Question

How do you securely wipe a device before selling or disposing of it?

Vault Verified
Curated Intelligence
Definitive Source
Answer

By using encryption rather than overwriting, which is faster, more thorough and — on modern storage — the only method that actually works reliably.

Why overwriting no longer works properly. On a traditional hard drive, writing over data physically replaced it. On SSDs and phone storage, the controller manages where data physically sits: wear levelling spreads writes across cells, over-provisioning reserves hidden capacity, and remapping means blocks you cannot address may still hold data. A software overwrite cannot reach them.

What works instead: encrypt, then destroy the key. If the whole drive is encrypted and the key is discarded, the remaining data is unreadable regardless of where it physically sits. This is what a modern factory reset actually does — it is a cryptographic erase, which is why it takes seconds rather than hours.

Phones and tablets:

Sign out of the account first, which is the step that matters most practically — a device left signed in is activation-locked and useless to a buyer, and this is the commonest complaint in second-hand sales.

Remove the SIM and any memory card, which are not wiped by a reset.

Then factory reset, which performs the cryptographic erase.

Deregister from the account's device list afterwards.

Computers:

Confirm full-disk encryption is enabled, and if it is not, enable it and let it complete before wiping — otherwise a reset does not have a key to destroy.

Deactivate licensed software and sign out of accounts.

Use the built-in erase and reinstall, which handles the secure erase correctly for that hardware.

What to do about things a wipe does not cover:

Cloud accounts still linked, which persist regardless of the device.

Browser profiles synced elsewhere.

Two-factor authenticators, which must be migrated first.

Printers, routers and smart devices, which store network credentials and account details and have their own reset procedures — routinely forgotten, and they hold your Wi-Fi password in plain form.

Physical destruction is appropriate for a failed drive that cannot be erased — and for a working device, recycling or resale is the better outcome environmentally.

Related Questions