Factory Reset Is Not Enough (But It Nearly Is)

By NorwegianSpark Editorial · Published August 8, 2026 — written with AI assistance and reviewed by the NorwegianSpark SA editorial team.

Selling or handing on a phone raises a reasonable worry: is a factory reset actually enough, or is your data still sitting there for someone with the right tools?

The reassuring answer is that on any reasonably modern phone, a factory reset is genuinely sufficient — for a specific technical reason. The problems people actually run into are different, and more mundane.

Why the reset works

Modern phones encrypt their storage by default. Everything written to the device is stored encrypted, and the key is held in dedicated hardware.

A factory reset does not laboriously overwrite every block. It destroys the encryption key. Without it, the remaining data is indistinguishable from random noise — not "difficult to recover" but mathematically useless. This is why the old advice about overwriting a drive several times, which comes from the era of magnetic hard disks, does not apply here.

The practical caveat is age. Very old devices, or budget models from before storage encryption became standard, may not encrypt by default. If a phone is a decade old, treat the reset as less definitive.

The two steps people actually skip

Neither is about data recovery. Both cause real problems.

Signing out of the account first. Both major platforms link a device to its owner's account so a stolen phone cannot simply be wiped and reused. If you reset without signing out, the phone can remain locked to your account — leaving the buyer with a device they cannot activate, and you with a support conversation. Remove the device from your account before or during the reset, and confirm it is gone from your account's device list afterwards.

Removing the SIM and memory card. Obvious, routinely forgotten. A memory card is separate storage and is often not encrypted at all. It goes with the phone unless you take it out.

The order that avoids trouble

• Back up anything you want to keep, and confirm the backup restores before wiping. A backup you have never tested is a hope.
• Sign out of your account on the device, and turn off the activation-lock feature.
• Remove the SIM and any memory card.
• Factory reset from the settings menu.
• Check your account's device list and remove the phone if it is still listed.
• Unpair accessories — watches and earbuds can stay tied to the old device.

Laptops are a different problem

The same encryption logic applies, but only if encryption was switched on. On phones it is the default; on computers it has often not been.

Before wiping a laptop, check whether full-disk encryption was enabled. If it was, resetting is equally effective. If it was not, the data is written in the clear and a plain reinstall may leave much of it recoverable — that is the case where a secure-erase tool, or the drive manufacturer's own secure-erase command, is worth using.

For a solid-state drive, prefer the built-in secure-erase function over repeated overwriting. Overwriting a modern SSD is both slower and less reliable than the command the drive provides.

When the device is broken

If the screen is dead and you cannot reach the settings menu, you cannot sign out or reset. If it was encrypted and you never disabled the lock screen, the data is already protected — but the activation lock will still be tied to your account, so remove the device from your account list through the platform's website.

If the device is genuinely at end of life and holds anything sensitive, physical destruction of the storage is the certain answer. Many local recycling centres handle this, and it is the one situation where the crude solution is the correct one.