Category Filter

How to completely Wipe a Device?

If the corporate or the personal devices used for work got lost or stolen, you could not risk a corporate data leak. Locking the device is a solution, but what if they cracked the device password. So, wiping the device might be the only option to protect such sensitive data.

You can either perform a corporate or a complete wipe. Corporate wipe is usually recommended if you are wiping a BYO Device. This ensures that the personal data in the device will be left untouched. Use complete wipe to wipe a corporate-owned device.


The device management of a wiped device can only be retained in some types of Android and iOS device enrollments.


1. The wipe action cannot be stopped halfway. Once initiated, the process stops only after the device is wiped completely.

2. If a device is wiped, all corporate, as well as the personal data including files, contacts, calendars, apps, certificates, and settings, will be deleted.

3. Hexnode MDM no longer manages a standard/rooted Android, non-supervised iPhone/iPad, Windows or Mac once it is wiped. Such devices need to be re-enrolled manually. The device details in Hexnode MDM portal will stay as it is.

  • Android devices enrolled via Samsung Knox, Zero-touch, Android ROM/OEM enrollment, devices with Hexnode MDM as a system app and devices with Hexnode System Agent app as a privileged app will re-enroll in Hexnode MDM automatically once the device is turned on and connected to the internet after wiping.
  • For supervised iOS,
    • If the device is enrolled via Apple Configurator, it won’t be connected with Hexnode after a complete wipe, they have to be enrolled again.
    • If the device is enrolled via DEP, it will be re-enrolled to Hexnode even after a complete wipe.
    • If the iOS devices are added to DEP via Apple Configurator, the devices wiped after the 30-day provisional period will be automatically re-enrolled. During this provisional period, wiping the device removes the management, and the device has to manually re-enrolled to the MDM.

To wipe a device completely,

  1. Login to your Hexnode portal.
  2. Navigate to Manage tab.
  3. Click on the device you wish to wipe or select the devices.
  4. From Actions drop-down, select Wipe Device.
  5. If you are remotely wiping a device running macOS 10.8 or above, enter your Find My Mac PIN.
  6. If required, enable Clear Factory Reset Protection/Activation Lock.
  7. Click Wipe, in the confirmation dialog.
  8. Enter the password of your Hexnode MDM portal and click Confirm to initiate device wipe.

This action will not work on devices running Fire OS v5.0 or below.


Enabling “Clear Factory Reset Protection/ Activation Lock” clears Activation Lock on supervised iOS devices and Factory Reset Protection on Android devices enrolled as Device Owner in the Android Enterprise program while performing device wipe.

To wipe a single device

To wipe multiple devices

Automatic device wipe

A device can be set up to get wiped automatically if the user enters an incorrect password for a specific number of times. This feature is available only on iOS, Android and Windows devices. To set up,

  1. Go to Policies and create a new policy or continue with an existing one.
  2. Go to iOS > Passcode/ Android > Device Password/ Android > Work Profile Password/ Windows > Password.
  3. Set a value for Failed Attempts/Failed attempts before wipe.

To associate this policy with targets before saving,

  1. Go to Policy Targets tab from the policy set up screen.
  2. Add devices, users, device groups, user groups or domains.
  3. Now, save the policy.

To associate the policy after saving the policy,

  1. Go to Policies and select the required policy.
  2. Click on Manage > Associate Targets.
  3. Click on Device/User/Device Group/User Group/Domain.
  4. Select the required targets and click on Associate.