Secure wipe

The node can erase its settings and SD files on command, or on its own if someone moves it while auto-erase is on. A wipe needs an SD card and cannot be undone.

The erase key

Every wipe needs the erase key, a password that authorizes the wipe. The node makes one on first start, and the web flasher shows it. Write it down. If you flash with Erase device on, the node makes a new key. You can change the key under System → Settings → Danger zone.

Wipe from the web UI

Enter the key under Erase key and press Wipe now.

Wipe over the mesh

Your key never goes over the radio. Instead, the node gives you a one-time token to answer.

1. Send @AH01 ERASE_REQUEST. The node replies with a token.
2. Paste the token and your key into Erase Answer on the Web Flasher page. It computes the answer.
3. Send @AH01 ERASE_FORCE:<answer> within 5 minutes.

Five wrong answers lock erase commands for 10 minutes.

Auto-erase on tamper

Auto-erase wipes the node if it is moved while armed. It is off by default. Turn it on under System → Settings → Danger zone. Use it when a node is left where it must not fall into someone else's hands. See Vibration and tamper.

If an erase command is refused

The node refuses erase commands until an erase key is set. Set one under Danger zone. Over the mesh, the token expires after 5 minutes, so request a fresh one if you are too slow, and wait out the 10-minute lock after five wrong answers.

Reference

The mesh command reference lists every erase command.