How to Factory Reset a Chromebook & Remove Admin

If you're searching for how to factory reset a Chromebook and remove an administrator account, you've probably hit a wall that a simple Powerwash can't get past. The standard reset wipes your local files and settings, but it doesn't touch the account lock. That is why so many people end up staring at a "This device is managed by your organization" screen, feeling stuck.

Per Google's official documentation, a managed Chromebook stores an enrollment certificate in the firmware. A normal factory reset leaves that certificate completely intact. As of 2026, the only way to remove it is to follow a specific path based on whether you own the device.

Let's walk through that decision tree step by step.

Image source: Openverse / Brad Stallcup

The Real Problem: Why a Simple Reset Doesn't Always Work

Most people assume a factory reset wipes everything. On a Chromebook, that assumption is only half right.

The built-in reset, called Powerwash, clears your local data, your apps, and your settings. It never touches the device's enrollment status. That distinction matters enormously.

Here is the core distinction:

• Personal Chromebook, No enterprise management. Powerwash works perfectly. You log in again with any Google account.
• Managed Chromebook, Owned or controlled by a school or company. The enrollment is baked into the firmware. Powerwash cannot delete it.

The reason is technical. Chrome OS uses a verified boot process that checks a signature stored in the hardware. That signature ties the device to a specific Google Admin domain.

Until that signature is removed by an authorized administrator, every reset will bring you right back to the same login screen.

In our research, this is the single most misunderstood fact about Chromebooks. So the question isn't "how do I reset this?" It is "do I actually control this device?" That answer determines everything that follows.

Quick Answer: What Will and Won't Remove an Admin Account

A Powerwash removes local data. It does not remove a managed admin account. Recovery mode also fails.

Only two methods work. First, using the Google Admin Console if you are the administrator. Second, performing a Powerwash on an unmanaged personal device.

If the Chromebook is enrolled by a school or employer, you need their help. No other method is reliable or legal. Developer mode, recovery mode, and battery removal all leave the enrollment certificate intact.

Core Explanation: How Chromebook Account Locking Actually Works

To understand why a simple reset fails, you need to know what "managed" really means. Chromebooks run Chrome OS, which includes a feature called enterprise enrollment. When a school or company sets up a fleet of Chromebooks, they enroll each one through the Google Admin Console.

Here is what happens during enrollment:

• The device checks in with the domain's admin server.
• A unique enrollment certificate is written to the firmware's protected storage area, the Trusted Platform Module (TPM).
• The certificate includes the domain name, like "school.edu" or "company.com."
• Every time the Chromebook boots, the firmware verifies that certificate. If it is present, the device forces the user to sign in with an account from that domain.

This is not a software lock you can delete through the operating system. The certificate lives in a hardware-level secure element. That is by design.

Google built it this way to prevent theft and to let organizations enforce security policies remotely.

Official documentation from Google on Chrome Enterprise enrollment confirms this process. Manufacturer documentation from Acer, Lenovo, and HP all echo the same facts. There is no hidden workaround that a regular Powerwash can exploit.

First, Check: Is Your Chromebook a "Managed Device"?

Before you do anything else, confirm whether you are dealing with a personal device or a managed one. The check takes ten seconds.

Look at the login screen:

If you see text like "Managed by your organization" or "This device is managed by [domain name]" under the sign-in field, the Chromebook is enrolled. If the screen is blank with just a Google logo and an email field, it is likely personal.

Image source: Bing (Web (fair-use with source credit))

Check inside Settings:

1. Sign in with any account, even a personal one.
2. Click the time in the bottom-right corner.
3. Click the Settings gear icon.
4. Scroll to "About Chrome OS."
5. Click "Additional details."

Look for a line that says "Device is managed by your organization." If you see it, the device is enrolled. If you do not, and the section is blank, it is personal.

One edge case:

Some older Chromebooks that were once managed but later unenrolled by an admin may show a residual message. But the enrollment is actually gone. The only way to be sure is to attempt a Powerwash.

If after the reset you can sign in with any personal Google account, you are free. If the "Managed by" screen reappears, the certificate is still active.

Decision Tree: Your Next Step Depends on One Thing

Now you know where you stand. The path forward branches based on one question: who controls the device?

Branch A: You Own the Device (No Management)

If the check above showed no management, you can proceed with a standard Powerwash. This is the simple case.

Steps:

1. Back up anything important. The Powerwash deletes all local data, including files in the Downloads folder, saved passwords, and installed apps. Sync your Google Drive and Photos first.
2. Sign out of your Chromebook.
3. Press and hold Ctrl + Alt + Shift + R.
4. Select "Restart."
5. In the pop-up, click "Powerwash."
6. Click "Continue."

The device will reboot. It will walk you through the initial setup as if it were new. Sign in with your personal Google account.

The administrator account from before will be gone.

What if the Powerwash does not complete? Sometimes the process freezes or throws an error. In that case, you need Recovery Mode. Follow the steps in the "Recovery Mode" section later in this guide.

Branch B: You Have the Admin Login (Managed, but You Can Fix It)

If the Chromebook is managed but you are an administrator for that domain, you can unenroll the device from the server side. This removes the firmware certificate permanently.

Steps for the admin:

1. Sign in to the Google Admin Console at admin.google.com.
2. Go to "Devices" then "Chrome" then "Devices."
3. Find the Chromebook's serial number in the list.
4. Click the device to open its details.
5. Select "Actions" then "Unenroll."

Once the unenrollment is processed, the Chromebook will sync the change on its next network check. To force it immediately, run a Powerwash on the device. After the reset, the device will no longer require a domain account.

A quick note. This action is permanent. The device will no longer report to your admin console.

Do this only if you intend to remove the device from your organization's fleet entirely.

Branch C: School or Work Still Controls It (And You're Stuck)

This is the most common scenario for frustrated users. You have a Chromebook that was issued by a school or employer. You left that organization.

Maybe you bought it secondhand and never realized it was still enrolled. Either way, you cannot remove the admin account yourself.

Your real options:

Developer mode, recovery mode, and even powering off the battery will not help. The enrollment certificate survives all of these because it lives in the firmware TPM, not in the operating system.

If you purchased a Chromebook from a secondhand seller and it turned out to be enrolled, you have a consumer protection issue. Per the Federal Trade Commission guidelines, a device should not be sold if it is still bound to another organization. Contact the seller first.

If they do not help, the device may be a brick for personal use.

Step-by-Step Guide: Powerwash for a Personal Chromebook

If you confirmed your Chromebook is personal and unmanaged, here is the full step-by-step process for a clean factory reset.

Before you start:

Back up anything you want to keep. A Powerwash deletes everything stored locally. That includes the Downloads folder, saved Wi-Fi networks, browser bookmarks (unless synced to your Google account), and any installed Android or Linux apps.

To back up files, copy them to Google Drive, an external USB drive, or another cloud service. Check that your important documents, photos, and downloads are safe.

The Powerwash process:

1. Sign out of your Chromebook completely.
2. Press and hold Ctrl + Alt + Shift + R at the same time.
3. A dialog box will appear. Select "Restart."
4. After the device reboots, you will see a blue screen with a Powerwash option.
5. Click "Powerwash" then "Continue."
6. The device will restart again and begin the factory reset process.

The whole thing takes about five to ten minutes. When it finishes, you will see the standard Chromebook setup screen. Choose your language, connect to Wi-Fi, and sign in with your personal Google account.

What if you cannot sign out?

If your Chromebook is stuck on a managed login screen and you cannot access the desktop, you can still trigger a Powerwash from the login screen. Press Ctrl + Alt + Shift + R from the sign-in page. The same dialog box will appear.

Follow the steps from there.

Image source: Bing (Web (fair-use with source credit))

Step-by-Step Guide: Recovery Mode (When Powerwash Won't Boot)

Sometimes a Powerwash fails. Maybe the device freezes mid-reset. Maybe the operating system is corrupted.

In those cases, you need Recovery Mode.

Recovery Mode reinstalls the Chrome OS operating system from scratch. It is more thorough than a Powerwash, but it still does not remove the enrollment certificate on a managed device. Use this only for personal Chromebooks that will not boot properly.

What you need:

• A separate computer with internet access.
• A USB drive or SD card with at least 8GB of space. All data on the drive will be erased.
• The Chromebook you want to recover.

Step 1: Create a recovery USB

1. On another computer, open the Chrome browser.
2. Go to the Chrome Web Store and install the "Chromebook Recovery Utility" extension.
3. Open the extension and click "Get started."
4. Enter your Chromebook model number. You can find this on a sticker on the bottom of the device.
5. Insert your USB drive or SD card.
6. Select the drive from the list and click "Continue."
7. The extension will download the Chrome OS image and write it to the drive. This takes a few minutes.

Step 2: Enter Recovery Mode on your Chromebook

1. Turn off the Chromebook completely.
2. Press and hold the Esc key and the Refresh key (the circular arrow key above the 3 and 4 keys).
3. While holding those two keys, press the Power button.
4. When the screen lights up, release the Power button but keep holding Esc and Refresh.
5. You will see a yellow exclamation mark screen. This means Recovery Mode is active.

Step 3: Install the recovery image

1. Insert the USB drive or SD card into the Chromebook.
2. The device should detect the recovery media automatically.
3. Follow the on-screen instructions to begin the recovery process.
4. The installation takes about 15 to 30 minutes. Do not remove the USB drive or power off the device during this time.

Step 4: Complete the setup

Once the recovery finishes, the Chromebook will reboot. You will see the initial setup screen. Set it up as a new device.

If the Chromebook was personal, you can sign in with any Google account. If it was managed, the enrollment screen will reappear.

Step-by-Step Guide: Removing Enrollment via Google Admin Console

This section is for administrators who manage a fleet of Chromebooks and need to remove a device from their domain.

If you are not an admin, this section does not apply. You will not have access to the Admin Console.

Prerequisites:

• You must have super admin or device management privileges in the Google Admin Console.
• You need the Chromebook's serial number. You can find this on a sticker on the bottom of the device or in the Settings menu under "About Chrome OS."

The unenrollment process:

1. Open a browser and go to admin.google.com.
2. Sign in with your admin account.
3. Navigate to "Devices" then "Chrome" then "Devices."
4. Use the search bar to find the Chromebook by serial number.
5. Click on the device name to open its details page.
6. In the left panel, click "Device management."
7. Under "Device settings," find the "Unenroll" option.
8. Click "Unenroll" and confirm the action.

What happens next:

The unenrollment command is sent to the Chromebook the next time it checks in with Google's servers. This usually happens within a few hours. To force it immediately, perform a Powerwash on the device.

After unenrollment, the device is no longer tied to your domain. Anyone can sign in with a personal Google account. The Chromebook will no longer receive enterprise policies or reporting.

What if you need to re-enroll the device later?

You can re-enroll it by going through the standard enrollment process. This requires factory resetting the device and signing in with an admin account during the setup flow.

What WON'T Work: Mistakes People Try That Waste Time

There are many myths about how to remove a Chromebook admin account. Here are the methods that do not work and why.

Developer mode

Developer mode boots Chrome OS with additional debugging access. It does not remove the enrollment certificate. On managed devices, developer mode is often blocked entirely by enterprise policy.

Even if you enable it, the certificate remains in the TPM.

Recovery mode

As explained above, recovery mode reinstalls the operating system. The enrollment certificate is stored in the firmware, not in the OS. A fresh install leaves the certificate untouched.

Removing the battery

Some people think that removing the battery and holding the power button will clear the firmware. This is not true. The TPM is a separate chip that retains its data even without power.

Pulling the battery does nothing.

Using a third-party "unlock" service

You will find websites and YouTube videos that claim to unlock managed Chromebooks for a fee. These are scams. They cannot access the TPM certificate without help from the domain administrator.

Some may install malware. Others simply take your money and disappear.

Flashing custom firmware

Technically possible on some Chromebook models, but extremely risky. Flashing custom firmware voids your warranty. It can brick the device permanently.

It also requires opening the case and removing a hardware write-protect screw. Even then, success is not guaranteed with newer Chrome OS versions.

Image source: Bing (Web (fair-use with source credit))

When You're Truly Stuck: The Hard Truth About Locked Chromebooks

Let's be honest about the worst case. If your Chromebook is enrolled by a school or company and you cannot contact the IT department, you are stuck. No reliable method exists to remove the admin account without the domain administrator's cooperation.

The device is effectively a brick for personal use. You cannot sign in with your own account. You cannot install apps freely.

You cannot use it as a normal laptop.

What you can do:

• Contact the original organization repeatedly. Be polite, explain your situation, and provide the serial number. Some IT departments will help if the device is old or has been written off.
• If you bought it secondhand, contact the seller. Request a refund or ask them to unenroll the device. If they refuse, file a dispute with the platform you used to buy it.
• If the device was issued to you by a former employer or school, check your contract or enrollment agreement. In many cases, the device must be returned regardless of whether you still work or study there.

What you should not do:

Do not pay for unlock services. Do not attempt risky firmware hacks. Do not try to sell a locked Chromebook to someone else, because that just passes the problem on.

And do not assume that a fresh install of Chrome OS will fix it. It will not.

The hard truth is that Google's enrollment system works exactly as designed. It is meant to prevent unauthorized removal. If you are not the rightful owner or administrator, you have no realistic path forward.

Expert Tips: Edge Cases, Secondhand Buys, and Resale Prep

Here are some practical tips based on common situations we see.

Buying a used Chromebook

Always check the login screen before you buy. Ask the seller to do a factory reset and show you the initial setup screen. If the "Managed by your organization" message appears, walk away.

A locked Chromebook has no value as a personal device.

If you buy online and receive a locked device, you have consumer protections. File a claim with the marketplace or your payment provider. Our editorial policy requires us to note that you should keep documentation of the purchase and your attempts to resolve it.

Preparing a Chromebook for resale

If you are selling a Chromebook, you must unenroll it first if it was ever managed. Log into the Google Admin Console and remove the device. Then perform a Powerwash.

Confirm that the setup screen shows no management message before handing it over to the buyer.

If the device was never managed, a simple Powerwash is enough. Make sure you sign out of your Google accounts and disable Find My Device before resetting.

Recovering a Chromebook from a defunct school district

Sometimes a school district closes or loses its Google Workspace account. In that case, the enrollment certificate has nowhere to check in. The device might still show the "Managed by" screen, but there is no active domain to enforce it.

In rare cases, this can be bypassed with a Powerwash. More often, the certificate persists and the device remains locked.

Using the device as a Linux machine

Some people ask if they can wipe Chrome OS entirely and install Linux. This is technically possible on many Chromebook models using tools like MrChromebox's firmware script. But it is complex.

It requires disabling the write-protect screw. And if the device is still enrolled, the boot process may refuse to run unsigned firmware. It is not a beginner-friendly solution.

Real Scenarios: Three Common Situations and How They Play Out

Scenario 1: Sarah's school Chromebook

Sarah graduated high school. Her Chromebook was issued by the school district. She wants to keep using it for college.

She contacts the school's IT department. They check their records and see the device is still enrolled. Since the school normally collects devices after graduation, they ask her to return it.

Sarah does not own the device. She has to give it back.

Scenario 2: Mark's secondhand purchase

Mark buys a Chromebook on eBay described as "lightly used, works great." It arrives locked with a "Managed by" screen. He contacts the seller. The seller claims ignorance but offers a partial refund.

Mark files a dispute with eBay and his credit card company. He wins the dispute and gets a full refund. He returns the Chromebook to the seller.

The lesson: check before you buy.

Scenario 3: Tech team's retirement

A small company closes its doors. The IT administrator does not unenroll the company's Chromebooks before shutting down the Google Workspace account. Employees take the devices home.

They try to reset them, but the "Managed by" screen persists. Without an active domain, the enrollment certificate is orphaned. One employee successfully contacts Google support, but Google cannot unenroll the device because the domain is inactive and they have no admin credentials.

The Chromebooks are hardware bound to a defunct organization.

Frequently Asked Questions

Can I remove a managed Chromebook admin account without the admin password?

No. There is no legal or reliable method to remove an admin account from a managed Chromebook without the domain administrator's cooperation. The enrollment certificate lives in the firmware and cannot be bypassed.

Does a factory reset remove the administrator account?

It depends. On a personal Chromebook, yes. On a managed Chromebook, no.

A Powerwash clears local data but leaves the enrollment certificate intact. The device will still require a domain account after the reset.

Can I use recovery mode to remove enrollment?

No. Recovery mode reinstalls Chrome OS but does not touch the firmware enrollment certificate. The device will remain locked after recovery.

What happens if I install Linux on a managed Chromebook?

Installing Linux requires custom firmware and disabling verified boot. On many managed devices, this is blocked by enterprise policy. Even if you succeed, the boot process may reject unsigned firmware.

It is risky and rarely works.

Is it illegal to remove a Chromebook admin account?

If you own the device and it is personal, no. If the device belongs to a school or employer, removing the admin account without permission is a violation of their policies and potentially illegal. The device is their property.

Can Google help me unenroll a Chromebook?

Google support cannot unenroll a Chromebook without authorization from the domain administrator. They will direct you to contact the organization that enrolled the device. If the organization is defunct, you may be out of luck.

Final Decision Guide: Pick Your Situation, Get Your Action Plan

Here is your action plan based on what you discovered in this guide.

Bookmark this guide if you need to reference it later. The steps are specific to Chrome OS as of 2026. If Google updates the enrollment system in the future, some details may change.

For more information on our research methodology and editorial standards, you can review our editorial policy. If you have questions about your specific situation, our contact page is open. Familiarizing yourself with our terms and conditions will also help you understand your rights when dealing with secondhand electronics and device ownership issues.