How to Wipe Your iPhone Before Selling: Complete 2026 Guide

Your smartphone contains more personal information than your wallet, your filing cabinet, and your diary combined. Photos, text messages, emails, banking apps, saved passwords, health data, location history, stored credit cards — it's all there. Selling your phone without properly erasing it is like handing a stranger the keys to your entire digital life.

And yet, a surprising number of people skip this step. A 2024 study found that nearly 1 in 5 used phones sold online still contained personal data from the previous owner, including saved login credentials, photos, and even banking information. Some sellers assume a factory reset is enough. Others don't know the difference between a factory reset and signing out of their accounts. And some just forget in the rush to ship.

This guide walks you through every step needed to completely wipe your iPhone — and your Android phone — before selling it. We'll cover what to do, what order to do it in, and the common mistakes that leave your data exposed.

The good news: if you're selling to a reputable buyback company like GadgetRenu, there's an extra layer of protection. GadgetRenu is R2-certified and performs a NIST 800-88-compliant data wipe on every device that arrives at their New Jersey facility, regardless of whether you've already erased it. That means even if you miss a step, your personal data won't end up in someone else's hands.

But you should still do the wipe yourself. It's the responsible thing to do, it takes about five minutes, and this guide makes it easy. If you're ready to sell, you can get an instant quote for your iPhone, Samsung, or Pixel on GadgetRenu right now.

Before you erase anything, make sure every photo, message, contact, and app is safely backed up. Once you wipe your iPhone, the data on the device is gone permanently. There is no undo button.

You have two backup options: iCloud and your computer.

Option 1: Back Up to iCloud

This is the easiest method and works over Wi-Fi.

1. Connect your iPhone to Wi-Fi.
2. Open Settings and tap your name at the top of the screen.
3. Tap iCloud > iCloud Backup.
4. Tap Back Up Now.
5. Wait for the backup to complete. Don't disconnect from Wi-Fi until it finishes. A full backup can take anywhere from a few minutes to an hour depending on how much data you have.

To verify the backup completed: go to Settings > [Your Name] > iCloud > iCloud Backup. You should see the date and time of the last successful backup.

Important: Free iCloud accounts only include 5GB of storage. If your iPhone has more data than that (and it almost certainly does), you'll need to temporarily upgrade your iCloud storage. Apple offers 50GB for $0.99/month, 200GB for $2.99/month, and 2TB for $9.99/month. You can downgrade after you've restored to your new device.

Option 2: Back Up to Your Computer

If you prefer a local backup or don't want to pay for iCloud storage:

On a Mac (macOS Catalina or later):

1. Connect your iPhone to your Mac with a Lightning or USB-C cable.
2. Open Finder and select your iPhone in the sidebar.
3. Click Back Up Now. Check "Encrypt local backup" to include health data, Wi-Fi passwords, and other sensitive information.

On a Mac (macOS Mojave or earlier) or Windows:

1. Connect your iPhone to your computer.
2. Open iTunes (Windows) or Finder (Mac).
3. Select your iPhone and click Back Up Now.

Don't Forget These Items

Backups cover most data, but a few things need manual attention:

• Two-factor authentication apps (Google Authenticator, Authy): Export or transfer your tokens before erasing. If you use Google Authenticator, you can transfer accounts to your new phone via a QR code. Better yet, switch to an app like Authy that syncs across devices.
• WhatsApp chats: WhatsApp requires its own backup process. Go to WhatsApp > Settings > Chats > Chat Backup and run a backup before erasing.
• Downloaded music or podcasts: If you have offline content from Spotify, Apple Music, or podcast apps, note what you had downloaded so you can re-download on your new device.

This is the most important step in the entire process. If you skip everything else, do not skip this one.

When you sign out of your Apple ID on the iPhone, three critical things happen:

1. Find My iPhone is disabled. This is Apple's anti-theft feature that locks the phone to your account. If Find My is still active when the buyer receives the device, they cannot set it up or use it — the phone is essentially a paperweight until you remotely remove it.

2. Activation Lock is removed. Activation Lock is tied to Find My. As long as it's active, anyone who tries to erase or restore the iPhone will be prompted for your Apple ID and password.

3. Your iCloud data is removed from the device. Photos, contacts, calendars, notes, and other data synced through iCloud will be removed from the phone (but will remain safely in your iCloud account).

Step-by-Step: Sign Out of Apple ID

1. Open Settings and tap your name at the top of the screen.
2. Scroll down and tap Sign Out.
3. Enter your Apple ID password when prompted.
4. You'll be asked if you want to keep a copy of certain data on the iPhone. Since you're about to erase the phone, it doesn't matter — tap Sign Out again to confirm.
5. Wait for the sign-out process to complete. This may take a minute or two.

How to Verify Find My Is Disabled

After signing out, double-check:

1. Go to Settings > [Your Name] — if you see a prompt to sign in rather than your name and account info, you've successfully signed out.
2. Alternatively, go to Settings > General > About and look for "Activation Lock." If it says "Off," you're good.

What If You Forget to Sign Out Before Shipping?

If you've already shipped the phone and realized you forgot to sign out, you can remotely remove it:

1. Go to iCloud.com or open the Find My app on another Apple device.
2. Select the device you sold.
3. Tap Erase iPhone (this wipes it remotely).
4. After the erase completes, tap Remove from Account.

This works, but it's slower and less reliable than doing it before you ship. Some buyback companies charge restocking fees or delay payment when Find My is still active. GadgetRenu will contact you to resolve it, but it adds delays to your payment. Save yourself the hassle and sign out before you ship.

Once you've backed up your data and signed out of iCloud, it's time to erase the device.

Erase All Content and Settings

1. Open Settings.
2. Tap General.
3. Scroll down and tap Transfer or Reset iPhone.
4. Tap Erase All Content and Settings.
5. If prompted, enter your iPhone passcode.
6. If prompted for your Apple ID password, you may not have fully signed out — go back and complete the sign-out process first.
7. Tap Erase iPhone to confirm.

The phone will restart and show the Apple logo with a progress bar. This process typically takes 2-10 minutes depending on the amount of data and the iPhone model. When it's done, the phone will boot to the "Hello" setup screen — the same screen you saw when you first took the phone out of the box.

Do not set up the phone again. Leave it on the "Hello" screen. This confirms the erase was successful and the phone is ready for its next owner.

Additional Steps Before Packing

Remove your SIM card: Use the SIM ejector tool (or a paperclip) to pop out the SIM tray and remove your SIM card. If you have a physical SIM, you can transfer it to your new phone or return it to your carrier. If your iPhone uses only eSIM (iPhone 14 and later US models), the eSIM is erased as part of the factory reset.

Unpair your Apple Watch: If you have an Apple Watch paired to the iPhone, unpair it before erasing the iPhone. Open the Watch app on the iPhone, tap your watch, tap the "i" icon, and select "Unpair Apple Watch." This creates a backup of your watch data and removes the Activation Lock from the watch. If you erase the iPhone first, you'll need to unpair the watch manually, which is more complicated.

Sign out of other apps: While the factory reset will remove all app data, it's good practice to sign out of sensitive apps individually before erasing — especially banking apps, email, and social media. Some services (like Gmail) track which devices are signed in, and signing out ensures the session is properly terminated on the server side.

For a more detailed guide on the full erase process, visit GadgetRenu's device erase instructions.

If you're selling a Samsung Galaxy or Google Pixel, the process is similar in concept but different in the specifics. Android has its own security features that need to be disabled before the new owner can use the device.

Step 1: Back Up Your Android Phone

Samsung Galaxy:

1. Open Settings > Accounts and backup > Back up data (Samsung Cloud).
2. Alternatively, use Google One backup: Settings > Google > Backup > Back up now.

Google Pixel:

1. Open Settings > System > Backup.
2. Tap Back up now to save to Google One.

Step 2: Remove Your Google Account (Critical)

This is the Android equivalent of signing out of iCloud. Android has a feature called Factory Reset Protection (FRP) that locks the phone to your Google account. If you factory reset without removing your Google account first, the next person who sets up the phone will be asked for your Google email and password.

1. Go to Settings > Accounts (on Samsung) or Settings > Passwords & accounts (on Pixel).
2. Tap your Google account.
3. Tap Remove account and confirm.
4. Repeat for any additional Google accounts on the device.

Step 3: Disable Samsung-Specific Security (Samsung Only)

Samsung devices have an additional layer called Samsung Find My Mobile and a Samsung account that works similarly to Apple's Activation Lock.

1. Go to Settings > Biometrics and security > Find My Mobile and turn it off.
2. Go to Settings > Accounts and remove your Samsung account.

Step 4: Factory Reset

Samsung Galaxy:

1. Open Settings > General management > Reset.
2. Tap Factory data reset.
3. Scroll down and tap Reset.
4. Enter your PIN/password and tap Delete all.

Google Pixel:

1. Open Settings > System > Reset options.
2. Tap Erase all data (factory reset).
3. Tap Erase all data and confirm.

Step 5: Remove SIM Card and SD Card

Don't forget to remove your SIM card and, if applicable, your microSD card. Some Samsung Galaxy phones (A-series) still support expandable storage — check before you ship.

GadgetRenu accepts Samsung Galaxy and Google Pixel phones in any condition. Get your Samsung quote or Pixel quote and see what your device is worth.

This is the question that keeps people from selling their phones — and it's a legitimate concern. Let's address it directly.

How Factory Reset Works on Modern Phones

On older phones (pre-2016 or so), a factory reset simply marked the storage space as "available" without actually overwriting the data. Sophisticated recovery tools could sometimes retrieve deleted files, photos, and messages. This is where the fear comes from, and at one point, it was justified.

Modern iPhones and Android phones handle this completely differently. Both iOS and Android use hardware-level encryption that is active by default:

• iPhones (iOS 8 and later): All data is encrypted with a key that's tied to your passcode and the phone's hardware. When you erase the device, the encryption key itself is destroyed. Even if someone could access the raw storage chips, the data would be meaningless without the key. It's mathematically unrecoverable.

• Android phones (Android 10 and later): Similar file-based encryption protects all user data. A factory reset destroys the encryption keys, rendering the data unreadable.

So if you're selling a phone made in the last several years and you've done a proper factory reset, your data is effectively destroyed. The theoretical data recovery attacks you read about apply to very old devices and are not practical on modern encrypted smartphones.

GadgetRenu's Additional Security Layer

Even with the encryption protection, GadgetRenu goes a step further. As an R2-certified facility, they perform a NIST 800-88-compliant data wipe on every device they receive. This is the same data destruction standard used by U.S. government agencies and military contractors.

The process involves a certified overwrite of all storage areas, followed by verification that the wipe was successful. This isn't just a factory reset — it's a documented, auditable data destruction process that meets the highest industry standards.

So when you sell to GadgetRenu, your data is protected by three layers:

1. Your own factory reset before shipping
2. Hardware encryption that destroys the decryption key during reset
3. NIST 800-88 certified wipe at GadgetRenu's R2-certified facility in New Jersey

To learn more about what R2 certification means and why it matters, read our deep dive: What Is R2 Certification?. You can also learn more about GadgetRenu's data handling on our data security page.

Even people who know they should wipe their phone sometimes make mistakes that compromise their security. Here are the most common ones and how to avoid them.

Mistake 1: Factory Reset Without Signing Out of iCloud/Google

This is the number-one mistake. If you factory reset your iPhone without signing out of your Apple ID first, Find My iPhone and Activation Lock remain active. The phone is tied to your account. The buyer can't use it. And depending on the buyer, they may contact you to resolve it — which means giving your email or phone number to a stranger.

Similarly, on Android, factory resetting without removing your Google account triggers Factory Reset Protection, which locks the phone to your account.

Fix: Always sign out of your Apple ID (iPhone) or remove your Google account (Android) before performing the factory reset.

Mistake 2: Forgetting About Paired Devices

Your Apple Watch, AirPods, Bluetooth keyboards, and other paired devices retain connections to your phone. If you don't unpair your Apple Watch before selling the iPhone, the watch remains locked to your Apple ID via Activation Lock. You can fix this remotely, but it's an unnecessary hassle.

Fix: Unpair all Bluetooth devices, especially your Apple Watch, before erasing your iPhone.

Mistake 3: Leaving Your SIM Card in the Phone

Your SIM card contains your phone number and, on older SIMs, may contain contacts. More importantly, a SIM card can be used to receive calls and texts — including two-factor authentication codes for your bank, email, and other accounts.

Fix: Always remove your SIM card before shipping. Transfer it to your new phone or contact your carrier for a replacement.

Mistake 4: Not Revoking App-Specific Permissions

Some apps and services maintain active sessions even after a factory reset. For example, if you were signed into Gmail, your Google account may still show the old phone as an active device.

Fix: After wiping your phone, go to your Google Account security page (myaccount.google.com) and your Apple ID device list (appleid.apple.com) and remove the old device from your trusted devices.

Mistake 5: Selling on Craigslist or Facebook Without Wiping

When you sell through a buyback company like GadgetRenu, there's a safety net — they'll wipe the phone as part of their process. But if you sell directly to a stranger on Craigslist, Facebook Marketplace, or OfferUp, there's no such protection. If you hand over a phone that still has your data, it's gone — you have no idea what the buyer will do with it.

Fix: Always wipe before handing over the phone, regardless of who you're selling to. And consider selling to a reputable, R2-certified buyback company for peace of mind.

Does a factory reset permanently delete everything on my iPhone?

Yes, on modern iPhones (iPhone 6 and later running iOS 8+), a factory reset combined with the built-in hardware encryption makes your data permanently unrecoverable. When you select "Erase All Content and Settings," the encryption key protecting your data is destroyed, rendering the data mathematically impossible to reconstruct. This is the same principle used in enterprise and government data destruction.

What happens if I forget to sign out of iCloud before selling my iPhone?

If Find My iPhone is still active, the buyer won't be able to set up the phone — it will prompt for your Apple ID and password. You can resolve this remotely by going to iCloud.com, selecting the device in Find My, erasing it, and removing it from your account. However, this adds days to the process and delays your payment if you're selling to a buyback company. GadgetRenu will contact you to resolve it, but it's much simpler to sign out before you ship.

Can someone recover my photos after I factory reset my Android phone?

On Android phones running Android 10 or later (which includes all Samsung Galaxy S21+ and Pixel 4+), file-based encryption protects your data. After a factory reset, the encryption keys are destroyed, making photo recovery effectively impossible with any commercially available tools. If you're using an older Android phone without encryption, you can enable encryption in Settings > Security before performing the factory reset for additional protection.

Should I remove my eSIM before selling my iPhone?

If your iPhone uses eSIM, the eSIM profile is erased during the factory reset (Erase All Content and Settings). You don't need to remove it separately. However, you should contact your carrier to transfer your phone number to your new device or a physical SIM before erasing, so you don't lose service. For iPhone 14 and later (US models) that are eSIM-only, there is no physical SIM to remove.

Does GadgetRenu wipe my phone again after I send it in?

Yes. Regardless of whether you've already wiped your device, GadgetRenu performs an R2-certified, NIST 800-88-compliant data wipe on every phone, tablet, and laptop they receive at their facility. This is a standardized, auditable data destruction process that exceeds what a consumer factory reset provides. It's one of the reasons GadgetRenu maintains R2 certification — data security isn't optional, it's a requirement of the certification. Learn more about R2 certification.