Samsung FRP lock: why it appears and how to get past it legitimately

You reset a Galaxy, and setup stops at "This device was reset. To continue, sign in with a Google account that was previously synced on this device." That is Factory Reset Protection. It exists so a stolen phone is worthless after a wipe, and it works the same way for an owner who simply forgot which account was on it.

What sets it off

FRP has been part of Android since version 5.1. As soon as a Google account is added, the phone records it. If the phone is later wiped in a way the system cannot confirm came from the owner, setup asks for that account again. The typical cases:

  • A factory reset from the recovery menu (Volume Up and Power, Wipe data/factory reset).
  • A flash in Odin with the full CSC file, which wipes the phone the same way.
  • A remote erase from Google Find My Device or Samsung Find.

A reset from Settings by someone who knows the screen lock is treated as trusted on most current devices, but do not rely on that: remove the accounts first (see below).

You can see the state without booting. In Odin mode the line FRP LOCK: ON means a Google account is registered. Its sibling message, "Custom binary blocked by FRP lock", appears when unofficial software meets that lock; that case is covered in the return to stock guide.

Samsung has a second, separate lock: Reactivation lock, tied to the Samsung account. If both are active, the phone asks for the Google account and then the Samsung account.

Legitimate ways to remove FRP

Each of these works on a phone that is yours or that its owner agrees to release.

Sign in with the account that was on the phone

Connect to Wi-Fi and enter the Google account and password. If you have several accounts, try each; the phone accepts any Google account that was synced on it before the reset. The screen lock PIN or pattern that was set before the reset is accepted on some versions of setup as an alternative.

If you recently changed the password, wait. Samsung's own support pages give a window of 24 to 72 hours during which a newly changed password is not accepted for setup. Each wrong attempt can restart that clock, so wait the full 72 hours, then enter the new password once, carefully.

Recover the account

If you forgot the password or even the address, use Google's account recovery on another device or a computer. Recovery asks for things only the owner has: the recovery phone or email, an old password, a device already signed in. Once you are back in, use the recovered details on the locked phone (and mind the waiting period above).

Ask the previous owner

For a second-hand phone, the seller can sign in to their Google account on a computer, open the security page, find the phone under "Your devices" and sign out of it. That clears the lock in many cases, though not always; the surest route is still for the seller to type their password on the phone once, in person. If a Samsung account is also attached, they should remove the device from it in Samsung Find as well.

Before a reset: Samsung Find remote unlock

If the phone is not reset yet and you only forgot the screen PIN, do not reach for recovery. Samsung Find (previously SmartThings Find and Find My Mobile) can remove the screen lock remotely, provided Remote unlock was enabled under the Samsung account and the phone is online. The phone then opens without a reset, so FRP never comes up. After a reset this option no longer helps.

Samsung service centre

With the original receipt or invoice that matches the IMEI, an authorised Samsung service centre can handle an FRP-locked device. Policies and fees vary by country; call first and bring ID.

This site does not provide or link to FRP bypass methods. They are mostly used on lost and stolen phones, and an owner with proof of ownership has the legitimate routes above.

Does flashing firmware remove FRP?

No. This is the most common misunderstanding, and the reason many people look for firmware in the first place.

Stock firmware replaces the system: Android, the bootloader, the modem, the region settings. With the full CSC file it also wipes your apps and data. The FRP record is kept in a small protected area that firmware packages do not write to, precisely so that a reflash cannot erase it. So after a clean flash of the newest official build, the phone boots into setup and asks for the same Google account as before.

Reinstalling firmware is still the right move when the phone does not boot at all, for example after a failed update. It brings Android back. It just does not change who the phone belongs to.

Before you sell or reset

  1. Back up what you want to keep with Smart Switch, Google One or Samsung Cloud.
  2. Settings, Accounts and backup, Manage accounts: remove the Google account and the Samsung account. You will be asked for the passwords.
  3. Turn off the screen lock (Settings, Lock screen, Screen lock type, None).
  4. Settings, General management, Reset, Factory data reset.
  5. When setup appears after the reset, the phone is clean. Turn it off there.

Before your own reset (not a sale), write down the Google address on the phone and check that you can sign in with it on a computer. It takes a minute and saves days.

Buying a used Galaxy

  • Ask the seller to reset the phone in front of you, or bring it to the setup screen and get through the Google step yourself with your own account.
  • Check that Odin mode shows FRP LOCK: OFF after the account is removed, and that KG STATE is not Locked or Active, which points to a financed or company-managed phone.
  • A phone sold as "FRP locked, just flash it" is not fixable by flashing, as explained above.

Related guides

Find firmware for your modelAll guides