Key Takeaways
Summary
18 items · 20–60 minutes depending on device type and data volume
Why This Checklist Matters More Than You Think
Handing off an old phone, tablet, or laptop feels simple — but the personal data stored on these devices is anything but trivial. Photos, saved passwords, banking apps, email accounts, and health information can all linger on a device long after you think it's been cleared. A casual "delete everything" is rarely enough.
Whether you're selling, donating, recycling, or giving the device to a family member, the steps below ensure your data leaves with you — not with the device. This checklist applies to smartphones, tablets, and laptops running any major operating system. For deeper context on protecting your data across all your devices, see our guide on personal data protection from end to end.
Back Up First — Wipes Are Permanent
A factory reset is designed to be irreversible. Once your device has been wiped, there is no reliable way to recover data that wasn't backed up beforehand. Complete your backup and verify it's accessible from another device or location before you proceed with any reset steps. Do not assume cloud sync has captured everything — check manually.
What You'll Need
Before you start, gather a few tools to make the process smooth and complete.
Cloud storage account
Used to back up photos, documents, and app data before wiping the device.
External hard drive or USB drive
An offline backup option for large files or data you prefer not to store in the cloud.
Password manager
Helps you confirm all saved credentials are securely stored elsewhere before the device is reset.
Authenticator app (on a second device)
Ensures two-factor authentication codes remain accessible after the original device is wiped.
Manufacturer's support page or device manual
Provides model-specific instructions for encryption and factory reset procedures.
The Full Pre-Handoff Checklist
Work through each group in order. Skipping steps — especially backing up before wiping — can lead to permanent data loss or lingering account access that's difficult to revoke later.
Back Up Your Data
Sign Out of Accounts and Services
Remove Physical Components
Encrypt and Factory Reset
Post-Reset Verification
Activation Lock Can Strand the Next Owner
On Apple devices, Activation Lock ties the device to your Apple ID. If you perform a factory reset without first signing out of your Apple ID, the next person to set up the device will be blocked by a lock screen requiring your credentials. Always sign out of your Apple ID under Settings before resetting. The same principle applies to Google's device protection on Android phones — sign out and remove the device from your Google account first.
After the Wipe: Don't Skip the Final Checks
Once the device has been reset, your job isn't quite done. Sign in to each of your major accounts — your Apple ID, Google account, or Microsoft account — and verify the device no longer appears in your list of authorised or trusted devices. Many services maintain a device list under Security or Privacy settings.
Also check your password manager or browser-saved passwords. If you used the device's browser to autofill credentials, those entries may still be synced across your account. Review and remove anything you no longer need. For a broader look at account-level privacy gaps that often go unnoticed, our digital privacy audit checklist is a useful next step.
Finally, if the device was enrolled in a mobile device management (MDM) system — common with work-issued phones or laptops — contact your IT department to ensure it has been formally unenrolled before it leaves your hands. Passing on a device that still carries corporate credentials or remote-access permissions creates risk for both you and your employer.