Factory reset, recovery, and the unhappier bypasses

A parent who has set up Family Link has not set up the device against a factory reset.

This page documents the hard reset paths, the recovery mechanism, and the documented bypass paths on Android.

The page is the third of the Android articles on the device-side surface. The first two are Set up Family Link on Android and What Family Link cannot do.

The article is not a how-to. It is the description of the options a child can reach if the parent does not configure the device-side mitigations.

Definition

A research-grounded inventory of the documented reset paths on Android, the documented mitigations, and the documented bypass paths a parent may not have heard of.

The list is the description of the menu items the child can reach, not a guide to using them.

Scope

The page covers the parent-managed Family Link surface on Android phones and tablets that ship with Google services, the Android 17 device-local controls [source: google-android-device-controls], the Samsung Kids child-zone launcher, the Huawei Digital Balance device-side child mode, and the documented recovery, ADB, and bootloader-unlock paths.

It does not cover the iOS or Apple-Family-Sharing side of these limits. It does not cover the cellular-side recovery paths. The article is about the device-side surface, not the network-side surface.

What the parent-side Family Link does not survive

A factory reset clears the device-side data. The Family Link configuration is on the account side, so the configuration is not lost; the device-side enforcement is.

The parent must re-enroll the device after the reset. The reset path is documented below for each configuration.

Family Link supervised account

When the device is factory-reset, the supervision state on the device is cleared. The child account is still supervised on Google’s account side.

The parent opens the parent-side Family Link drawer and re-enrolls the device. The flow is the same as the first-time setup [source: google-family-link-supervision].

The reset is a documented bypass for the device-side enforcement. The account-side configuration is not lost.

Android 17 device-local controls

The Android 17 device-local controls are protected by a device-side PIN. If the PIN is forgotten, the deletion of the PIN turns off all device-local controls [source: google-android-device-controls].

The configuration is held by the PIN. The PIN is the device-side mitigation.

Samsung Kids

Samsung Kids is a child-zone launcher. The exit is protected by a PIN. The launcher is a separate configuration from the device’s standard launcher [source: samsung-kids].

A factory reset clears the launcher. The parent-side Sandbox configuration is the mitigation.

Huawei Digital Balance

Huawei documents that, without a linked parent HUAWEI ID and reset protection, a force factory reset disables Digital Balance and clears device data [source: huawei-reset].

The parent-ID link is the documented mitigation. The device-side enforcement is not lost; the device-side PIN is lost.

The recovery path

The recovery path is the Android standard path for restoring a device to a working state. The path uses the device’s recovery partition.

The Android source documents the recovery code path [source: source-android-recovery-adb-sideload]. The path includes adb sideload, which can apply a system update from a connected PC.

The recovery path is for advanced users. The parent-side screen lock is the device-side mitigation.

The bootloader unlock path

The bootloader is the first code that runs on the device. The Android source documents the bootloader locking and unlocking mechanism [source: source-android-bootloader-unlock].

A bootloader unlock allows the device to boot a different operating system image. The new image can include a different set of parental controls or none at all.

The path is for advanced users. The device-side mitigation is the parent-side screen lock and the parent-side account credentials.

The OEM-locked bootloader

Most Android devices ship with a locked bootloader. The OEM provides the unlock mechanism, often with a warning that the unlock will void the warranty.

The documented path for the pixel and stock Android device is the OEM’s bootloader unlock workflow [source: source-android-bootloader-unlock]. The OEM- specific path is held in the OEM’s own support page.

The hardware-key combination

A factory reset on most Android devices is reached by holding the power and volume-down buttons during boot. The exact combination is device-specific.

The combination is the device-side mitigation. The parent-side screen lock, set on the standard Settings entry, is the device-side configuration that prevents the combination from being used without the parent’s participation.

The remote-wipe path

A parent who has set up the parent-side Google account can use Find My Device to remotely lock the device, sign out the supervised account, or erase the device.

The path is the parent-side drawer. The Find My Device service is the parent-side configuration.

What the parent can do

The parent has a small number of documented levers.

1. Set the parent-side screen lock

The parent-side screen lock is the device-side mitigation. The child who reaches the Settings app cannot enable Developer Options or change the sideloading setting without the parent-side screen lock.

The parent-side screen lock is independent of the Family Link passcode. The two are different settings. The parent who treats the two as the same is making an assumption the device does not enforce.

2. Disable Developer Options on the child device

The Developer Options menu can be hidden or its access restricted by the parent. The exact setting is OEM- dependent. The parent who treats the setting as universal is making an assumption the device does not enforce.

The Developer Options entry is documented in the Android 17 Compatibility Definition [source: source-android-cdd17-dev-options]. The CDD does not document a parent-side restriction on Developer Options.

3. Link the parent HUAWEI ID on Huawei devices

The Huawei Digital Balance configuration is held by the parent HUAWEI ID link. The parent-ID link is the documented mitigation against a factory reset [source: huawei-reset].

4. Use Find My Device

The Find My Device service is the parent-side tool for remote wipe. The parent who has the parent-side account credentials can use the service to remove the supervised account from the device.

5. Set the parent-side account credentials

The parent-side account credentials, including the parent-side Google account, are a separate layer from the child-side account. The parent who has the parent- side account credentials can re-establish the configuration after a factory reset.

6. Talk about it

The conversation about which recovery paths exist is a relationship decision. The configuration protects the device; the conversation protects the relationship. Both are needed.

What this article does not cover

The article above documents the documented reset paths and the documented mitigations. It does not cover:

• Whether a specific Samsung Galaxy Store version exposes a per-app restriction. Samsung’s own page is the source.
• Whether a specific Xiaomi HyperOS version exposes the same Digital Wellbeing path as the cited 14T Pro. Xiaomi’s own page is the source.
• Whether the OEM-provided bootloader unlock is available on a specific device. The OEM’s own page is the source.
• The full AOSP source-resource strings for Settings entries not on the vendor support pages. The wave-0 research packet did not transcribe them [source: android-aosp-settings].

The configuration protects the conversation. The conversation protects the relationship. Both are needed.

Sources

• google-family-link-supervision — Google Families Help, “Set up supervision to continue using your Google Account”. The supervision-state gate and the parent/child notification rules [source: google-family-link-supervision].

• google-android-device-controls — Android Help, “Set up parental controls on an Android device”. The Android 17 device-local controls and the multi- profile prerequisite [source: google-android-device-controls].

• google-android-wellbeing — Android Help, “Manage how you spend time on your Android phone with Digital Wellbeing”. The per-device app limits [source: google-android-wellbeing].

• google-supervision-13 — Google Families Help, “How Google Accounts work when children turn 13”. The supervision-continuation rule [source: google-supervision-13].

• google-multiuser — Google Kids Space Help, “Add users to a device”. The profile boundary [source: google-multiuser].

• source-android-bootloader-unlock — Android Source, “Locking and unlocking the bootloader”. The first-code-on-device documentation [source: source-android-bootloader-unlock].

• source-android-recovery-adb-sideload — Android Source, “Non-A/B system updates: recovery device code”. The adb sideload recovery path [source: source-android-recovery-adb-sideload].

• source-android-cdd17-dev-options — Android 17 Compatibility Definition. The standard Developer Options surface [source: source-android-cdd17-dev-options].

• source-android-mac-randomization — Android Source, “Wi-Fi MAC randomization behavior”. The network-side MAC randomization behavior [source: source-android-mac-randomization].

• google-android-android-private-dns — Android Help, “Manage advanced network settings on your Android phone”. The Private DNS configuration [source: google-android-android-private-dns].

• huawei-reset — Huawei Support, “Forgot the password or security question for Digital balance (Student mode)”. The factory-reset bypass and the parent-ID link mitigation [source: huawei-reset].

• huawei-privatespace — Huawei Support, “Does my HUAWEI phone/tablet support PrivateSpace”. The PrivateSpace / Digital Balance interaction [source: huawei-privatespace].

• huawei-digital-balance — Huawei Support, “Set Device Time for Your Child”. The Digital Balance child-mode configuration [source: huawei-digital-balance].

• samsung-kids — Samsung Support, “Samsung Kids on your Galaxy phone or tablet”. The child-zone launcher [source: samsung-kids].

• android-aosp-settings — AOSP, Settings resource repository. The source-string resource [source: android-aosp-settings].