1.17 Ensure 'Allow remote lock and erase' is set to 'Enabled'


Enable remotely locking and erasing the device.
The recommended state for this setting is: Enabled.


Allow remote lock and erase setting helps you to remotely lock your device or erase your data through Find My Device. This helps you to safeguard your privacy and protect your data from unsanctioned access.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.


Follow the below steps to enable Allow remote lock and erase:

Tap Settings Gear Icon..
Tap Security.
Scroll to the DEVICE SECURITY section.
Tap Device admin apps.
Tap Find My Device toggle.
Tap Activate this device.


This setting requires you to keep location services enabled all the time. This might be a privacy issue for you.

Default Value:

By default, Allow remote lock and erase setting is enabled.

See Also