One screen, one purpose
The app opens directly to a large wipe control. There are no nested settings or confirmation flows to remember under pressure.
Whole-device emergency wipe
SP-WIPE · SELF-HOSTED
When seconds matter, erase the device.
One decisive action.
Panic Wipe is a dedicated one-screen control for SecurePhone-managed phones. It hands a protected command to the device-management app, which factory-resets the phone within moments—without digging through Settings or waiting for an administrator.
Whole-device wipeHold or tapDevice Owner protected
9:415G · 86%
EMERGENCY CONTROL
Panic Wipe
Erase everything on this device—now.
Require press-and-holdHold for 3 seconds. Release early to cancel.
Emergency contactsAlert before erase
!This cannot be undone
013 secdefault hold resists accidental taps
02Tapoptional immediate trigger
03Factoryreset clears the whole phone
04DPCprotected Device Owner handoff
Built for duress
No menus. No ambiguity. No recovery delay.
The control does one thing and exposes its readiness before an emergency. A signed handoff keeps ordinary third-party apps from invoking the wipe command, while the Device Owner performs the irreversible reset.
Choose hold or immediate tap
Press-and-hold is the safer default. Single-tap mode removes the delay when the threat model prioritizes the fastest possible response.
Armed state is visible
The button is enabled only when the management app is installed and active as Android Device Owner. Otherwise it is disarmed and explains why.
Protected app-to-DPC handoff
The companion and management app are co-signed. A signature-level permission and explicit receiver prevent unrelated apps from sending the command.
Notify designated contacts
Users can keep emergency SecurePhone handles on the device. At trigger time, the system makes a best-effort alert just before the phone is erased.
A distinct panic-wipe record
When the pre-wipe event reaches management, operators can distinguish a user panic action from an administrator remote wipe and plan reactivation accordingly.
Emergency path
Prepared in advance. Immediate when needed.
Panic Wipe is useful only when the managed-device relationship is already healthy. The app makes that dependency visible so teams can test readiness before the device enters the field.
Enroll the managed phone
Provision SecurePhone MDM as Android Device Owner so it has authority to perform a factory reset.
Choose the trigger behavior
Keep the three-second hold for accident resistance or select immediate tap for the shortest possible duress path.
Add emergency contacts
Optionally store the SecurePhone handles that should receive a best-effort alert when a panic wipe starts.
Trigger and erase
The companion dispatches the protected command; the Device Owner reports the event when possible and begins the irreversible factory reset.
Know the exact scope
Whole-device panic wipe and chat duress are different controls.
Panic Wipe factory-resets a managed phone through Device Owner. A separate chat duress password can clear chat data and credentials only—it does not erase the rest of the phone.
Explore SecurePhone MDMIrreversible whole-device wipe
Local photos, files, apps, accounts, and chat data are erased.
Device Owner required
Unmanaged installs cannot factory-reset the phone through Panic Wipe.
Alerts are best effort
Emergency-contact delivery is not guaranteed, especially when the phone is offline.
Plan reactivation
Policy, apps, eSIM, and SecurePhone credentials may need to be provisioned again afterward.
Prepare before the emergency
Make the last-resort control part of the deployment.
Define who receives Panic Wipe, which trigger mode fits the threat model, how alerts are routed, and what the reactivation runbook looks like afterward.
Configure yours