Database Users

[Guide] FRP Bypass Solution *WITHOUT* USB OTG (Tested on Stock Rooted Project Fi Rom)

So I fell victim to googles new FRP Security feature that requires you to log in using the same gmail account associated with the phone before it was reset. Short of it was I decided to flash a 6.0 ROM after using the 5.1.1 ROM to get my Project Fi account activated correctly.
After flashing 6.0 and I began going through the setup wizard where I was eventually prompted to enter the credentials for the account that I had used previously. I entered my credentials and was then sent to another screen asking me to reset my Gmail password (Turns out google decided my login attempt was suspicious...). So i reluctantly reset the password not knowing I had just screwed myself(for 72 hours at least). There is a 72 hour reset time from the time you changed your account password until you're able to use it to authenticate during the setup process and until you authenticate you cant use the phone.
Not having a backup phone I took to google and found that the only way around this problem involved a USB OTG storage device loaded with an apk that causes the settings app to launch allowing you to do a real factory reset(complete wipe of all credentials and data). Resetting the phone this way removes any account associations allowing you to setup the phone as if it were new once you've re-flashed it.
Not having the tools needed to do it that way I thought about it and decided to try a few things out and eventually found my solution.
Disclaimer: I am not responsible for any damage or loss of data that may result from the following procedure.
Solution
Requirements
A computer with adb installed
USB cable
Rom with Persistent ADB Enabled (I used the 5.1.1 Stock, Rooted Project Fi ROM)
Phone booted and at the Setup Wizard
Procedure
Have the phone turned on and sitting at the startup wizard
Connect the USB to you computer and then plugin your phone ( I assume you've already setup ADB)
The phone may then prompt you and ask to verify the device fingerprint which you will say yes to
open a terminal and type:
Code:
adb shell
Code:
am start -S com.android.settings -c android.intent.category.LAUNCHER 1
This will launch the Settings.apk
***NOTE: This will completely wipe your phone!*** (Edit: The Reset program claims to wipe all internal storage but for whatever reason my SDcard data was not touched. Would still recommend pulling any wanted data from the device prior to resetting)
Go to the Backup & Reset menu and perform a factory reset
After the phone finishes resetting, proceed to boot back into Recovery mode and re-flash your ROM
The Setup Wizard will now go through the steps without the FRP authentication steps.
Again, I have only tested this on my T-Mobile Nexus 6 (using Project Fi) running 5.1.1 so your mileage may vary depending on your setup. If you find this worked or didn't work for your particular setup/situation then post your results here.
Hope this helps!
EDIT: The original solution using the USB OTG storage can be found here.
Just to clarify a bit. The problem that these two methods try and fix stems from a new feature introduced in Lollipop called FRP(Factory Reset Protection). It is meant to keep someone that has stolen a phone from being able to use it by simply doing a factory reset and reinstalling the OS. To counter this, google requires the user to verify they're the owner of the device that was reset by giving the credentials of the google account associated with the phone before it was reset. The issue arises when the password to this account is changed after the device was reset but before verifying ownership of the device during the setup process. When this happens, you have to wait 72 hours before you will be able to verify ownership using the new password.
Edit 2: Specified having a ROM with Persistent ADB Enabled as a requirement for this to work.

I don't really follow your problem. It sounds like you may be using 2 factor authentication? If not You Should!
Also once you set up 2 factor make sure to print out the one time codes.
Maybe that wouldn't fix this, but I thought this was one of the things the one time codes get around.
Sorry if you're really saying that you can't reset your phone for 3 days after you change your password. If it is really that simple it seems pretty broken. I'd call Google on the phone. They are the only major corporation I've ever seen that has a phone answered by people that know what they're doing and can actually help you.
Sent from my Nexus 6 using Tapatalk

joyrida12 said:
...snip...
Click to expand...
Click to collapse
Ah, a workaround, nice!!! Tahnks for sharing!
Keep "OEM unlocking" enabled in the future. It will disable "Device protection"
---------- Post added at 02:27 PM ---------- Previous post was at 02:27 PM ----------
ethutch said:
I don't really follow your problem. It sounds like you may be using 2 factor authentication? If not You Should!
Also once you set up 2 factor make sure to print out the one time codes.
Maybe that wouldn't fix this, but I thought this was one of the things the one time codes get around.
Sorry if you're really saying that you can't reset your phone for 3 days after you change your password. If it is really that simple it seems pretty broken. I'd call Google on the phone. They are the only major corporation I've ever seen that has a phone answered by people that know what they're doing and can actually help you.
Sent from my Nexus 6 using Tapatalk
Click to expand...
Click to collapse
This is not about 2 way auth i'm affraid

ethutch said:
I don't really follow your problem. It sounds like you may be using 2 factor authentication? If not You Should!
Also once you set up 2 factor make sure to print out the one time codes.
Maybe that wouldn't fix this, but I thought this was one of the things the one time codes get around.
Sorry if you're really saying that you can't reset your phone for 3 days after you change your password. If it is really that simple it seems pretty broken. I'd call Google on the phone. They are the only major corporation I've ever seen that has a phone answered by people that know what they're doing and can actually help you.
Sent from my Nexus 6 using Tapatalk
Click to expand...
Click to collapse
No, this isn't an issue with 2FA. From Google's standpoint this isn't an issue at all actually. This verification is, to my understanding, only required when the device is factory reset in recovery mode.
The purpose of 72 hour lock period seems to be there to protect user in the event someone is trying to gain access to their phone/account.
This normally isn't an issue since most people won't change their password in that small timeframe. In order to not require the verification, you have to disassociate the account from the phone before resetting it. This is done for you when you do a reset from the settings app on the phone. That's the reason for using these methods, it does a full reset including account removal.
Sent from my Nexus 6 using Tapatalk

@joyrida12
Would you mind sharing the other solution you found? The one *with* USB OTG.
Thanks in advance!

Droidphilev said:
@joyrida12
Would you mind sharing the other solution you found? The one *with* USB OTG.
Thanks in advance!
Click to expand...
Click to collapse
Edited the post and added a link to it
Sent from my Nexus 6 using Tapatalk

joyrida12 said:
Edited the post and added a link to it
Sent from my Nexus 6 using Tapatalk
Click to expand...
Click to collapse
perfect, thanks!

Great work around.
I love that Google is putting in theft detection. A good fix to this chaos would be to require you to auth to do a reset from settings. That would close the hole. They also need to allow you to skip the 72 hour reset time with more security questions/answers. You know Google caches your PC settings. Simply logging into your google account from a known PC would be a great way to allow account authentication.

I am about to return my phone to amazon so just factory resetting through the settings menu will be fine for returning the phone so the next person doesn't have problems?
Sent from my Nexus 6 using Tapatalk

So to recap. It will NOT work on a device that was reset. Since USB debugging is off after a reset.

player911 said:
Great work around.
I love that Google is putting in theft detection. A good fix to this chaos would be to require you to auth to do a reset from settings. That would close the hole. They also need to allow you to skip the 72 hour reset time with more security questions/answers. You know Google caches your PC settings. Simply logging into your google account from a known PC would be a great way to allow account authentication.
Click to expand...
Click to collapse
That was my thoughts exactly as it was happening to me, I initially was trying to figure out if there was an alternate authentication method and was a little surprised not to find one.
I really like the direction they're moving with thus security feature but I think it was thrown out a bit early. Nexus users are more likely to be doing factory resets and locking them with no way of fixing it (aside from waiting 3 days) out because they did so on a custom recovery isn't very cool on their part lol.
Sent from my Nexus 6 using Tapatalk

sthpaw01 said:
I am about to return my phone to amazon so just factory resetting through the settings menu will be fine for returning the phone so the next person doesn't have problems?
Sent from my Nexus 6 using Tapatalk
Click to expand...
Click to collapse
Yes, that will work just fine.
yossijoe said:
So to recap. It will NOT work on a device that was reset. Since USB debugging is off after a reset.
Click to expand...
Click to collapse
It worked for me. Before I figured this method out I had reset and flashed 2 6.0 ROMs and then the 5.1.1 ROM. Once I got to the setup wizard my device was listed under adb devices and I was able to get a shell.
Edit: It could be that the project fi ROM has USB debugging enabled by default(just a guess, haven't looked at the source to verify).
Edit 2: Confirmed that the Stock, Rooted, decrypted 5.1.1 ROM for Project Fi has persistent ADB enabled. Adding this as a requirement to the original post.
Sent from my Nexus 6 using Tapatalk

sthpaw01 said:
I am about to return my phone to amazon so just factory resetting through the settings menu will be fine for returning the phone so the next person doesn't have problems?
Sent from my Nexus 6 using Tapatalk
Click to expand...
Click to collapse
He's wrong, that absolutely will not be fine.
You need to make sure to remove any screen locking you've setup, sync your Google account, and then remove your Google account before resetting.
http://forum.xda-developers.com/nexus-6/general/guide-properly-prepare-nexus-6-resale-t3104504

My nexus 6 doesn't have custom recovery installed,It has only stock one,the phone is on stock rom,and it is stuck in setup screen asking for 1st used gmail !
I have OTG usb cable but it is useless ,not working, seems motorola improved security in nexus 6,to be specific the phone has OEM lock ,so i can't install cust.recovery
is there any trick to apply those adb commands ?

any help friends ? im still stuck ,any way to disable OEM lock or to flash custom rom on frp locked nexus6 ?

joyrida12 said:
Before I figured this method out I had reset and flashed 2 6.0 ROMs and then the 5.1.1 ROM. Once I got to the setup wizard my device was listed under adb devices and I was able to get a shell.
...
.... the project fi ROM has USB debugging enabled by default
Click to expand...
Click to collapse
It seems you can enable persistent ADB and USB debugging on any ROM, as long as you can connect to the phone through ADB in recovery mode.
You just have to add a few lines to a file or two, then reboot the phone. See this post http://forum.xda-developers.com/showpost.php?p=47423916&postcount=5

W60 said:
It seems you can enable persistent ADB and USB debugging on any ROM, as long as you can connect to the phone through ADB in recovery mode.
You just have to add a few lines to a file or two, then reboot the phone. See this post http://forum.xda-developers.com/showpost.php?p=47423916&postcount=5
Click to expand...
Click to collapse
Hey, first time poster, long time lurker. This is the first thing I have not been able to find a solution for.
In order to connect to ADB in recovery, does one need a custom recovery? My Nexus 6 bootloader is locked, running 5.1.0 LMY47D. I have fastboot access but can't pull up an ADB shell.:crying::crying:
I bought a Nexus 6 on eBay that was reset and I do not have the original users info. (I thought I was getting a pretty sweet deal because I'm so good at phones and blah blah)
Thanks in advance for any assistance!
- Beej

Beej4real said:
In order to connect to ADB in recovery, does one need a custom recovery?
Click to expand...
Click to collapse
As far as I know, yes, you need a newer version of a custom recovery. Anyway, if ADB doesn't connect, you certainly need another recovery, and you can't install that if you have a locked bootloader.
....
In the Welcome screen, have you tried the OTG trick, or any of the other methods that seem to allow you to get in Settings, from where you can do a proper reset?

W60 said:
In the Welcome screen, have you tried the OTG trick, or any of the other methods that seem to allow you to get in Settings, from where you can do a proper reset?
Click to expand...
Click to collapse
I did give it a shot. No dice. I also tried entering lots of numbers in as the emergency number. No response from the phone.

Hi guys can you help to frp bypass on Samsung SM-G530H Galaxy Grand Prime without otg function, can i use this tut or need another rom for sm-g530h? where i can find Rom with Persistent ADB Enabled? Thanks

Reactivation Lock Problem (Marshmallow)

So I upgraded my G900V to Marshmallow and then did a factory reset after I verified it worked because I wanted to start fresh, but now the setup screen says "abnormal factory reset" and is asking for my Samsung Account credentials. When I try to sign in it says "processing failed" every time and won't go past the page...
What I have tried (all have failed):
1. resetting my Samsung Account password (twice now...)
2. a second factory reset
3. using find my mobile to unlock it
4. flashing the stock kitkat firmware (fail with odin)
5. flashing a custom recovery (fail with odin)
6. using the OTG cable method (nothing displays on the screen...)
7. using the sidesync method (nothing displays on the screen...)
8. Called Samsung Support 3 times:
-regular support # - told to call the accounts # during business hours
- accounts # - told that they would have it remotely unlocked by the next morning (of course they don't follow through)
-accounts # - given the runaround treatment for 1.5 hours until a supervisor in the returns department tells me there is nothing more they can do and don't have the capability to service it (apparently it's still under warranty even (not that it matters.....))
So does anyone know a work around? I would really like to get my phone functional again.
The phone is not stolen! If anyone wants proof I am happy to supply multiple clear photos of the phone itself and the imei number, which is clean.

I managed to bypassed it, created samsung account, phone works but i can`t set custom recovery, samsung support doesn`t help either. I have g900p.

exeg said:
I managed to bypassed it, created samsung account, phone works but i can`t set custom recovery, samsung support doesn`t help either. I have g900p.
Click to expand...
Click to collapse
Please tell me how I am willing to send a pic on the imei to prove the phone isn't stolen....

RipCityBassWorks said:
Please tell me how I am willing to send a pic on the imei to prove the phone isn't stolen....
Click to expand...
Click to collapse
In my case, before samsung account request , sprint asks to activate account, i clicked yes, then I entered epst settings, after that turned on debug and with the help of adb entered command to settings

exeg said:
In my case, before samsung account request , sprint asks to activate account, i clicked yes, then I entered epst settings, after that turned on debug and with the help of adb entered command to settings
Click to expand...
Click to collapse
Unfortunately mine doesn't have any option close to that. Lucky for me though I think Samsung came around, I tried submitting a repair request for a second time and this time I was approved and it will be covered under warranty.

exeg said:
In my case, before samsung account request , sprint asks to activate account, i clicked yes, then I entered epst settings, after that turned on debug and with the help of adb entered command to settings
Click to expand...
Click to collapse
I'm able to use the downgrade/OTG method to get access to the phone, but then I am in a situation where I can't turn off the Reactivation Lock, it just stays stuck on. What were the ADB commands that you used to turn it off? Thanks for your help.

fitzonthemark said:
I'm able to use the downgrade/OTG method to get access to the phone, but then I am in a situation where I can't turn off the Reactivation Lock, it just stays stuck on. What were the ADB commands that you used to turn it off? Thanks for your help.
Click to expand...
Click to collapse
I can`t turn it off. I even managed to create samsung account but after I enter password nothing happens

UPDATE:
so Samsung not only fixed the problem, but they also restored the phone to like new condition (it was in very beat up but no cracks condition previously) so I really have to give props to them for their amazing repair team. It took about a week total if anyone is wondering.

I have a new method to remove reactivation lock it is confirmed working. It works on Samsung eMMC and Toshiba eMMC.
http://forum.xda-developers.com/ver...ivation-lock-off-finally-stuck-t3433342/page1

Samsung Galaxy J7 SM-J727v

Dam Samsung for naming all there phones the same name! I have a Verizon SM-J727v phone, one of my ex-employees added their Gmail account to this and now we can't use it. After wiping it the phone asks for their account to log in? the phone is 2 months old and now its useless
Any advice would be great! i really dont want to buy another phone i would like to find away to resolve this.

Amore514 said:
Samsung for naming all there phones the same name! I have a Verizon SM-J727v phone, one of my ex-employees added their Gmail account to this and now we can't use it. After wiping it the phone asks for their account to log in? the phone is 2 months old and now its useless
Any advice would be great! i really dont want to buy another phone i would like to find away to resolve this.
Click to expand...
Click to collapse
Next time go through the settings to wipe it so that you don't have that problem.
Can you get your ex-employee to enter his credentials, so that you can then go through the settings to wipe it?
Wayne Sallee
[email protected]

Hey, just wanted to give everyone a update. I have successfully bypassed the Google frp on the sm-j727v
You'll need the combination file and flash it to the phone, then you will need to manually enter the ADB command to bypass the setup wizard, restart the phone, then enter your own Google account credentials in settings, reflash the phone with the stock rom, re-enter your own Google credentials again during the setup wizard, and there you go, a fully Google bypass!

How?
Hi, have you a guide about how you do it? i cant do it
vizzionz said:
Hey, just wanted to give everyone a update. I have successfully bypassed the Google frp on the sm-j727v
You'll need the combination file and flash it to the phone, then you will need to manually enter the ADB command to bypass the setup wizard, restart the phone, then enter your own Google account credentials in settings, reflash the phone with the stock rom, re-enter your own Google credentials again during the setup wizard, and there you go, a fully Google bypass!
Click to expand...
Click to collapse

I found a workaround
I found a way to bypass the frp if anyone is interested

Tacos4uce said:
I found a way to bypass the frp if anyone is interested
Click to expand...
Click to collapse
definitely interested

Nvm
I'm a monster at them along with most stuff on herr. I got it done through Verizon cloud

FRP factory reset protection
Amore514 said:
Dam Samsung for naming all there phones the same name! I have a Verizon SM-J727v phone, one of my ex-employees added their Gmail account to this and now we can't use it. After wiping it the phone asks for their account to log in? the phone is 2 months old and now its useless
Any advice would be great! i really dont want to buy another phone i would like to find away to resolve this.
Click to expand...
Click to collapse
That would have to have been the account used to set the phone up... Just adding that account wouldn't have caused that. in a hard reset (from recovery) the phone defaults to the first account set up. so if your employee set up your phone your going to need the password for that account
---------- Post added at 11:25 PM ---------- Previous post was at 11:19 PM ----------
vizzionz said:
Hey, just wanted to give everyone a update. I have successfully bypassed the Google frp on the sm-j727v
You'll need the combination file and flash it to the phone, then you will need to manually enter the ADB command to bypass the setup wizard, restart the phone, then enter your own Google account credentials in settings, reflash the phone with the stock rom, re-enter your own Google credentials again during the setup wizard, and there you go, a fully Google bypass!
Click to expand...
Click to collapse
Please explain

I tried everything, every youtube trick to get by fpr, then found combo file after trying 30 j727vv files and with odin 3.13.1 flashed COMBINATION_VZW_FA70_J727VVRU3ASD1, this booted into factory binary, went in settings, turned on dev mode and tried flashing the four rom file
J727VVRS3BSD1 and she booted right into oreo.

Help! Stuck in google verify!

I have been trying to reboot a used phone I have bought. The Samsung Galaxy J3 (6). Yes, there is a 6 after the J3 inside of a little circle. Apparently this is the closest thing that xda has to it on the forums. I have tried everything I could find on the internet to get around this google verify problem from the previous user. I have used the emergency caller to basically access everything on the phone. I have attempted to change the google account through settings, I have installed new apps to access other areas, I have have tried to downgrade Google Account Manager to disable the "error" problem in the quick shortcut app. This last method didn't work due to the phone not letting me be able to downgrade. I have installed the rootjunkie's samsung unlocker apk and got to settings. I have factory reset from here twice, with and without a password. Both did not do a thing for me. I am out of ideas. can anybody help me out here?

bobhihih said:
I have been trying to reboot a used phone I have bought. The Samsung Galaxy J3 (6). Yes, there is a 6 after the J3 inside of a little circle. Apparently this is the closest thing that xda has to it on the forums. I have tried everything I could find on the internet to get around this google verify problem from the previous user. I have used the emergency caller to basically access everything on the phone. I have attempted to change the google account through settings, I have installed new apps to access other areas, I have have tried to downgrade Google Account Manager to disable the "error" problem in the quick shortcut app. This last method didn't work due to the phone not letting me be able to downgrade. I have installed the rootjunkie's samsung unlocker apk and got to settings. I have factory reset from here twice, with and without a password. Both did not do a thing for me. I am out of ideas. can anybody help me out here?
Click to expand...
Click to collapse
The issue is FRP. Someone has factory reset from recovery instead of settings.
If you can get into settings as you say then set up another Google account then switch to that account.
Restart and log into that account.
Which firmware build is the device running?

ashyx said:
The issue is FRP. Someone has factory reset from recovery instead of settings.
If you can get into settings as you say then set up another Google account then switch to that account.
Restart and log into that account.
Click to expand...
Click to collapse
I have tried to add a Google account through several methods as well. Through settings, through Gmail app, through play store. All of which keep taking me to the same verification check screen, but it allows me to back out to the settings again.
ashyx said:
Which firmware build is the device running?
Click to expand...
Click to collapse
My version is 6.01 I believe. But I cannot downgrade to the 6.01 Google account manager with new security stuff.

Your device is nearly identical to J320A & J320AZ.
I am unsure if you need to enable "oem unlock" from Dev options to flash the kernel.
But if Odin let's you this method should get you going.

This device was reset. To continue, sign in with a google account that was previously synced on thos device.

Hello everyone,
I got a phone Galaxy A 20 and called Boost mobile to sim unlock the phone, what they did.
When done I factory reseted the phone. Now when I try to add an account I got a "your phone was factory reset., type the password to unlock it. If I bypass the request I get "This device was reset. To continue, sign in with a google account that was previously synced on those device."
I don't have those information, is there something I can to to really reset the phone and not get this message?
Thanks

This means that your phone has google lock, also known as FRP (someone forgot to log out from google account). It is possible to bypass it (i successfully did it on Lenovo Tab M10, Lenovo Tab 3 7 and Nokia 5.1 Plus), but sometimes it can be difficult. According to this video, you can enter settings by crashing the setup wizard app. I think installing Apex Launcher is unnecessary, you can search for the Pin Windows feature. I didn't tested it, but I think this should work.

qwertyuiop1289 said:
This means that your phone has google lock, also known as FRP (someone forgot to log out from google account). It is possible to bypass it (i successfully did it on Lenovo Tab M10, Lenovo Tab 3 7 and Nokia 5.1 Plus), but sometimes it can be difficult. According to this video, you can enter settings by crashing the setup wizard app. I think installing Apex Launcher is unnecessary, you can search for the Pin Windows feature. I didn't tested it, but I think this should work.
Click to expand...
Click to collapse
thanks you very much for your answer. Nothing worked for me because I couldn't have access to the launcher adn the settings. I brought the phone to a store and he was able to crack it

floppy__ said:
Hello everyone,
I got a phone Galaxy A 20 and called Boost mobile to sim unlock the phone, what they did.
When done I factory reseted the phone. Now when I try to add an account I got a "your phone was factory reset., type the password to unlock it. If I bypass the request I get "This device was reset. To continue, sign in with a google account that was previously synced on those device."
I don't have those information, is there something I can to to really reset the phone and not get this message?
Thanks
Click to expand...
Click to collapse
You could have done frp bypass.