How to Bypass FRP (Factory Reset Protection) on Android: A Step-by-Step Guide

Introduction / Why This Is Needed

Factory Reset Protection (FRP) is a security mechanism introduced by Google in Android 5.0 (Lollipop). After resetting a device to factory settings, the system requires entering the credentials of the last synchronized Google account. This prevents the use of a stolen phone after a reset.

However, if you have forgotten your account details or purchased a device with FRP already active (because the previous owner did not remove it), you can find yourself locked out. This guide will help you regain access to your legitimate device by explaining the principles of bypassing and providing practical methods.

⚠️ Important: Bypassing FRP on a device that does not belong to you is a violation of the law and Google's terms of service. Use these methods only on your own phone when you cannot remember/recover the password for your Google account.

Requirements / Preparation

Before you begin, ensure you have:

1. A computer (PC) with Windows/Linux/macOS OS.
2. A USB cable (preferably the original one for a stable connection).
3. Accurate device information: model (e.g., SM-G991B for Samsung S21), chipset (MediaTek, Qualcomm, Exynos, Spreadtrum), current Android version.
4. Device battery charge of at least 50%.
5. Internet access on the PC to download tools and firmware.
6. (Optional) Unlocked bootloader. Some methods require this. If the bootloader is locked, unlocking it often resets all data (including FRP), but not always.

Step 1: Preparing the Device and PC

First, prepare the device itself and the computer.

1. On the device: If you have access to settings, enable USB Debugging and OEM Unlocking (Settings → About Phone → Build Number (tap 7 times) → Developer Options).
2. On the PC: Install drivers for your chipset.
   • Qualcomm: Install Qualcomm USB Driver or QPST.
   • MediaTek: Install MediaTek USB Driver (VCOM).
   • Samsung: Install Samsung USB Driver.
   • General: Install ADB and Fastboot (Minimal ADB and Fastboot or via Android SDK Platform-Tools).
3. Check the connection: connect the phone, run adb devices in the terminal/command prompt. The device's serial number should appear (status device). If not — reinstall the drivers.

Step 2: Identifying the Model and Chipset

Accuracy here is key to success.

1. Open Settings → About Phone.
2. Record:
   • Model (e.g., Redmi Note 8 Pro, SM-A515F).
   • Android version (e.g., 11).
   • Firmware build (e.g., V12.5.2.0.RCRMIXM). It's often listed under Kernel version or can be found using the Phone Info app.
3. Determine the chipset. Often the model indicates the chipset (Snapdragon, Dimensity, Helio, Exynos). For accuracy, install the Device Info HW app (it will show Chipset).

Step 3: Downloading Necessary Tools and Firmware

Depending on the chipset, download the specialized tool and stock firmware (official) for your exact model and region/carrier.

• MediaTek: SP Flash Tool + scatter file and firmware from Needrom or Xiaomi Firmware Updater (for Xiaomi/Redmi/Poco).
• Qualcomm (Samsung, OnePlus, Xiaomi, etc.): QFIL (QPST) + firmware XML file (if available) or Odin for Samsung (.tar.md5 files).
• Spreadtrum: Research Download + scatter file.

Key point: Look for firmware without Google Apps (GApps) or with FRP already removed. Sometimes FRP is tied to the persist or frp partition in the firmware. Firmware without GApps often automatically resets FRP.

Step 4: Choosing the Bypass Method

There are several main approaches. Choose based on your situation:

Method A: Via ADB (if debugging is enabled)

If before the reset USB debugging was enabled, and you can run ADB commands on the device (even in recovery mode), this is the simplest method.

1. Connect the device in fastboot or recovery mode (TWRP, if installed).
2. In the command prompt on the PC, run:

   adb devices
   

   The device should appear.
3. Execute the command to delete the FRP file (relevant for Android 7-9):

   adb shell rm /data/data/com.google.android.gms/*
   

   Or for newer versions, deletion from a different partition may be required. This method becomes obsolete quickly.

Method B: Via Fastboot and frp-bypass.img Patch

For devices with an unlocked bootloader.

1. Download a special frp-bypass.img image for your chipset (e.g., universal patches exist for MediaTek).
2. Reboot the device into fastboot: adb reboot bootloader or via buttons.
3. Flash the patch:

   fastboot flash frp bypass-frp.img
   

   (The partition name frp may differ; sometimes it's persist).
4. Reboot: fastboot reboot.

Method C: Flashing Stock ROM without GApps (Most Universal)

This method erases all data but guarantees FRP removal.

1. Launch SP Flash Tool (or equivalent for your chipset).
2. Click Choose and load the scatter file (usually in the firmware archive).
3. Uncheck all partitions related to persist, frp, userdata (if you want to keep data — but FRP may remain). Check only boot, system, recovery (if needed) and mandatorily preloader (sometimes FRP is in preloader).
4. Click Download and connect the powered-off device (hold Volume Down or Volume Up + Power depending on chipset).
5. Wait for completion (green circle). The phone will reboot.

Method D: Via Service Menu (Engineering Mode)

Works only on older models (Android 5-7) and some Chinese brands.

1. On the Google account entry screen, dial *#*#4636#*#* or *#*#7378423#*#*.
2. The Testing or Service menu will open. Find the Reset or Clear option for FRP or Google Account.
3. Confirm the reset and reboot.

Step 5: Executing the Chosen Method

Let's detail Method C (flashing) as the most universal:

1. Extract the firmware archive. Ensure scatter.txt is inside.
2. Run SP Flash Tool as administrator.
3. Click Choose → Scatter-loading File and point to scatter.txt.
4. In the partition list, find:
   • preloader (usually first) — mandatory.
   • boot (if present).
   • system (sometimes system_a/system_b for A/B).
   • userdata (if you want to erase all data, but FRP is usually in persist or frp).
   • Important: Find partitions persist, frp, or md1img (for MediaTek). Uncheck them if you don't want to flash them (sometimes flashing preloader and boot already removes FRP). But for guarantee, you can check only preloader and boot, leaving others unchecked.
5. Click Download. SP Flash Tool will go into waiting mode.
6. Power off the phone. Press and hold the volume down button (Volume Down), then connect the USB cable to the PC. Do not press other buttons. A COM port should appear at the bottom of the SP Flash Tool window.
7. If the connection is successful, flashing will start (progress bar). Do not disconnect the cable!
8. After completion (a circle with a checkmark appears), disconnect the phone and press the power button.

Step 6: Reboot and Initial Setup

1. The first boot may take 2-5 minutes.
2. Go through the standard setup (language, Wi-Fi).
3. Critical moment: At the stage of adding a Google account, the system should not ask to verify the previous account. If the prompt appears — the method failed, try another or flash the persist partition.
4. Add your Google account and complete the setup.

Verifying the Result

A successful bypass is confirmed by:

1. The absence of the "Enter email and password to verify this is your device" screen after the reset.
2. The ability to sign into Play Store and other Google services with a new account.
3. No Device is locked message when attempting to flash via Fastboot (if the bootloader is unlocked).

Potential Issues

• "Cannot found MTK..." or "No device found": VCOM drivers (MediaTek) not installed/incorrect. Reinstall drivers, disable driver signature enforcement.
• SP Flash Tool error: BROM ERROR: S_CERT_IMG: Firmware does not match the model/region. Ensure the firmware is exactly for your model.
• FRP remained after flashing preloader and boot: Try also flashing persist and frp partitions (if they exist in the scatter file). Or use the fastboot flash frp bypass.img method.
• Device won't enter fastboot mode: Try other button combinations (Volume Up + Power, Volume Down + Power). For some models, the command adb reboot fastboot is needed.
• Method doesn't work on Android 11/12+: On newer versions, FRP is tied to the metadata partition and requires specific patches. Look for solutions on forums (XDA Developers) for your exact model and build.

Alternative Methods

If the described methods don't work:

1. Service centers: Contact an official service center with proof of ownership documents (receipt, warranty). They can remove FRP via special equipment.
2. Online services: There are paid web services that remove FRP by IMEI (e.g., frpfile.com, bypassfrp.com). Their reliability varies.
3. Tweaks via recovery: In TWRP or stock recovery, you can try formatting data and cache partitions, then installing no-verity-opt-encrypt.zip (outdated method for Android 7-9).

💡 Tip: Before any actions, back up important data if you have filesystem access (via MTP or TWRP). Remember that many methods will result in complete data loss.

Preventing Re-lock

After a successful bypass:

1. Add your own Google account in settings.
2. Enable Find My Device (Settings → Security → Find My Device).
3. Memorize or write down the account credentials in a password manager.
4. Do not perform a factory reset without ensuring access to the account.

Final Recommendations

Bypassing FRP is a last resort to get a device working again when you've lost access to your Google account. Methods quickly become obsolete due to Google's security updates. Always look for information for your specific model and Android version on specialized forums (XDA Developers, 4PDA). If you are not confident in your abilities — contact a service center with the device's ownership documents.