- Why SMEs need a business password manager to tackle credential chaos
- Cybersecurity in the office: what sensitive data devices can store?
Cybersecurity at home and in the office: how to prepare a laptop, desktop or mobile phone for sale or disposal

These devices can store sensitive data, so it's important to clear it to avoid cyber incidents.
Disclaimer: We have taken great care to provide accurate and up-to-date information. However, procedures may vary depending on device model, software version, or manufacturer. We cannot guarantee that all details are 100% correct in every case. Please always verify the steps for your specific device before proceeding.
Without a doubt, computers and mobile phones are the most important devices in the lives of modern people. However, technology is constantly evolving, so these devices must be updated periodically. Old devices can be resold or recycled, but first, they must be prepared to prevent a cyber incident involving sensitive data stored on them.
These tips may also be useful for small businesses since devices periodically need to be updated, and it is often more profitable to resell them than destroy them. Also, a dedicated IT specialist is not always on staff.
The core goals are the same for all types of devices:
- Back up your data securely
- Sign out of accounts and services
- Remove linked devices and deauthorize licenses
- Wipe the device clean
- Do the final check to ensure that no one can access your old data
Preparing a Windows laptop or PC
The process for preparing them for disposal or sale is essentially the same. The distinction between PCs and laptops is more a matter of form factor than operating system or security process.
Follow these steps:
1. Back up your data. Use external storage, cloud storage, or backup software that stores backups outside your computer.
2. Sign out of your accounts: Your Microsoft account, OneDrive, Outlook, and Office apps. If you do not sign out of your Microsoft account, your device may remain "cloud-locked" after resetting. Some synchronized data, such as OneDrive files, Outlook cached data, or Office documents, may remain accessible in temporary or backup partitions if it is not properly unlinked. Make sure you remove the device from your Microsoft account.
3. Deauthorize software: This is especially important for Adobe, Microsoft Office, and Apple Music/Apple TV. If you don't do this before wiping the device, the software will still count it as active, which could cause you to exceed your license limit. Later, you won't be able to remove the old device.
4. Encrypt (optional): Use BitLocker to encrypt your data before wiping it (if available).
5. Factory reset: Go to Settings > System (Windows 11) or Update & Security (Windows 10) > Recovery > Reset this PC. This will reset your device to its factory settings.
If you’re particularly concerned about your privacy, use tools such as KillDisk, which can be booted from a CD disk or USB drive. For SSDs, you can also look for erasing software from the manufacturer or use the secure erase feature in the UEFI or BIOS for older devices.
Also, unpair peripherals such as printers or Bluetooth accessories. If you are selling them with the device, you should wipe them.
Prepare a Mac
1.Back up your data using Time Machine for an external drive or iCloud:
- Go to System Settings > General > Time Machine (for macOS Ventura and later versions). Connect your drive and click "Set Up Disk." You can choose to encrypt the backup, but make sure you don’t forget the password.
- Alternatively, use iCloud Drive to sync and back up your files.
2.Sign out of services to prevent activation lock and data issues:
iCloud / Find My Mac
- Go to System Settings > Your Name > iCloud > Find My Mac
- Turn off Find My Mac
- Then go to iCloud > Sign Out
iMessage
- Go to the Messages app
- Choose Messages > Settings, then click iMessage > sign out.
Apple Music / TV / iTunes
- Open the Music or TV app, go to Account > Authorizations > Deauthorize This Computer
Other apps (e.g., Adobe Creative Cloud, Microsoft Office): Sign out or deactivate the license if needed.
3.Unpair any accessories (e.g., keyboard, mouse, or headphones). This step is optional, but recommended.
Go to System Settings > Bluetooth > (i) > Forget This Device
4.Erase the Mac and reinstall macOS
For Macs without the Apple T2 security chips:
Step 1: Boot into Recovery mode
- Apple Silicon: Turn off the computer, then press and hold the power button until "Loading startup options" appears
- Intel: Turn on the computer and immediately hold down the Option + Command + R keys
Step 2: Erase the disk
- Open Disk Utility after starting in recovery mode
- Choose volumes to erase. Format: APFS
Step 3: Reinstall macOS
- After erasing, exit Disk Utility
- click Reinstall macOS [Name] and follow the prompts
For Macs with the Apple T2 security chips:
You can use Erase Assistant to restore your Mac to factory settings.
- Choose Apple menu > System Settings, then click General in the sidebar
- Click Transfer or Reset > Erase All Content and Settings
- Enter your admin information, review the information to be deleted and click Continue
5. Reset NVRAM (Intel Macs only)
- Shut down your Mac
- Turn it on and immediately press and hold the following keys: Option + Command + P + R for about 20 seconds
Optional: Remove the device from Apple ID online
- Go to https://appleid.apple.com
- Log in and go to Devices to remove the Mac
Prepare an iOS device (iPhone / iPad)
1. Back up your data to ensure that your photos, contacts, and other important information are saved.
Use iCloud: Settings > [Your Name] > iCloud > iCloud Backup > Back Up Now (Note: There are only 5 GB of free storage).
Use Mac/Finder or the Apple Devices app (Windows). Create a local backup. You can encrypt it, but don't forget the password.
2. Unpair connected devices
Apple Watch: Unpair via the Watch app. This creates a backup stored on your iPhone and included in the next iCloud backup and disables Activation Lock.
Bluetooth speakers or headphones: Remove them through Settings > Bluetooth.
MagSafe accessories: Unlink them through Find My > Devices.
Car systems (CarPlay): If you have paired your device with a vehicle, remove it via Settings > General > CarPlay > [car name] > Forget This Car.
Erasing all content and logging out of iCloud will break most connections, but unpairing before resetting helps avoid bugs, syncing issues, and other problems for the next owner.
3. Sign out of iCloud / Apple ID
This disables Activation Lock so that the new user can set up the device.
- Go to Settings > [Your Name] > Scroll down > Tap Sign Out
- Enter your Apple ID password to confirm
You should also disable the Find My iPhone feature on the device.
After signing out of iCloud, verify that the iPhone no longer appears in your list of trusted devices at appleid.apple.com or on your Mac. Remove it manually if it’s still listed.
4. Erase all content and settings
This will completely wipe the device.
Go to Settings > General > Transfer or Reset iPhone > Erase All Content and Settings.
5. Remove the SIM card (if applicable).
Remove the physical SIM card or delete the eSIM if used.
Preparing an Android device
1. Back up your data
Before wiping the device, make sure you have saved all your important data.
- Google account sync: Go to Settings > Accounts > Google to ensure that your contacts, calendar, photos and other data are synced.
- If you want to avoid transferring your contacts to a Google account, you can export them manually (Contacts > Settings > Export contacts). There are also privacy-friendly calendar apps with CalDAV synching that require some effort to set up but allow you to avoid Google servers.
- Photos and videos: Use Google Photos or transfer them manually to a computer or cloud storage.
- Files: Back up your files using Google Drive, a third-party cloud drive, or a USB transfer.
- SMS and call logs (if needed): Back this data up to Google Drive or to a third-party app.
- To avoid problems when exporting authentication data and passwords, use a cloud password manager to store them beforehand. This means that you will not need to extract and move this data later. If you have set up Google as your autofill service in your Android settings, your data will be synced across devices where you are signed in to your Google account.
2. Sign out of accounts
- To avoid issues with Factory Reset Protection, you must remove all Google accounts.
- Go to Settings > Accounts. Tap on each Google account and select "Remove account."
- If possible, also log out of any other apps or services, such as Dropbox or Facebook.
3. Unpair devices and remove external cards
- Unpair any Bluetooth devices, such as headphones or watches.
- Remove your SIM and microSD cards.
- As an eSIM is tied to a specific device, transferring it involves deactivating it on the old phone and activating it on the new one. This is usually done using a QR code or activation code provided by your carrier.
4. Perform a factory reset
This will delete all data and restore the device to its original state.
- Go to: Settings > System (or General management) > Reset options > Factory reset.
- Confirm the action and wait for the process to complete.
Note: Depending on your Android version and phone brand, some menus may differ.
Security tip: Before performing a factory reset, always remove your Google account from the device. Otherwise, Factory Reset Protection will link the phone to your account, preventing the new owner from setting it up.
Bonus tip: How to prepare a USB drive for disposal or sale
1. Physically destroy it (the best method for sensitive data)
Why? Even with software wiping, there is a slight chance that data could be recovered using advanced tools.
How:
- Smash the memory chip with a hammer
- Drill through the chip (not just the casing)
- Use industrial shredders. E-waste facilities often offer this service
Simply breaking the plastic casing is not enough – target the memory chip inside!
2. Use secure data erasure tools if you want to reuse or sell it
If you don’t want to destroy the USB drive, securely wipe it using data destruction software.
Cross-platform tools for personal use:
- KillDisk (has free versions for Windows, Mac, and Linux)
- Donemax Data Eraser (robust, paid software with a free trial; made in China; supports Windows and Mac)
- CCleaner (paid version) and its open-source counterpart, BleachBit (for Windows and Linux), have a "file shredder" feature that can be used to securely wipe folders and files.
Professional and enterprise-grade erasure software:
- YouWipe and Certus Erasure – European software
- KillDisk – Canadian software that meets US, Canadian, and German standards
- Blancco and BitRaser – made in the USA but also meet EU standards
On Windows:
- Windows can securely wipe at a basic level with Full Format
- Or, encrypt the disk first (with BitLocker), then perform a full format
- For sensitive or regulated data, specialized tools are safer
On macOS:
- Use Disk Utility > Erase > Choose Security Options (if available) to set up data overwriting
Consclusion:
- If you need to reuse or resell the USB drive, use full-drive secure erasure software (or encryption + full format).
- If the data is highly sensitive, skip software wiping and physically destroy the drive.
Whether it’s a laptop, smartphone, or even a simple USB stick, every device that has stored personal or business data must be carefully prepared before leaving your hands. A proper process – backup, sign-out, deauthorization, wiping, and a final check – protects you from data leaks, licensing issues, and compliance risks.
For home users, this means peace of mind when selling or recycling old devices. For small businesses, it means avoiding costly breaches even without a large IT team. The rule of thumb is simple: erase before you pass it on – and if the data is too sensitive, physical destruction remains the safest option.
By following these steps, you not only protect yourself and your organization, but also contribute to a safer digital environment.