Wipe a Phone Before Selling It Without Leaving Data Behind

A buyer messages you three days after you sold your old phone: it is stuck on a screen asking for your account password. Or worse, nobody messages you, and your old photos, saved card and authenticator codes quietly go wherever the phone goes next. Both outcomes come from the same rushed ten minutes before a sale.

To wipe a phone before selling it properly, a factory reset is only the last step. The steps before it decide whether your data is actually gone, whether your accounts stay locked to you and not the device, and whether the buyer can use the phone at all. This is the order I follow every time, for both iPhone and Android.

Start With What You Must Move Off the Phone

The biggest losses after a sale are not stolen data. They are things people forget to move and can never get back. Before touching any reset option, go through this list:

• Authenticator apps. Codes in Google Authenticator, Microsoft Authenticator or similar apps live on the device. Transfer them to the new phone and confirm at least one login works before wiping. Losing these can lock you out of email or banking for days.
• Messaging history. WhatsApp, Signal and similar apps use their own backups, separate from your phone backup. Run each one manually.
• Photos stored only locally. Check that your cloud backup shows the most recent pictures, not ones from last month.
• Two-factor by text message. If you are changing number as well, update it on important accounts now, while the old SIM still works.

Give this part at least half an hour. It is the step people skip, and it is the one that hurts later.

Sign Out of Accounts Before Any Reset

Modern phones tie themselves to your account with an anti-theft lock. On iPhone it is Activation Lock, linked to Find My. On Android it is Factory Reset Protection, linked to your Google account (and on Samsung, often a Samsung account too). If you reset without signing out first, the phone will demand your password on first boot, and the buyer has an expensive paperweight.

On an iPhone

1. Unpair any Apple Watch from the Watch app.
2. Go to Settings, tap your name, and sign out. Enter your password to turn off Find My.
3. If your new phone is an Android, deregister your number from iMessage so texts from other iPhone users still reach your new phone.

On Android

1. Open Settings, then Accounts, and remove your Google account.
2. Remove any manufacturer account, such as a Samsung account, the same way.
3. Unpair watches, earbuds and car connections so they stop trying to reconnect.

How the Factory Reset Actually Protects You

People worry that a factory reset just hides files that someone could recover with software. On a recent phone that worry is mostly outdated, and this is where I push back on the advice to "fill the storage with junk files and reset three times."

Current iPhones and Android phones running Android 10 or newer encrypt storage by default. The reset deletes the encryption key. Without that key, whatever bits remain on the chip are unreadable noise. Overwriting storage repeatedly adds wear and an hour of your time without meaningfully improving security on these devices.

The exception is older or very cheap Android phones where encryption was optional. If your phone is from before 2019 or never asked for a screen lock during setup, go to Security settings and turn on encryption before resetting. That one step gives you the same protection as a modern device.

Run the Wipe in the Right Order

With accounts signed out and data moved, the wipe itself takes about fifteen minutes.

Menu names vary by brand and version, so search "reset" in the Settings search bar if your phone differs. Keep the battery above 50 percent or plugged in; a phone that dies mid-reset can need a repair shop to recover.

The Physical Bits People Leave Behind

A reset does nothing to removable parts. I have bought secondhand phones with the previous owner's SIM card still inside, and a memory card full of holiday photos in another.

• Remove the SIM tray and take out your SIM. If you use an eSIM, delete it during the reset or through your carrier.
• Remove any microSD card. If you are selling the card too, format it in a computer, not just in the phone.
• Peel off case stickers or notes with PINs, addresses or names.
• Take off any adhesive tracker tag you may have stuck inside the case.

Check the Phone Before It Leaves Your Hands

After the reset, switch the phone on and stop at the welcome screen. If it shows "Hello" or a language picker and asks nothing about a previous account, it is clean. Then log into your Apple or Google account on a computer and check the devices list. The old phone should be gone; if it still appears, remove it there.

It also helps to know that account traces do not vanish everywhere when a device does. Apps may keep your data on their servers long after the phone is gone, as I explained in why deleting an app does not delete your data. If the new phone is an iPhone, spend fifteen minutes on the iPhone privacy settings worth changing before you fill it with apps again.

What to Share in the Listing, and What Not To

A clean phone is easier to sell when the listing proves it. One photo of the welcome screen and a line saying "reset and signed out of all accounts" answers the first question most buyers ask. What you should leave out is the full IMEI or serial number. Scammers copy those from listings to file fake loss reports or clone details onto stolen devices. If a serious buyer wants to check the IMEI against a blacklist, show it in person or send the last four digits only.

Use the marketplace's own chat rather than your personal number, and meet in a public place for cash sales.

FAQ

Is a factory reset enough if I am only trading in at a shop?

Mostly, but still sign out first. Trade-in counters often check for Activation Lock or Factory Reset Protection and will refuse the phone or lower the price if it is still attached to your account.

Can I wipe a phone I already lost or sold without resetting?

Yes. Use Find My on iCloud or Find My Device from Google to erase it remotely, then remove it from your account. The erase runs the next time it connects to the internet.

Should I change my passwords after selling a phone?

Only if you skipped signing out or saved passwords in a browser on that phone without a sync account. Otherwise a proper reset is enough, though reviewing your account device list is still good practice.

The Ten-Minute Version to Keep

Move authenticator codes and messaging backups first. Sign out of your Apple or Google account so the anti-theft lock comes off. Reset from Settings with the phone charged, pull out the SIM and memory card, then confirm the phone reaches its welcome screen clean. More guides for the hardware you carry every day are in the devices section.