Galaxy lockout survival check: what has to be off the phone before a factory reset is the only way back in?

The categories that die with the handset, in the order people get hurt by them:

1. Authenticator apps with no export. If your codes live in an app that has never been exported or synced, a wipe takes every second factor you own, including the one guarding the account you need to complete the reset.
2. Device-bound passkeys. A passkey held in the device keystore is not in a backup by design. Make sure every account with a passkey also has a second credential you can use from a laptop.
3. App data that was never in the backup set. Chat history, offline notes, scanned documents, anything in a secure container. Backup coverage is per-app and inconsistent.
4. Files you "saved" to the device from downloads and never moved.

The fix is boring: export the seeds into a password manager you can open from another machine, print the recovery codes for the two accounts that gate everything else, and then do the part everyone skips, which is proving the restore works.

Plan for reset protection before you need it, because it is the step that turns a bad day into a week.

After a factory reset the device wants the account it was signed into. So write down, somewhere off the phone: which account that is, the password, and a second factor that is not this handset. A hardware key or a code printed on paper both work. What does not work is "the app on the phone I just wiped".

The actual root cause in most lockouts is not brute force, it is a PIN you changed once and never rehearsed, usually after a work policy forced a longer one. Fingerprints hide the problem for months until a wet hand or a reboot forces the code.

Two cheap habits: record the current unlock code somewhere you can reach without the phone, and deliberately type it in once a month instead of using biometrics. Muscle memory is a cache, and it expires.

Do not plan around a remote unlock saving you. Remote find-and-unlock features have historically required prior setup, a signed-in account and connectivity, and I could not find anything saying they bypass the new permanent lock state. Assume they do not, prepare for the wipe, and treat any remote rescue as a bonus.

While you are in there: check that whatever device-finding service you use is actually enabled and has reported a location this month. Half the people who need it discover it was switched off during setup.