Factory Reset Protection (FRP) on Android devices

Understanding the /frp Partition in Android Devices

Have you ever reset your Android phone to its factory settings and found it asking for your Google account password? That's Factory Reset Protection (FRP) at work—a security feature that keeps your device safe from unauthorized access.Let's dive in and uncover what it does, how it works, and why it matters—all in a way that's easy to follow, whether you're new to tech or a seasoned pro!

What is Factory Reset Protection (FRP)?

Imagine someone steals your phone, resets it, and starts using it like it's theirs. Scary, right? FRP stops that by locking your device after a factory reset until the original Google account credentials are entered.

The /frp partition is the key player here—it's where the device stores the info that tells it to enforce this protection. Let's see how it all comes together.

What Happens During a Factory Reset?

A factory reset wipes some parts of your device but leaves others alone. The /frp partition? It stays untouched. Here's a handy table to break it down:

Partition	Wiped?	What's Inside?
/data	✅	Your apps, settings, and personal stuff
/cache	✅	Temporary system files (less used in new Androids)
/metadata	✅	Encryption info and some FRP bits
/system	❌	The core Android operating system
/frp	❌	FRP lock info, like Google account details
/boot	❌	Startup files (kernel and more)
/vendor	❌	Manufacturer-specific system files
/modem	❌	Cell network firmware
/sdcard	❌/✅	Your photos and files (depends on reset options)

Big Takeaway: Since /frp doesn't get wiped, FRP stays active after a reset unless you turn it off properly beforehand.

How Does the Bootloader Use the /frp Partition?

Every time your Android device powers on, the bootloader (think of it as the gatekeeper of your phone) kicks into action. Here's what it does with the /frp partition:

• Checks the Status: The bootloader peeks at the /frp partition to see if FRP is turned on.
• After a Reset: If FRP is active and you've just done a factory reset, it'll demand the Google account username and password tied to the device before letting you in.
• Keeps Thieves Out: Without those credentials, the device stays locked—pretty neat, huh?

🧪 What If You Delete the /frp Partition?

I did an experiment to find out the content of /frp partition in a phone with multiple google accounts, PIN lock, fingerprint and face lock. Here's what the partition contained (Not human readable)

After that I removed all google accounts, removed security PIN, fingerprints and face data. Then I formatted the phone and took a backup of /frp partition and surprisingly as you can see it still has some data written on it.

So what this data could be? may be a configuration saying frp is disabled or this device has been reset but by authorized user so don't prompt user to provide previous google account or it could have something suggesting that the person did not used means other than removing google account from the phone settings.

We really don't know 😕 it depends on the OEM to implement that feature.

Curious what happens if the /frp partition goes poof? It depends on your device's bootloader:

• 🔐 Secure Bootloaders (newer phones):

  • These are smart. If /frp is missing or messed up, they might lock the device anyway or still ask for your Google account to be safe.
  • Worst case? The phone might not even boot!

• 🔓 Weak/Legacy Bootloaders (older or cheaper devices):

  • Not so clever. If /frp is gone, they might skip the FRP check, letting anyone in.
  • This is a security hole hackers love to exploit.

• 🛠️ Custom ROMs:

  • These vary wildly. Some skip FRP entirely; others add their own security twists.

Bottom Line: Deleting /frp isn't a safe or surefire way to unlock a device. It's risky and could leave your phone unusable.

⚠️ A Word of Caution: Legal and Ethical Stuff

Messing with FRP to bypass it without permission isn't just tricky—it's illegal in many places. Plus, it could void your warranty. Stick to legit ways of handling your device, like using your own Google account to unlock it.

📦 FRP Storage by Platform (with Handling Methods)

Platform	FRP Storage Partition(s)	Typical FRP Handling Methods
MediaTek	/frp (dedicated raw partition)	- Disable via SP Flash Tool by writing clean FRP block (with auth) - Format /frp (⚠️ risky)
Qualcomm	/persist, /modemst1, /modemst2	- QFIL / QPST tool access (with correct firehose XML) - EDL mode reset (requires authorization) - MiFlash, fastboot commands (if allowed)
Samsung	/persistent, TrustZone, secure eMMC	- Official FRP unlock via Samsung tool - Combination firmware + Odin - TalkBack exploit (patched)
Pixel / AOSP	/metadata or internal encrypted storage	- OEM unlocking after account removal - Fastboot flashing not possible without auth - Requires Google account login

🎯 Wrapping It Up

The /frp partition might be small, but it's a heavyweight in keeping your Android device secure. It teams up with the bootloader to make sure only you can use your phone after a reset. Pretty cool, right?

Quick Tips:

• Planning to reset and pass on your device? Remove your Google account first.
• If you have device manufacturer account on device for example Mi Account, remove that too.
• Don't try bypassing FRP unless it's your device—it's risky and often illegal.
• First use exploits like(talkback or sim pin) during setup after hard reset. If it fails then only try to format /frp partition