Wiping a device before you sell it, properly

Sign out of your accounts first, then reset. Doing it in that order is the whole trick, because a factory reset wipes the storage but does not always release the device from your account, and a phone or laptop that is still tied to you is useless to the buyer and a loose end for you. The full sequence is: back up, move your two factor codes, sign out and deactivate licenses, remove the device from your account's device list, turn off the anti theft lock, and only then erase.

Why a factory reset alone is not enough

Modern devices carry an anti theft lock that survives erasure by design. Apple calls it Activation Lock, Android calls it factory reset protection, and both do the same job: after a wipe, the device demands the credentials of the account that was signed in before. That is exactly what you want if your phone is stolen, and exactly what you do not want the day after a stranger buys it.

There is a second kind of linkage that has nothing to do with theft. Your account keeps a device list, and an entry on it can keep receiving notifications, count toward a device limit, and act as a trusted device for sign in approvals. Software licenses behave the same way: creative suites, office suites and media libraries commonly allow a fixed number of activated machines, and a computer you sold while still activated has quietly taken one of your slots.

So there are three separate jobs, and people usually only do the first. Erase the data. Break the account link. Release the licenses.

Encryption is what makes erasure trustworthy

The old advice about overwriting a disk several times comes from the era of spinning hard drives and does not transfer to flash storage. A solid state drive, and the storage inside every phone, spreads writes across spare blocks to even out wear, so overwriting a file may write the new data elsewhere and leave the original block untouched but invisible. You cannot reliably scrub flash from the outside.

Encryption solves this neatly. Phones and most current laptops encrypt their storage by default, with the key held in a small security chip. A proper factory reset destroys that key. The data blocks are still physically present, but without the key they are noise, which is why this approach is called a cryptographic erase. It is instant and it is thorough, and it is the reason a modern reset is trustworthy when an old disk wipe was not.

So confirm encryption is on before you erase, not after. On Windows check BitLocker or device encryption, on a Mac check FileVault, on Linux check whether the installer set up full disk encryption. If it was never enabled on an older machine, either turn it on and let it finish before resetting, or use the drive maker's own secure erase utility.

The order of operations

This sequence works for almost any device. Everything before the wipe is there because it needs the device to still be signed in.

1. Back up, and check the backup. Restore one file from it before you wipe anything. If you do not have a routine, a backup that survives a lost device is worth setting up now rather than in a hurry.
2. Move your two factor codes. This is the step that strands people. If your authenticator app lives on the phone you are about to erase, transfer it to the new device and confirm the codes work there first, because the second factor protecting your accounts is no use to you sitting on a wiped handset.
3. Check your password vault. Make sure you can unlock it elsewhere and that you know the master password from memory, not from a note on the device. The same applies to the recovery options on your main accounts, which often point at the phone number or device you are retiring.
4. Deauthorize licenses. Sign out of creative and office software, deauthorize media libraries, and release any seat that is tied to the machine.
5. Sign out of the accounts themselves. The platform account first (Apple, Google, Microsoft, Samsung), then messaging apps that bind to a device, then the browser profile.
6. Turn off the anti theft lock and remove the device from your account. Open your account's device list on another machine and confirm it is gone.
7. Erase. Use the built in reset and choose the option that removes data thoroughly rather than the quick one.
8. Check from outside. Power the device back on and confirm it reaches the setup screen and asks for nothing of yours.

A checklist for each kind of device

Two notes on that table. A device issued by an employer or a school is not yours to release, and the enrollment reappears after any reset, so hand it back rather than sell it. And for a buyer who is not technical, erasing and reinstalling the operating system is kinder than a reset that leaves a half configured setup behind.

SIM cards, memory cards and the things people forget

Physical media does not get wiped by a factory reset because it is not part of the device. Pop out the SIM tray and keep the card, or if the number is moving to a new phone, arrange that with your carrier first. An eSIM is different: it is a profile stored inside the phone, so transfer it to the new device or delete it before erasing, and be aware that deleting it may require a new activation from the carrier.

Memory cards are the classic oversight. A card left in a camera, tablet or older phone holds photos and sometimes app data, and formatting it inside the device usually just clears the file index. Take the card out and keep it. Cards are cheap enough that passing one on is rarely worth the thought.

Then there is the storage you never think of as storage: attached drives, an old backup disk in a drawer, a photo frame, a car that paired with your phone and kept your contacts. If you are selling a car, run the infotainment system's own reset. While you are reviewing what was on the device, note which apps had quietly filled it, because those same categories will be the ones that make storage fill up again on the replacement.

When the device is broken or the screen is dead

If it still powers on but the screen is unusable, use the remote erase feature from another device or from the web. That performs the wipe and usually offers to remove the device from your account afterward. Do that removal explicitly, because a remote erase alone can leave the anti theft lock in place.

If it will not power on at all, shift the goal to making the data unreadable and the account clean. Remove the device from your account list from another machine. For a laptop, take the drive out and keep it, or destroy it: drilling a hard drive platter or snapping a solid state drive is crude but effective, and a recycler will often do it and give you a certificate. For a phone with soldered storage, the encryption is already doing the work, provided a screen lock was set.

This is also the moment to decide whether selling is the right call at all. A device with a weak battery and no remaining update support may be worth more to you as a spare than to a buyer, which is the same calculation behind deciding when a phone is genuinely due for replacement.

The last pass before it leaves the house

Power the device on, walk to the setup screen, and confirm it asks you to choose a language rather than for a password. Open your account's device list one more time on your phone or laptop and confirm the old device is not there. Then look at your accounts, because a device you sold is often the last thing linked to services you no longer use, and closing those properly is a different job from logging out; deleting an account rather than abandoning it takes a few minutes per service.

Finally, note which device went where and when, in the same place you keep your other account records. It sounds fussy until a warranty claim needs proof of ownership, and it belongs alongside the record of accounts and devices someone would need after you die.