Remote wipe is the capability to erase a device remotely, typically via MDM (enterprise) or via the manufacturer’s tracking service (Apple Find My, Google Find My Device, Samsung Find My Mobile). Designed for lost or stolen devices to prevent the data falling into the wrong hands. Sometimes deployed in adversarial contexts: an enterprise wipes a departed employee’s phone, a parent wipes a teenager’s phone, an ex-partner wipes a shared family device.
What it means in practice
The wipe works only if the device is online when the command reaches it. A device that is powered off, in airplane mode, or in a faraday bag will not receive the command until next connection; if the seizing agent boots it offline, the wipe never executes. The wipe also typically does not erase cloud-side copies: an MDM-wiped iPhone whose iCloud Backup was current up to the wipe still has the backup recoverable from the iCloud account. The reverse-of-wipe scenario also matters: an attacker who gains access to an Apple ID or Google account can issue the wipe command against the legitimate user’s device, which is the structural weakness of always-on remote-wipe capability.
Where it shows up
Available to: every iPhone owner via Find My (icloud.com/find), every Android owner via Find My Device, every employer via MDM (Jamf, Intune, Workspace ONE), some carriers via account-portal management. Used in adversarial contexts: jealous partners or family members who retain Apple ID access to a former-shared device wipe data after separation, ex-employers who failed to deprovision MDM enrollment wipe personal data after termination disputes, attackers who phish into a victim’s iCloud account use the wipe as denial-of-service or to destroy evidence before forensic examination. The Predaxia note: remote wipe is a capability, which means it is also an attack vector.
What you can change today
Three actions to take control of remote-wipe exposure. First, audit who can issue wipes against your devices: verify only your accounts (not a former-employer MDM, not a former-partner Apple Family) retain the capability. Settings, General, VPN and Device Management on iPhone; Settings, Accounts, Work profiles on Android. Second, harden the accounts that can issue wipes: hardware-key 2FA on Apple ID, Google Account, Microsoft Account, and any active MDM admin login. Third, assume the wipe is the attacker’s tool too: your most important data should also exist in offline backup form (encrypted external drive, paper documents, hardware wallet) so a wipe-as-attack does not cause permanent loss.