Android Enterprise Set Device Password fails with Passcode token permission missingSolved

Participant
Discussion
4 weeks ago Aug 13, 2026

I’m trying to run the Set Device Password action on a company-owned Android device from Hexnode, but it fails with an error saying the Hexnode UEM app does not have the required password/passcode token permission.

Is this permission supposed to be enabled from the user device or from the Hexnode admin portal? If we need to lock or change passwords on company-owned devices remotely, I’m not sure how this should be configured.

Replies (3)

Marked SolutionPending Review
Hexnode Expert
4 weeks ago Aug 13, 2026
Marked SolutionPending Review

Hello @marien ,

This error appears when the Hexnode UEM app on the Android device does not have the required Passcode token permission. This permission is needed for remote actions such as Set password and Clear password.

For devices that are already enrolled, the permission must be enabled directly on the device:

  1. Open the Hexnode UEM app on the Android device.
  2. Open the app menu.
  3. Go to Settings > Permissions.
  4. Enable the Password token or Passcode token permission.
  5. Run the Set password action again from the Hexnode UEM portal.

This cannot be enabled remotely from the admin portal after enrollment because Android restricts granting this permission silently post-enrollment.

Regards,
Simon Scott
Hexnode UEM

Marked SolutionPending Review
Participant
4 weeks ago Aug 13, 2026
Marked SolutionPending Review

So for devices that are already enrolled, there’s no way to push this permission from the portal? We’re using Android Enterprise enrollment for company-owned devices and want to avoid touching each device manually.

Marked SolutionPending Review
Hexnode Expert
4 weeks ago Aug 13, 2026
Marked SolutionPending Review

For currently enrolled devices, the permission still has to be enabled manually on the device side.

However, for future Android Enterprise enrollments, you can automate this during setup. Configure the Android Enterprise Enrollment Profile with an App Configuration for the Hexnode UEM app, and set the Passcode token permission to Auto-enable during enrollment.

That way, newly enrolled company-owned devices will have the required permission from the start, and remote actions like Set Password can be performed without manually enabling the permission later.

Save