Mobile Security· By Venkatesh AGE

How to Factory Reset a Company Phone for a New Employee

Yes, you can factory reset a company phone, but do it in the right order or factory reset protection can lock it for good. The steps, in plain English.

Sign the previous Google account out of the phone first, then factory reset it, then enroll it for the new person. In that order. Reset a phone without signing the old account out and factory reset protection will demand that account’s password on the next boot, and if the person who left is not answering your emails, the handset is a paperweight.

That one ordering mistake accounts for most of the dead phones sitting in small business drawers.

Here is the full process.

Step one: get the device back properly

Before you wipe anything, take thirty seconds to record what you are handing on. Make, model, IMEI or serial, and who had it last.

If you have never kept an asset list, start it now with this device. It takes a minute per handset and it is what makes every later question answerable.

Step two: sign out of Google, on the device

This is the step people skip.

On the handset, go to Settings, Accounts, and remove the Google account that is signed in. If there is more than one, remove all of them.

Android’s factory reset protection exists to make stolen phones worthless. After a reset, the device checks whether a Google account was signed in before the wipe, and if so it demands that account’s credentials during setup. There is no supported bypass, and there should not be one.

If the employee has already gone and you cannot get the password, contact them and ask. Most people will help; it costs them nothing. If they will not, and the device is enrolled in management, wiping it through your console keeps the device under your organisation’s control rather than leaving it locked to their personal account. That difference is a good reason to enroll devices before you need to.

Step three: wipe it

Two ways, depending on whether the phone is managed.

If the device is enrolled, issue the erase from your console. This is cleaner: the device is wiped and removed from your fleet in one action, and you have a record of who did it and when, which sits in the audit log.

If it is not enrolled, do it on the handset: Settings, System, Reset options, Erase all data. Give it several minutes and a charger.

Either way the device reboots to the welcome screen it had out of the box.

Step four: enroll it for the next person

Do not hand over an unmanaged phone that you have just gone to the trouble of wiping.

The device is sitting at the factory-reset welcome screen, which is exactly where enrollment starts. Tap the same spot six times, scan your QR code, and the phone configures itself with the right policy and apps for whoever is getting it. The full walkthrough is in setting up a company Android phone in ten minutes.

This is the cheapest moment you will ever have to bring a device under management, because the reset has already happened. Skipping it means doing the reset again later.

Step five: assign it

In your console, assign the device to the new employee by name and put it in the right group.

Unassigned devices are how businesses end up with phones nobody can account for. Two clicks now saves an awkward conversation in eight months.

What about personal data on the handset?

On a company-owned phone that has been used by an employee, there will be personal things: photos, a WhatsApp history, saved logins. A factory reset removes all of it, and there is no way to wipe selectively on a company-owned device.

Give the person notice. A short message saying the phone will be wiped on their last day and they should save anything personal first is fair, takes no effort, and avoids a genuinely upsetting phone call about lost photos of somebody’s children.

Putting that expectation in your phone policy from the start is better still, so nobody is surprised.

Common mistakes

Resetting before signing out. Covered above, and the expensive one.

Removing the device from your console before wiping it. Delete the record first and you lose the ability to send the erase command. Wipe, then remove.

Assuming a reset removes management. On a properly enrolled company-owned device it does not, by design. The device returns to your organisation’s enrollment, which is the behaviour you want.

Handing over without checking it boots. Power the phone on after the reset and make sure it reaches the welcome screen before you promise it to somebody for Monday morning.

Forgetting the SIM and the case. Not a security issue. Still annoying.

What to do this week

  1. Check the drawer. Most small businesses have at least one old company phone in a drawer. Find out whether it is wiped, whether it is still in your console, and whether it is locked to somebody’s account.
  2. Write the five steps on a card: sign out, wipe, enroll, assign, record. Give it to whoever handles handovers.
  3. Add “sign out of Google” to your exit checklist. It is the one step that turns a reusable handset into a dead one, and it takes the departing employee ten seconds.

FAQ

Does a factory reset remove device management?

Not on a company-owned device enrolled through Android Enterprise. That is the point: management survives a reset so an employee cannot opt out. The device comes back to your organisation.

What if the old employee will not give me their Google password?

If the device was enrolled in management before they left, wipe through your console and the device stays under your organisation’s control. If it was never enrolled, factory reset protection may leave the handset unusable, and Google’s own recovery process is the only route.

Can I wipe just the work data and leave personal files?

Not on a company-owned device. Separating work and personal data requires a work profile, which applies to personal devices and which NounDesk does not support. On company hardware, a wipe is everything.

How long does the whole process take?

About fifteen minutes of elapsed time and maybe four minutes of your attention: a couple of minutes to sign out, five to ten for the reset, then the enrollment runs itself.

Getting the order right turns device handover into a routine task. Getting it wrong turns a working phone into a locked one.

See how enrollment works, or start a free trial and bring the drawer phones back into use.