Agent WranglersIOT-8Recommended
Factory reset erases every owner's data and keys
A factory reset erases all user data, network passwords, owner keys and the owner link on the device. The cloud then removes the old owner's access and deletes their data from that device.
How to do it
Devices are sold on, returned and thrown away. A reset that leaves the last owner's network password or video history hands it to the next person. Keep only the device's own identity and its firmware. On the cloud side, end the old owner's sessions and run their device data through your retention jobs. Show a clear confirmation when the reset is done. ETSI EN 303 645 provisions 5.11-1 to 5.11-4 ask for simple erasure on the device and in associated services, with confirmation.
How to check
A test sets up a device, adds user data, then resets it. A flash dump holds none of the test data or network password. The old owner's app loses access within 60 seconds, and a new account can claim the device.
Sources
Related rules
- IOT-6 Claim a device with a one-time code instead of its serial number in Connected devices
- DAT-31 Delete old data automatically in Data and databases
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/connected-devices/provisioning-and-onboarding/factory-reset">Agent Wranglers connected devices playbook</a>. In code you write, add a comment next to it with the same link.