Configuring Factory Reset Protection (FRP) in WeGuard

Configuring Factory Reset Protection (FRP) in WeGuard

Factory Reset Protection (FRP) is a vital security layer designed to prevent unauthorized use of a device after a factory data reset. If a managed device is lost, stolen, or reset without authorization, FRP ensures the device remains "locked." It can only be repurposed by entering the credentials of a pre-authorized corporate Google Account.


Retrieving Your Google Account ID - For Admins



The Account ID is a unique internal identifier assigned by Google. It is not the same as your email address and must be exactly 21 digits for FRP to function correctly.

Step-by-Step Retrieval via Google People API

  • Go to the Google People API Explorer

  • In the "Try this API" side panel, enter the following:




  • people/me

  • metadata




  • Click the Execute button. You will be prompted to log in—ensure you use the exact corporate Google Account you intend to authorize for FRP.




  • Scroll through the resulting JSON response to find the "id" field.




  • Example ID: "102938475610293847561"

  • Highlight and copy this 21-digit number for use in the WeGuard Console.

NotesStore these credentials securely. If a device is factory reset and you do not have access to the specific Google Account and password associated with the 21-digit ID, the device will be permanently locked (bricked) as a security measure.


Enabling/Configuring FRP 


  • Log in to your WeGuard Console.
  • From the left-hand sidebar, click Policies and select the policy you wish to modify.



  • Click on the Security tab and toggle ON the FACTORY RESET PROTECTION



  • Enter the Google Account (the full email address of the admin account).

  • Enter the Account ID (the unique 21-digit numerical string).




  • Confirm Entry: Click on the "Save Account" icon to add the account to the authorized list.

  • Click on Change pending, then Save and confirm.




We hope this article was helpful. For additional support: