How to Prepare Devices for Resale Securely

Reselling retired laptops, desktops, phones and tablets recovers value and keeps working hardware in use. It also hands a device that once held your data to a stranger. Preparing devices for resale securely means removing that data with a suitable method, keeping records that show you did, and handing over hardware the buyer can actually use.

This guide sets out a repeatable process for organisations and individuals alike.

Are there reputable ways to ensure data is wiped before reselling devices?

Yes. Sanitise each device yourself with a recognised method and keep a record, or use a contracted provider that gives per-device records. Do not rely on the buyer or a trade-in shop to do it.

Why a factory reset is not enough on its own

A factory reset or operating system reinstall is designed to return a device to a usable state, not to sanitise every part of its storage. Depending on the device and method, data can remain in areas the reset does not reach. Our article on whether a factory reset removes everything explains the gaps, and disk wiping versus factory reset compares the two approaches.

Step 1: Record each device

Before anything is erased, log the asset tag, make, model, serial number (and IMEI for phones), storage type and capacity, condition and the last user. This becomes the backbone of your resale record and lets you match each erasure result to a specific device.

Step 2: Retain data and remove accounts

Make sure anything that needs to be kept has been retained through approved systems. Then remove account links that would stop the next owner using the device:

• Apple devices: sign out of the Apple Account and turn off Find My, otherwise Activation Lock can make the device unusable for the buyer. Organisations using device management should release devices from their management service.
• Android devices: remove Google and other accounts before resetting, so Factory Reset Protection does not lock out the next owner.
• Computers: remove the device from management tools, sign out of cloud accounts, and record any software licences that should not transfer with the hardware.

Step 3: Choose a suitable sanitisation method

A device going to resale leaves your control intact, so the target is usually Purge, the level NIST SP 800-88 Rev. 2 and IEEE Std 2883-2022 describe as making recovery infeasible even with laboratory techniques while keeping the media usable. NIST recommends Purge over Clear where possible.

• Hard disk drives: overwrite all addressable locations, after resetting any hidden areas. A single pass can be sufficient; multi-pass overwriting is no longer required by NIST.
• SSDs: use drive-supported sanitise commands such as block erase, or cryptographic erase where the conditions for it are met. Simple overwriting cannot reach every cell on flash storage. See whether overwriting SSDs is safe.
• Phones and tablets: modern devices use built-in encryption, and their erase functions work by removing the keys. Use a method appropriate to the platform. See how to erase mobile phones.

Step 4: Erase every drive and check the result

Desktops and workstations may contain more than one drive, and some laptops have a second SSD. Erasing from a bootable tool, outside the installed operating system, covers every detected drive in one pass. Confirm that each erasure completed without errors. Any device that fails should be retried or have its storage removed and destroyed, and it must not go into the resale batch. Our guide to verifying hard drive wiping explains how to check results properly.

Step 5: Test and grade the hardware

Buyers pay more for devices that are tested and accurately described. After erasure, check that the device powers on, that the screen, keyboard, ports, battery and storage work, and note cosmetic condition. Do not use your own accounts during testing, or you will have to remove them again.

Step 6: Reinstall an operating system if the buyer expects one

Many buyers expect a working operating system. Install it from official media and stop at the first set-up screen so the buyer can create their own account. Do not include paid software unless its licence allows transfer.

Step 7: Keep a record for every device

For each device, file the asset details, the sanitisation method and technique, the tool and version, the result, the date and who carried out the work. NIST SP 800-88 Rev. 2 recommends a certificate of sanitisation for each item. These records let you answer questions from customers, auditors or the regulator later. See why audit-ready erasure reports matter.

Step 8: Hand over securely

Record who received each device, when and where. If you sell through a reseller or broker, get a signed list of the serial numbers collected, and check that your contract covers what they do with any devices that fail their own checks.

Where RedKey USB fits

We designed RedKey USB for exactly this kind of repeatable preparation. It boots supported PCs and Intel Macs from USB, erases the drives it detects, and is a one-time purchase with unlimited use. The Professional and Ultimate editions produce a PDF report for each erasure to file with your resale records, and the Home edition shows the result on screen. The Ultimate edition also erases supported iPhone, iPad and Android devices, so one tool can cover a mixed batch. Apple silicon Macs are not supported; use Apple's Erase All Content and Settings for those.

Resale preparation checklist

1. Record the device and its storage.
2. Retain required data and remove accounts and activation locks.
3. Choose a sanitisation method suited to the storage (Purge for resale).
4. Erase every drive and confirm the result; route failures to destruction.
5. Test and grade the hardware.
6. Reinstall a clean operating system if required.
7. File a sanitisation record for each device.
8. Hand over with signed custody paperwork.

Done consistently, this process protects your data and your reputation, and gets more value from every device you sell.

Frequently asked questions

Does a trade-in shop wipe hard drives?

Some do, but you cannot verify it. Erase the device yourself before handing it over.

What data do trade-in sites collect?

Typically contact, payment and device details such as serial number or IMEI. Remove accounts and sanitise the device before sending it.

If your resale batches include phones, RedKey USB Ultimate covers supported iPhone, iPad and Android devices as well as computers. Related reading: How to Erase Mobile Phones Before Disposal and Does Factory Reset Remove Everything? The Real Answer.