Samsung tightens lock‑screen security on Galaxy phones with One UI 9
Samsung has introduced a tougher lock‑screen protection for its newest Galaxy phones that run Android 17 with One UI 9. If a user mistypes the PIN, pattern or password thirteen times, the device will refuse any further attempts and will require a factory reset to regain access.
This policy is intended to thwart brute‑force attacks, where an attacker keeps guessing until the correct credential is found. Older One UI releases relied mainly on temporary delays, but Samsung now enforces a permanent lockout after a set number of failures.
Why the change matters
Unlimited guessing can be a serious security gap, especially for high‑value devices. By imposing a final lockout, Samsung removes the incentive for repeated attempts and makes it far more difficult for malicious actors to gain unauthorized access.
How One UI 9.0 changes failed unlock attempts
Earlier One UI releases only imposed a temporary pause after a wrong entry; once the timer elapsed, the user could try again without any lasting restriction. Samsung previously provided an optional factory‑erase option that would wipe the device after fifteen consecutive failures, but that feature required manual activation.
Nadeem Sarwar / DigitalTrends
One UI 9.0 makes the final lockout mandatory. After five wrong attempts, the phone blocks new entries for one minute. The delay grows with each failure: one minute at five attempts, five minutes at six, fifteen minutes at seven, thirty minutes at eight, ninety minutes at nine, four hours at ten, twelve hours at eleven, and a full day at twelve. The thirteenth mistake locks the device indefinitely, and the only remedy is a factory reset that wipes all locally stored data.
| Number of Failed Attempts | Lockout Duration |
| 5 attempts | 1 minute |
| 6 attempts | 5 minute |
| 7 attempts | 15 minute |
| 8 attempts | 30 minute |
| 9 attempts | 90 minute |
| 10 attempts | 4 hours |
| 11 attempts | 12 hours |
| 12 attempts | 24 hours |
| 13 attempts | Permanent lockout, requires factory reset |
Samsung will display warnings and show exactly how many attempts remain. It is also adding Smart Counting, so entering the same incorrect PIN twice in a row counts as one failure instead of two. This should reduce accidental lockouts caused by repeated pocket taps or children pressing the same numbers.
Is Samsung taking the lockout rule too far?
Parents may fear that a child could keep punching in random numbers and eventually lock the device. In reality, even if a child keeps trying, the total time needed to reach the final lockout exceeds 42 hours because each waiting period must finish before the next attempt. Users receive multiple cautions well before the lockout, but the stakes are still high for anyone who truly forgets their credential.
Fingerprint and facial recognition do not eliminate the risk; Android still demands the backup credential at least once every three days, and Samsung cannot retrieve it remotely. Consequently, keeping regular backups becomes essential for anyone using a device with One UI 9.
