I used to tell people a factory reset was enough. Handing your old phone to your kid or passing a router to your sister? A reset is fine. You trust those people, and the risk is basically zero.
But selling it online? Donating it to a stranger? Trading it in at a carrier store? That’s a different story.
Today’s data recovery tools make a basic factory reset about as protective as a screen door on a submarine.
🛠️ How it works
A factory reset doesn’t delete your data. It deletes the table of contents. Everything is still there. Your Wi-Fi passwords. Your saved logins. Your photos. All of it, invisible to you but completely readable with a $20 tool and a YouTube tutorial.
A security company bought 18 used routers off the secondhand market. Over 56% still had Wi-Fi credentials, VPN logins and encryption keys sitting there. A study of secondhand phones? 35% had recoverable texts, emails and passwords after a factory reset. At DEF CON (the world’s biggest hacking conference), a researcher found that 50% of smart home devices bought secondhand hadn’t even been reset. People unplugged them and dropped them at Goodwill.
The average American home has 21 connected devices. That’s 21 little filing cabinets full of your life heading to a shelf somewhere.
🔑 Do this
Here’s the real checklist.
1. Encrypt first, then reset. This is the move that makes everything else pointless to recover.
- iPhone: Your data is encrypted by default, but you need to do this right. Sign out of iCloud first: Settings > [Your Name] > Sign Out. Then go to Settings > General > Transfer or Reset iPhone > Erase All Content and Settings. This destroys the encryption key. Anything left on the chip? Scrambled gibberish.
- Android: Go to Settings > Security and privacy > More security settings > Enhanced data protection > then toggle on Encrypt backup data (if it’s not already encrypted). Then Settings > System > Reset > Factory Data Reset. The order matters. Encrypt first, then reset. If you reset without encrypting, your data is still sitting there in plain text.
2. The double wipe. Reset it using the steps above. Then set it up again with a fake name, junk email and a guest Wi-Fi network. Fill it with garbage. Then reset it again using the same steps. This forces the chip to overwrite your real data. Free. Easy. Wildly effective.
3. Cut the cloud connection. Go into your Apple, Google, Amazon or any other account’s security settings, find the list of connected devices and remove the one you’re getting rid of. Do this for every account tied to that device. If you skip this step, your old gadget still has a backstage pass to your stuff.
4. For routers and cameras you can’t properly wipe? Don’t donate them. A drill bit through the circuit board takes three seconds and is the only reset that’s 100% guaranteed. Then recycle the remains.
📊 Post this stat: 56% of used routers sold online contain the Wi-Fi passwords, VPN logins and encryption keys of their previous owners. A “factory reset” doesn’t erase your data. It erases the map to your data. Everything else is still on the chip. GetKim.com
Know someone selling their old phone, upgrading their router or dropping tech for someone to go Goodwill hunting? Forward this right now. Their data is literally sitting on a shelf.
📧 Email sharing snippet: “Factory reset erases everything” is the biggest lie in tech. It doesn’t. 56% of used routers still had the previous owner’s passwords on them. I learned the real way to wipe my stuff. I get this 5-star-rated newsletter. Sign up for free at www.GetKim.com.