Note: The following information applies to all Android devices.

Android Rollback Protection is a security function that checks whether the software to be installed is newer than the software already on the device when installing or updating mobile devices. This is intended to prevent unauthorized or older, potentially unsafe versions from being installed on devices and instead only allow updates for an existing operating system.


Google explains directly.

Rollback Protection explained by Google


Effects of device use


In day-to-day operations, passwords may be forgotten or employees may leave the company. In such cases, FRP (Factory Reset Protection) can prevent the device from being used again.

What does FRP mean?

FRP requires the last Google account details used to unlock the device to be entered. Without this information, the device cannot be reset to factory settings. As Google is continuously improving the security mechanisms in Android, it may no longer be possible for the manufacturer to reset the device. Precautionary password management or the involvement of the IT department may be necessary to ensure access to the devices.



 Recommended precautions


Device management via an MDM (Mobile Device Management):
  • Companies should use an MDM system to manage devices and prohibit users from resetting devices.
  • When using devices in COD mode (Company Owned Device), there are two separate profiles for the device. It is not possible for the user to delete the company profile, which also applies to the user profile.
Additional account for the IT department:
  • The IT account can be used to make the device usable again after a reset, by using the IT department's Google account for unlock
  • Note: The user can delete the Google accounts of IT and thus permanently lock the device.
Creating a second user account/guest:
  • By creating a second user account, IT can also access the device after a reset. Each user can set their own unlock PIN. This is particularly relevant for companies with several employees.
  • Resetting via the user account/guest is not possible. This is only possible for the owner/administrator of the device.
  • A new user account can be generated under "Settings -> System -> Multiple users".