Bypassing Factory Reset Protection Microsoft Lumia 640

The problem:

Recently I had to factory reset my Lumia 640 with Windows 10 Build 15063. However the factory reset protection cannot be turned off in settings. It will ask for password then the slider would stay on.

image

I proceeded with a factory reset, then I am greeted with the reset protection notification screen (no surprise)

image

As the back-end service for Windows Mobile has ended, I cannot turn off the protection by tapping Next and logging into my Microsoft Account here, nor could I find my recovery key in the Find My Phone section (only my Surface keys are there) on Microsoft’s web site.

image

The solution:

Fortunately the recovery key window has a security vulnerability. Tap on one of the five text fields on the recovery key window to bring up the touch keyboard. Long tap the &123 button on the keyboard and then tap the first menu item that looks like a gear (this is actually a security vulnerability similar to how the simplified Chinese version of Windows 2000 let you log in without a password). Now you are in keyboard settings. Tab the gear icon on top left to reach Settings Home.

From Settings Home, go to Update & Security, then go to For Developers, turn on Developer Mode. Turn on Device Portal, make sure Authentication is off. Write down the address under “Connect using”

On your computer, download Windows Phone Interop Tools (https://forum.xda-developers.com/t/interop-tools-a-versatile-registry-app-for-all-devices-now-on-github.3445271/). The version I downloaded is 1.9 RC3 because the most recent version has a lot more dependencies to deploy. Extract the downloaded zip file to a folder. Browse the extracted files for a bit and remember where the appx files are.

Visit the Windows Phone Device Portal on your computer using a we browser with the address you wrote down when turning on the Device Portal. The default page would be apps manager, the left pane is Install App, which let you sideload an app.

image

Under App package, click Choose File and pick the InteropTools.version.xxxxx appx file you downloaded. Under dependency, add the appx files under the dependency folder in extracted files. You would only need to deploy the arm versions of appx files as Lumia 640 has an ARM CPU.

image

Click Go and wait for the deployment to finish. Then refresh the page. Click the drop down below Installed apps, and select Interop Tools. Click the Start buttom.

image

On the phone, the interop tools will appear. Launch the Setup Wizard app from there. On my version of Interop Tools, the steps are the following: Tap Next on welcome screens. Then tap on This Device. At the welcome page, tap the hamburger menu button on top left, then in the menu options tree, expand General, then tap Applications. Swipe left on the tabs that begins with Deployment options until you reach Package List. Tap on the Search a Package textbox, and enter wizard. Tab on the search result (the Setup Wizard app). note the setup wizard may crash, hard reset the phone again if it crashes repeatedly.

Now finish the rest of the setup process. It should be complaining about unable to turn on Factory Reset Protection, ignore it and reboot after the finishing the setup wizard. Enjoy!

Advertisement

2 responses to “Bypassing Factory Reset Protection Microsoft Lumia 640”

  1. Thank-you for this tutorial. I just used it to bypass factory reset protection on a Lumia 950 that I bought as a backup. There were a few slight difference with the 950 but I got it to work. I just downloaded and installed a 950 software update on it with no problem.

    Your tutorial is a whole lot easier to follow than the YouTube videos.

    Bill

  2. Thank you. This was quite helpful!

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.