Remove corporate data from a device

To wipe your own device that you use for work or school, go here instead.

If a managed device goes missing or a user leaves your organization, you can use Google Admin console to wipe work data and apps from the device. Depending on the device platform, you can wipe a user’s work account, their work profile, or all data from the device. Users can still access their work data when they sign in on a computer, a web browser, or another authorized mobile device.

Important (Android): If you use factory reset protection, make sure you can access an associated admin account before you wipe a device and reset it. The account must be active (not restored) and can never have been deleted or suspended. Google Cloud Support can’t unlock the device or restore it for you. If you have problems unlocking a reset device, contact the manufacturer for help.

System requirements

To wipe an account from a device

  • Mobile devices must be managed (basic or advanced mobile management)
  • Endpoints must be managed with Drive File Stream

To wipe a device

  • Mobile devices (Requires advanced mobile management):
    • Android with the Android Device Policy or Google Apps Device Policy app
    • Apple iOS with a device policy profile
    • Google Sync (G Suite only)
  • Microsoft Windows 10 devices must be enrolled in Windows device management

Step 1: Decide what to wipe from the device

You can wipe all apps and data from a device or only a work account. In general, you should:

  • Wipe a device—If it’s a company-owned or personal device that’s lost or stolen. This option removes all work data and apps from the device. It also removes personal data and apps, unless it's an Android device with a work profile.
  • Wipe an account—If it’s a personal device and the user is leaving your organization.

How wipe works by platform

Android

The data that's removed from a device depends on the management app and your organization's management privilege:

Device type

Wipe device Wipe account

Personal device with a work profile

Your organization's management privilege is Profile owner

The user’s work profile is removed, which includes the work account and all apps and data associated with it.

Personal data and apps remain on the device.

Same as Wipe device

Personal device without a work profile

Your organization's management privilege is Device admin

This management option is available only for devices with Android 9.0 or earlier with the Google Apps Device Policy app

The device is reset to its factory settings.

All work and personal apps and data are removed.

If the device has an SD card, data is removed from the SD card, too. Note: The removal is a Quick Erase and not a Secure Erase of the SD card. Only mounted primary SD cards are wiped. Read-only cards aren't wiped.

The work account is removed. Personal data and apps remain on the device. However, if the device is in fully-managed mode and the work account is added back, all apps are removed from the device.

Note: For Android 5.1 Lollipop and later, an account can’t be removed if it’s the only account on the device. When you wipe the account, new work data stops syncing but existing data and the work account remains on the device. To remove the account and existing data, wipe all data from the device.

Company-owned device (or a personal device the users sets as work only)

Your organization's management privilege is Device owner

The device is reset to its factory settings.

All work and personal data is removed.

Android Device Policy devices—The device is reset to its factory settings. All work and personal data is removed.

Google Apps Device Policy devices—The work account is removed. Personal data and apps remain on the device. However, if the device is in fully-managed mode and the work account is added back, all apps are removed from the device.

iOS

The data that's removed from a device depends on how G Suite data syncs to the device and who owns the device:

Device type Wipe device Wipe account
iOS device using iOS Sync for G Suite

The device is reset to its factory settings.

All work and personal data and apps are removed.

Only the work account and managed apps are removed.

Personal data and apps remain on the device.

Company-owned iOS device

The device is reset to its factory settings.

All work and personal data and apps are removed.

Same as Wipe device.
iOS device using Google Sync for G Suite

The device is reset to its factory settings.

All work and personal data and apps are removed.

Not available.
Google Sync (G Suite only)
Only option is Wipe device. The device is reset to its factory settings. All work and personal data and apps are removed.
Windows 10 enrolled in Windows device management
Device type Wipe device Wipe account
Microsoft Windows 10 device enrolled in Windows device management

The device is reset to its factory settings.

All work and personal data is removed.

Not available.

However, if the device is enrolled in Windows device management you can remove all settings pushed to the device by unenrolling the device. For details, go to Unenroll a device from Windows device management.

Step 2: If you have access to the device, manage accounts

If the device isn’t lost or stolen, and you have access to it:

  1. Make sure the user can access their work account:
    • If they don’t know their password, you need to reset it. Reset the password before you wipe the device. If you don't, the user might need to wait at least 24 hours before they can sign back in to the device.
    • If the account is suspended, you need to restore it. For details, see Restore a suspended user.
  2. Make sure any administrators who have access to Android devices with factory reset protection can sign in. The accounts must be active for the admin to access the device after it’s wiped.
  3. Sign out and remove the work account before you wipe the device or account.

Step 3: Wipe a device or a work account from a device

You can find devices you want to wipe in a user's account page or in the Devices list.

In the user's account page
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Users.
  3. In the Users list, find the user. If you need help, see Find a user account.
  4. Click the user’s name to open their account page.
  5. Click Managed devices.
    Points out Managed devices link
  6. To wipe a single device, point to the device and click More""and thenWipe Account or Wipe Device.

    To wipe several devices at once, select the devices you want to wipe and click More""and thenWipe Account or Wipe Device.

    If you’re not sure which option to choose, review Decide what to wipe from the device. Not all options may be available.

  7. (Optional) For devices using Android Device Policy: If you're wiping an account and want to remove factory reset protection, check the Also remove factory reset device protection box.

    The device will no longer require the owner or admin to sign in after it’s reset.

  8. Click Wipe Account or Wipe Device to confirm.

    On the next sync, data is deleted and, if applicable, the device is reset. It usually takes a few minutes for the data to be removed from the device, but it might take up to 3 hours for some devices. When the wipe is complete, the Admin console shows the device status as Wiped or Account Wiped.

    If the device isn't online, the Admin console shows the device status as Approved or Wiping. After the device is back online and the wipe is complete, the status updates to Wiped or Account Wiped.

    For information about the factory-reset process, see the device's documentation.

  9. (Optional) To cancel a device wipe, click More""and thenCancel device wipe.
  10. (For Android devices) If the device is listed twice in the devices list, repeat the process for each entry. A device can be listed twice if the user adds more than one account to the device or if they add the same work account to their work profile and personal space.

In the Device list
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devices.
  3. To get a list of all devices, in the left navigation, click Devices. Otherwise, click Mobile devices or Endpoints.
  4. To wipe a single device, point to the device and click More""and thenWipe Account or Wipe Device.

    To wipe several devices at once, select the devices you want to wipe and click More""and thenWipe Account or Wipe Device.

    If you’re not sure which option to choose, review Decide what to wipe from the device. Not all options may be available.

  5. (Optional) For devices using Android Device Policy: If you're wiping an account and want to remove factory reset protection, check the Also remove factory reset device protection box.

    The device will no longer require the owner or admin to sign in after it’s reset.

  6. Click Wipe Account or Wipe Device to confirm.

    On the next sync, data is deleted and, if applicable, the device is reset. It usually takes a few minutes for the data to be removed from the device, but it might take up to 3 hours for some devices. When the wipe is complete, the Admin console shows the device status as Wiped or Account Wiped.

    If the device isn't online, the Admin console shows the device status as Approved or Wiping. After the device is back online and the wipe is complete, the status updates to Wiped or Account Wiped.

    For information about the factory-reset process, see the device's documentation.

  7. (Optional) To cancel a device wipe, click More""and thenCancel device wipe.
  8. (For Android devices) If the device is listed twice in the devices list, repeat the process for each entry. A device can be listed twice if the user adds more than one account to the device or if they add the same work account to their work profile and personal space.

Allow Android users to wipe their own device

You can allow users to remotely wipe their own devices. When they wipe their device, the same data is removed as when an administrator chooses to wipe a device. For details, see Decide what to wipe from the device.

Note: This option is supported for Android 2.2 Froyo and later devices.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devices.
  3. Click Settingsand thenAndroid settingsand thenGeneral.
  4. (Optional) On the left, select an organization to apply the setting to.
  5. Check the Allow Users to wipe their devices from Find My Device box.
  6. Click Save.

To give your users details on how to remotely wipe their device, see Remotely manage lost or stolen work devices.

Related topics

Google, G Suite, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?
How can we improve it?