process requires signing into the associated Google account or entering the former lock screen PIN, password, or pattern. Without successful verification, the device becomes unusable.

A trusted reset occurs when initiated through the Settings app menu, which demands authentication with the screen lock beforehand. FRP activates following resets from the recovery menu or via Google’s Find My Device service because these methods circumvent the standard screen lock authentication required in Settings. Despite its effectiveness, FRP has not been entirely foolproof, as thieves have devised ways to bypass it by skipping the setup wizard, enabling use without providing prior owner details.

In response to these challenges, Android 15 introduced several enhancements aimed at reducing the efficacy of setup wizard bypasses. For example, even if someone manages to bypass the wizard, they are prevented from adding new Google accounts, setting fresh screen locks, or installing applications. Furthermore, enabling developer settings like ‘OEM unlocking’ no longer deactivates FRP, meaning the protection persists until ownership is verified. At The Android Show: I/O Edition, Google disclosed plans to further reinforce FRP by restricting all functionalities on devices reset without authorized permission.

This new system will detect unauthorized setup wizard bypasses and prompt users to perform another factory reset. A displayed dialog will inform users that their device was reset but failed authentication during setup, necessitating another reset along with the entry of previous screen lock or Google Account credentials to regain functionality. Such measures enforce proper authentication, ensuring the device remains completely unusable until verified.

With these advancements, Google aims to make stolen Android devices significantly less appealing to potential buyers. By mandating strict re-authentication processes, the company seeks to deter theft and protect user data. Though the exact timeline for this feature’s release remains unclear, it is anticipated to arrive later this year, likely integrated into one of Android 16’s Quarterly Platform Releases (QPRs).