Device Wipe is the process of deleting all device data and logging out of the user account.
The device Wipe is useful when the user has lost access to their device, or if the user is offboarded from the organization.
Secure OS supports the following Wipe flows:
Devices are getting automatically wiped if the user fails to enter the right screenlock PIN/password for 10 consecutive times in a row.
The user can use a duress wipe action that triggers a device wipe if they enter a predefined PIN (Wipe PIN) in the lock screen menu. The user can set up their Duress Wipe from their Account Policy in Phone Manager (how to: )
The device can be remotely wiped by the MDM administrator through an instant Wipe command. The device will be wiped as long as has connectivity.
Users can set up a Failed Sync Wipe flow that will trigger a device Wipe in case the device fails to sync to the server for “n” number of times (also meaning that the device is offline). This feature ensures that the device will get wiped even if it loses connectivity and is unable to receive a remote wipe command from the MDM.
(how to: )
The user can also initiate a device wipe from their Emergency menu in Secure OS.
(how to: Hold power button > Emergency > SOS and data reset
The combination of device wipe and Re-enrollment disabled by policy (how to: ) renders the account no longer accessible, regardless of whether the user enters the right username and password.