How do you securely wipe a device before selling or disposing of it?
By using encryption rather than overwriting, which is faster, more thorough and — on modern storage — the only method that actually works reliably.
Why overwriting no longer works properly. On a traditional hard drive, writing over data physically replaced it. On SSDs and phone storage, the controller manages where data physically sits: wear levelling spreads writes across cells, over-provisioning reserves hidden capacity, and remapping means blocks you cannot address may still hold data. A software overwrite cannot reach them.
What works instead: encrypt, then destroy the key. If the whole drive is encrypted and the key is discarded, the remaining data is unreadable regardless of where it physically sits. This is what a modern factory reset actually does — it is a cryptographic erase, which is why it takes seconds rather than hours.
Phones and tablets:
Sign out of the account first, which is the step that matters most practically — a device left signed in is activation-locked and useless to a buyer, and this is the commonest complaint in second-hand sales.
Remove the SIM and any memory card, which are not wiped by a reset.
Then factory reset, which performs the cryptographic erase.
Deregister from the account's device list afterwards.
Computers:
Confirm full-disk encryption is enabled, and if it is not, enable it and let it complete before wiping — otherwise a reset does not have a key to destroy.
Deactivate licensed software and sign out of accounts.
Use the built-in erase and reinstall, which handles the secure erase correctly for that hardware.
What to do about things a wipe does not cover:
Cloud accounts still linked, which persist regardless of the device.
Browser profiles synced elsewhere.
Two-factor authenticators, which must be migrated first.
Printers, routers and smart devices, which store network credentials and account details and have their own reset procedures — routinely forgotten, and they hold your Wi-Fi password in plain form.
Physical destruction is appropriate for a failed drive that cannot be erased — and for a working device, recycling or resale is the better outcome environmentally.