Protesting OneUI 9.0 Lockout and Mandatory Factory Reset - Suggested Solution

[PowerUserTechGuy]

Samsung,

I'm posting this feedback to protest Samsung's decision to automatically factory reset any device that fails 13 login attempts in the new OneUI 9.0, as has been reported online. What's not been as clearly reported is whether or not there is any way to opt out of it. So far, it seems there is no option to do so.

This should NOT be mandated by Samsung, but completely left to the user's choice. There should be a user toggle to opt out. As a highly technical and power user with a security background, I fully understand security implications and what Samsung may be trying to achieve with this change. However, it is *MY* device and I make the decisions, including balancing the risks.

Solution:

Samsung should simply add a user setting so we can turn this off.

With your focus on security, you could keep the lockout delays and eventual factory reset as the default setting for security, especially for those who may be less technical or perhaps less careful with their devices. But mandating it without user options and user choice is going backwards.

Forcing this on everyone is too draconian, heavy-handed, shortsighted, and will have negative repercussions. I will never buy another Samsung device if this setting remains without a user option to turn it off. I have purchased multiple Samsung mobile devices, including two expensive flagship Tab S tablets and was considering a Samsung S-level Ultra phone. Not anymore!

Simply allow us to opt out. This will be a smaller number of people so that you can balance your security initiative with the reasoned and practical wishes of your customers.

Consider the fact that many of us heavily customize our devices and have locally-stored and precious data that is not automatically backed up to the cloud. Not all of us buy into the cloud-subscription-drain-your-wallet paradigm as we have other options.

This change is an abomination! When triggered, we'd lose at least some of our data even when we maintain full and complete physical control over our devices. I understand that many users will know their login credentials and/or have the necessary biometric patterns saved. But there can easily be times when these don't work and the secondary methods may have been forgotten.

We are sick of companies making bad decisions for us. I am therefore effectively stuck on OneUI 7.0 for my wonderful new Tab S10+ tablet because 8.0/8.5 butchered DeX. Now I won't risk updating to 9.0 while this default setting to factory reset is left in effect with no way to opt out. Samsung updates after 7.0 are **bleep** for these reasons. There have been many owners on Reddit, for example, who regretted updating their Tab S tablets to 8.0 or 8.5. And yes, WE are the owner of the devices, not you.

So your recent update decisions have resulted in less security for me rather than improving it. I was truly looking forward to skipping the entire OneUI 8.0/8.5 series and going straight to 9.0 for the overall improvements, much-needed security updates besides this problematic decision, and hopefully a somewhat fixed version of DeX. Especially considering that DeX has been a key differentiator for Samsung devices for a long time, but was butchered when you adopted the inferior and immature Android desktop foundation in 8.0/8.5.

So OneUI 9.0 was supposed to be a breath of fresh air, but not at the risk of losing my precious data, and losing weeks of work in customizing my devices. Especially potentially at times when we are away from the means to restore it.

I was very much a Samsung fan, now boycotting. You've lost me as a customer and my revenue stream until you make this change. It's an easily implementable solution. I hope you reconsider and add this much-needed option to restore user choice and loyalty. Otherwise, you reduce us to mindless cattle who you don't think can be trusted to responsibly handle our own devices and data. Not a good look for the Samsung brand. 

What's needed here is to restore the balance and personal choice. Thank you for your consideration of this suggestion.

[Chummy128]

I sent feedback before they posted this. They said my feedback is invaluable. I sent them the thing about a toggle for this.

[PowerUserTechGuy]

Thanks Chummy128.

It's really the most elegant solution here.

For those who want the enhanced security, great. Many enterprises enforce wipe policies after x number of failed login attempts.

But I'm not an enterprise. For those like us who know it's highly likely to cause serious and irreversible problems and data loss, Samsung just needs to add the toggle to disable it.

I also feel the way they've handled this so far, without the necessary transparency and choice, is completely disrespectful to their customers who have spent so much money on their products. I was looking forward to the 9.0 update until they pulled the rug out from under us with this critical change.

There's still plenty of time for Samsung to correct this situation, if they want to listen to their customers' real-world concerns.

[Robin621k]

In my humble opinion, Samsung has not demonstrated this particular characteristic recently; instead, it appears their new approach involves a lack of responsiveness. In other words, deaf ears.

[Robin621k]

I understand that you consider this device to be yours, and you have the right to make decisions regarding its use, including evaluating potential risks.

However, I would like to respectfully point out a small detail. While you do own your Samsung devices, Samsung retains ownership of the software installed on them. They possess the authority to modify any aspect of the software as they deem appropriate. This is outlined in the Terms of Service and End User Agreement that you accepted when you initially set up your device.

Regarding cloud storage, it is understandable why someone who extensively customizes their device might not solely rely on it. For Samsung devices, cloud storage is primarily beneficial for backing up settings. For instance, Samsung Cloud for settings is excellent for preserving my highly customized screen, complete with all my KWGT custom widgets. For all other data, external drives are a more suitable option. I personally create a new backup of my S26U and Tab S10+ once a month. I prefer a physical backup over a cloud-based one.

Do you genuinely believe that, as a highly knowledgeable power user, you would ever encounter such a situation? Since acquiring my first Samsung device in 2012, I have experienced one spontaneous factory reset, which was not due to forgetting a PIN or password, but rather a malfunction. I was in a taxi at the time, and fortunately, I had my backup in my purse. Restoring my phone took approximately an hour. The challenge with your proposed solution is that there is no assessment to determine who might not be as knowledgeable as you, and they might also disable the feature.

Samsung has not provided an explanation for this change, and I would presume it is related to some legal matter.

Given that this is a peer-to-peer community, the only individuals who will see this are fellow members and moderators. I recommend utilizing the feedback section of the Members app for this request, and also sending an email to the CEO via the provided link.

It is entirely within your rights to choose to boycott Samsung over this matter.

https://www.samsung.com/us/support/contact/email-the-ceo/

[PowerUserTechGuy]

Robin621k, thank you for your thoughtful comments and keeping it on a professional level.

Yes, I speak from direct experience here. I have encountered this exact problem in years past with other devices that enforced this type of draconian lockout that resulted in a factory reset to resolve the situation.

I have a close family member who constantly forgets their passwords, passcodes, pins, etc. Sometimes I have them and can unlock them, other times they change them in the interim and then forget them. As the resident tech support person in our family, guess who gets to deal with all the fallout from that?

And the sad part is that some of these devices never leave the house. So they were not at the higher risk of having a device out in public that could be stolen, left behind, lost, etc.

I believe in having strong security and external backups, no argument there.

However, there are some types of data on mobile devices that are not easily backed up, or not allowed to be backed up without digging behind the scenes with ADB commands. Been there, done that.

All I'm asking for is to give consumers the choice. Because there are times when security gets in the way of normal living and real data loss occurs. The vast majority of people do not carry around their backups in their pockets when they are away from home. I respect your abilities to do so, but Samsung's change in this regard is not a workable solution for many.

Again, I don't have a problem with implementing stronger security features in general, but I draw the line where they could result in real data loss and lack of consumer choice, especially when they could have been prevented with a simple toggle.

You raised a good point in passing, that Samsung has not provided an explanation for this change. So there was an arbitrary decision and impactful change made without providing any transparency or likely any input.

I greatly dislike when tech companies make decisions that impact real people by removing choice. Data privacy is much the same way, as strong and effective security is required, but in many jurisdictions it is just as much, if not more, about choice and meaningful consent.

I switched from Apple iPads to Samsung tablets because I needed more flexibility, choice, and capability, not less features in a more locked-down, restrictive system. Many Android users feel the same.

Thank you for your suggestions. I had already provided feedback through the Members app before posting here. I wanted to get as much coverage and notice to Samsung so it gets the attention it needs.

I appreciated the email link to the CEO, as I did not have that. Thanks.

[Robin621k]

You're welcome.

If a device never leaves the home, there is the option of turning off pin or password in security section of lockscreen, choose none for pin, pattern or password. You do however need it for setting up the device.

I will never understand the pin, pattern password forgetting , unless there is a medical issue. You have to enter them a couple of times a day, even if you use extended unlock.

[KiwiBird97]

I do NOT see this change on my S26 Ultra running the One UI 9 Beta. The current attempt limit is 20.

[PowerUserTechGuy]

It was reported here:
https://www.androidpolice.com/forget-your-pin-samsungs-one-ui-9-update-could-factory-reset-your-phon...

Official Samsung publication:

https://www.samsung.com/sa_en/support/mobile-devices/one-ui-9-lockscreen-security-policy/

There is a table showing what happens after so many failed attempts, including the escalating lockout durations. Apparently, entering the same wrong pin or password twice only counts as 1 attempt. But that doesn't matter if you can't remember it, eventually it's going to get factory reset.

Having just seen the official Samsung Post above, it raises the question: Will this only be effective for new devices "launched with" OneUI 9.0 (see the official language below), or will it apply to all devices that are upgradable to it?

If it's the latter, then ironically this is going to result in a number of users intentionally NOT updating to OneUI 9.0, therefore making their devices LESS SECURE over time, not more. Decision makers often forget the Law of Unintended Consequences.

Per Samsung:

"Starting from devices launched with One UI 9.0, Samsung has implemented stricter lock screen security measures to better safeguard your personal data against unauthorised brute-force attacks (continuous random guessing of passwords). Please note that if you exceed the maximum number of allowed attempts, your device will be permanently locked, and you will need to perform a full factory reset to use it again. These policy changes help prevent data breaches but require extra care when entering your security credentials.

Please make sure to remember your PIN, Pattern, or Password."

And yet another calling for an option to turn it off, just like I said:

https://www.androidheadlines.com/2026/07/samsung-one-ui-9-lockscreen-security-13-attempts-limit.html

[Robin621k]

This will probably go into effect when stable rolls out.