Erasing a phone securely requires backing up, signing out of accounts, encrypting Android devices, and performing a factory reset before physically removing the SIM and storage cards.
One wrong step and your old phone hands over your passwords to a stranger. A simple factory reset isn’t always enough to keep your data out of reach, especially with modern forensic tools or if you skip the account removal. The good news: a clean wipe takes about ten minutes and a few deliberate steps. Here’s exactly how to erase your phone data so nothing comes back when the box leaves your hands.
Preparation: Backup And Sign Out First
Jumping straight to the reset is the most common mistake. You need two things done before you tap “Erase.”
Back up what you want to keep. For an iPhone, go to Settings > [Your Name] > iCloud > iCloud Backup and tap Back Up Now. For Android, open Settings > Accounts > Google and confirm your sync is set.
Sign out of your accounts. An iPhone still linked to an Apple ID becomes a brick for the next owner. Go to Settings > [Your Name] > Sign Out. You will be prompted to turn off Find My iPhone. On Android, removing the Google account prevents Factory Reset Protection (FRP) from locking the phone later. Go to Settings > Accounts > Google and tap Remove Account.
How To Erase An iPhone (iOS 15+)
Apple streamlined the erase path for modern iPhones. After backing up and signing out, the process takes under a minute.
Open Settings > General > Transfer or Reset iPhone > Erase All Content and Settings. Enter your passcode, then your Apple ID password. The phone will restart and show the Hello setup screen. Once it does, power it off, eject the SIM card with a paperclip, and store it separately.
If you are using an older iOS version (iOS 12–14), the path is Settings > General > Reset > Erase All Content and Settings. The result is the same, but you must ensure Find My iPhone is off first, or the reset will fail.
How To Erase An Android Phone (10+)
Android devices have a few more variables, but the core sequence is consistent across Google Pixel, Samsung Galaxy, Motorola, and most other brands.
Go to Settings > System > Reset Options > Erase All Data (Factory Reset). You will need to enter your PIN or password. Tap Reset Phone and then Erase Everything. If the phone is locked or unresponsive, you can perform a forced reset: power off the device, then hold Volume Up + Side Button to enter Recovery Mode, and navigate to Wipe Data/Factory Reset using the volume keys.
Once the Android reboots, remove the SIM card. If your device has a microSD card, eject that too — a factory reset does not erase external storage.
| Step | iPhone (iOS 15+) | Android (10+) |
|---|---|---|
| 1. Backup | Settings > [Name] > iCloud > iCloud Backup | Settings > Accounts > Google (or Google One) |
| 2. Sign Out | Settings > [Name] > Sign Out (off Find My iPhone) | Settings > Accounts > Google > Remove Account |
| 3. Encryption | Default (on by default since iOS 8) | Default on 6.0+; manual on older versions |
| 4. Reset | Settings > General > Transfer or Reset > Erase All | Settings > System > Reset Options > Erase All |
| 5. Eject SIM | Physical removal with SIM tool | Physical removal; also check microSD card |
| 6. Safe to Hand Over | Yes (after Activation Lock check passes) | Yes (after FRP check passes) |
Do You Need To Encrypt An Android Manually?
Probably not, but you need to check. Google made encryption mandatory on all devices that shipped with Android 6.0 (released in late 2015). If your phone dates from 2016 or later, it is encrypted out of the box and a factory reset makes the files inaccessible.
If you own an older Android phone (pre-2016 or a budget model that skipped the requirement), encryption is optional. To check, go to Settings > Security > Encryption. If it says “Encrypt Phone” and the button is not grayed out, tap it and wait for the process to finish before you perform the reset. Without this step, a simple data recovery tool can read your old files.
What Happens If You Forget To Remove The Google Account?
The phone will reset, but the next person cannot use it without your password. This is Factory Reset Protection (FRP), an anti-theft feature. If you have already given the phone away, you will need to provide the original Google credentials to the new owner — or the phone is a paperweight. The same applies to iPhones and Activation Lock. Removing the account before the reset is the only clean way to avoid this.
| Common Mistake | Consequence | How To Avoid It |
|---|---|---|
| Skipping encryption (old Android) | Data recoverable with cheap forensic tools | Encrypt manually in Security settings before reset |
| Ignoring the Google/Apple account | FRP / Activation Lock turns phone into a brick | Sign out of the account before resetting |
| Leaving the SIM / microSD inside | Carrier data and personal files remain | Physically eject both cards after the reset |
| Resetting on low battery | Reset fails; operating system may corrupt | Charge the phone to at least 70% |
| Trusting a reset without verifying | Device reboots to setup, but data may linger | Always wipe, eject, and then confirm the setup screen |
Final Secure Erase Checklist
The full sequence is short, but skipping any step creates risk. Before you hand over or recycle the phone, confirm each one:
- Backed up your photos, contacts, and messages.
- Signed out of Apple ID or Google account.
- Encrypted (only necessary for Android devices from 2015 or earlier).
- Factory reset using the System or General menu.
- Ejected the SIM card and any external storage.
- Confirmed the phone is at the Hello or setup screen.
Follow this order and your old phone is safe to sell, trade in, or recycle. The FTC’s guide on disposing of personal data recommends the same sequence, and it takes about as long as brewing a pot of coffee.
References & Sources
- FTC. “How To Remove Your Personal Information Before You Get Rid of Your Phone.” Covers the full data removal sequence and account removal steps.