I figured it out!
- First, boot up normally
- Sign in to a network
- Allow it to check the connection
- Then when it asks you to verify your account, press the back button until you get back to networking
- Choose a different network, type a bunch of random letters/numbers then press show password select it, press assist.
- Then Google will open
- Search for Settings
- From Settings, go to Backup/reset
- Reset the device
- Boot normally once again
- You will be asked to verify again. Turn your device off
- Reboot into safe mode
- Then re-bypass into Settings
- Head to Device info
- Enable developer mode (press build number 7 times)
- You can't enable dev mode unless you are in safe mode as there is protection for it
- Once you have dev mode enabled, you need to turn on USB debugging and OEM unlock
Whatever you do, don't press the home button. If it works, all of the settings will be unapplied and setup will restart
- Now, reboot to recovery (power off, then hold the volume up button while turning the device back on)
- Next, we need to scroll to
<Reboot to Bootloader>
- Press the power button to select it. You will boot into fastboot
Now you will need a PC
First, let's check if OEM unlocking is enabled. Run
fastboot flashing get_unlock_ability from CMD/terminal (you have to have ADB/fastboot installed).
You will get
(bootloader) unlock_ability = 0 if it isn't enabled. But if it is, you will get
(bootloader) unlock_ability = 1XXXXXXX
If it's enabled, we have to unlock the bootloader (this will void your warranty). We have to do this as OEM unlock isn't really enabled. What we've done is made it so the system sees that it's both enabled and disabled. This means the only command that will work is
fastboot oem unlock
We're going to run this command. When you do, spam the volume up button to select yes.
Now we're almost done. We have to unlock it from flashing too and unlock system critical (in the security update from 2016, the FRP partition was marked as critical and unless we unlock critical partitions, the FRP lock won't ever go away)
First, flashing unlock. Run
fastboot flashing unlock
Spam the volume up again
fastboot flashing unlock_critical
Spam volume up again
Now close ADB/fastboot on your PC
And unplug your device
Since security is still enabled,
fastboot reboot doesn't work. So we have to wait for the device to drain completely.
Then charge it a bit and turn it back on. It will wipe the FRP partition alone with all the other ones, except for the
FRP is disabled now.
This will work on any Android device with fastboot. Did this from an RCA tablet, so it does.