How to delete all data from an Android phone before selling without recovery

Selling a used smartphone is a great way to get back some of your investment or make room for a new model. However, along with the device, you risk transferring not only the hardware, but also your personal secrets to the new owner. Photos, correspondence, passwords for banking applications and access to cloud storage can fall into the wrong hands if you simply press the “Reset” button. Modern data recovery methods allow you to recover information even after formatting, if you do not take special protection measures.

To ensure your safety, you need to perform a set of procedures that go beyond the standard reset to factory settings. In this article we will analyze an algorithm of actions that will make your data inaccessible to any recovery apps. We will look at the issues of deauthorization, encryption of residual information and proper preparation of the memory card.

Ignoring these steps may lead to a leak of confidential information that cannot be corrected after the fact. Security data Depends on the sequence of your actions before the device leaves your hands forever.

Device preparation and backup

Before you begin to destroy information, it is critically important to save all valuable files. Once the cleaning procedures have been completed, it will not be possible to return anything back. Make sure you have access to a computer or cloud storage with enough free space.

Create a complete backup of your contacts, photos and documents. To do this, you can use the system's built-in tools or third-party utilities. Pay special attention to messenger folders, since the history of correspondence is often stored locally.

Don't forget to check your synchronization settings. Sometimes files you thought were deleted are still in the cloud and can sync back after a reset if you don't disable your account in time. Google Photos and Google Drive often keep copies without explicitly notifying the user.

Unlinking accounts and disabling protection

The most common scenario for blocking a sold phone is when the protection is triggered FRP (Factory Reset Protection). If you reset without logging out of your Google account, the new owner will not be able to activate the device without entering your password. This will turn the phone into a “brick” and create problems for both parties to the transaction.

You must manually delete all linked accounts. Go to settings and find the accounts section. Consistently remove Google, Samsung Account, Mi Account or any other manufacturer services that may block the device.

⚠️ Attention: If applications with administrator rights (antiviruses, corporate clients) are installed on the device, remove them or revoke the rights in the menu Settings → Security → Device Administrators. Otherwise, they may block the reset procedure.

It is also worth disabling the “Find my device” function. This option is closely related to FRP and can prevent the new owner from activating the smartphone normally even after logging out of the account. Some models Xiaomi or Huawei require a separate disabling of the manufacturer's cloud services.

Data encryption to protect against recovery

Simply deleting files or resetting settings does not physically erase memory sectors. The data remains on the drive until new information is written over it. Specialized software can read these “ghost” files. To make recovery impossible, you need to encrypt the memory before clearing it.

On modern versions of Android (starting from 6.0), encryption is enabled by default. However, to ensure complete security, it is recommended that you perform this procedure manually before selling older models or rewriting encryption keys. This will turn your old data into unreadable digital noise.

Go to the security section and select encryption. The process can take from 30 minutes to several hours depending on the storage capacity. The device must be fully charged and connected to the network.

Why does encryption make recovery impossible?

When encrypted, data is shuffled using a unique key. After resetting the settings, this key is deleted. Even if an attacker reads the bits from memory, without a key they are a meaningless set of characters that cannot be decrypted by brute force in a reasonable time.

Action	Goal	Execution time
Manual deletion of files	Free up space	5-10 minutes
Device encryption	Recovery protection	1-3 hours
Reset to factory settings	Removing keys and system	10-15 minutes
Writing junk data	Overwriting memory sectors	Depends on the volume

Full reset procedure settings

After the accounts are deleted and the data is encrypted, you can begin the final cleaning. There are two ways to perform this operation: through the settings menu and through Recovery Mode. The first method is preferable for most users, since it is less risky.

Find the item Reset settings or Restore and resetin the menu. The system will warn you that all data will be deleted. Confirm the action. The phone will reboot and begin the cleaning process, which may be accompanied by several reboots.

If the system does not boot or you want to perform a deep clean, you can use the hardware buttons. Turn off the phone, then hold down the combination of buttons (most often Volume up + Power) to enter Recovery. Select the item Wipe data/factory reset.

It is important to wait until the process is completely completed. Do not turn off the power to the device until the language selection welcome screen appears. This indicates that the system is cleaned and ready for initial setup.

Physical cleaning of the memory card and SIM card

The built-in memory is not the only data storage. microSD cards often contain photos, documents, and application caches. Resetting your phone does not affect external memory card, unless you specifically selected this option (which is rare).

Remove the memory card before starting the reset. If you plan to sell it along with your phone, you need to format it on your computer. Simply deleting files through File Explorer is not enough. Use low-level formatting apps or simply fill the card with unnecessary large files (for example, movies), and then delete them.

Be sure to remove the SIM card. It can store contacts and SMS messages. By inserting a SIM card into another phone, the new owner will have access to your phone book. It is best to reset contacts through the phone menu or replace the SIM card with a new one before selling.

⚠️ Attention: Menu interfaces may differ depending on the manufacturer's shell (OneUI, MIUI, ColorOS). If you do not find the option to format the SD card in the phone settings, use the card reader on your PC.

Final check and transfer of the device

After completing all procedures, the device should look as if it was just out of the box. The welcome screen should not show any sign of your account, installed applications or personal files.

Turn on your phone and go through the initial setup step to the main screen. Make sure there are no password prompts for your old Google account. Check the gallery and file manager - they should be empty.

Now the smartphone is ready to be transferred to the buyer. You have completed all the necessary steps to protect your digital identity. The new owner will be able to easily customize the device for himself without encountering technical blockages.

Is it possible to restore data after encryption and reset?

Almost not. Encryption changes the data storage structure, and reset deletes the decryption key. Without a key, recovery becomes a pointless attempt to assemble a puzzle from billions of random pieces. Even professional laboratories will not be able to help in this case.

What to do if the phone asks for a password for your Google account after resetting?

This means that you did not log out of your account before resetting (FRP protection worked). You will have to remember your password and enter it. If your password is lost, you will need to recover your account through the Google website from another device. It is difficult to sell a phone in this state legally.

Do I need to remove the protection from the factory unlocking (Bootloader)?

If you have previously unlocked the bootloader to install custom firmware, it is advisable to return it to its original state (lock) before selling it. This will provide the new owner with stable operation of banking applications and security functions, which often do not work on unlocked devices.

Does a factory reset remove viruses and Trojans?

Yes, a full factory reset (Factory Reset) removes all user applications, including malicious ones. However, if the virus has penetrated the system partition (which is rare on non-rooted devices), it may remain. In such cases, only flashing the device via a computer helps.