How to Sell or Exchange Your Old Phone Safely (Data Wipe Guide 2026)

To sell an old phone safely you need a data wipe that actually removes your data, and an exit from every account and service that still thinks the device is yours. Most people do half of this. They tap Factory Reset, hand the phone over, and only later discover that the device is still listed in their Google account, that the eSIM profile went with it, or that a banking app still has the handset registered as a trusted device.

The good news is that the technical part is far simpler than the internet suggests. Modern Android and iPhone storage is encrypted by default, which changes what a reset actually does and makes a lot of old advice unnecessary. The part that still needs care is the account housekeeping, and the order in which you do it matters. This guide from TechLein covers the full sequence, from backup to handover.

Key takeaways

• On an encrypted phone, a factory reset destroys the encryption key, which makes the remaining data unreadable.
• Filling the phone with junk files after a reset is outdated advice and unnecessary on modern devices.
• Sign out of your Google or Apple account before resetting, or activation lock will strand the buyer.
• Deregister banking, UPI and messaging apps separately, since a reset does not remove server-side device registrations.

Step one: back up before you touch anything

Once a reset completes, there is no undoing it. Start by copying off everything you actually want, and verify the copy exists before proceeding rather than trusting that a sync happened. Photos and videos are the obvious category, but people routinely lose two-factor authenticator seeds, offline documents, WhatsApp media, and app data from games and note-taking apps that do not sync.

Authenticator apps deserve special attention. If your two-factor codes live only on this phone and you wipe it without transferring them, you can lock yourself out of the accounts those codes protect. Move them to your new device first and confirm the codes work there. Our guide to backing up your phone data walks through the process for both platforms in detail.

Step two: transfer or remove the eSIM

If you use an eSIM rather than a physical SIM, the profile is stored on the phone, not on a card you can pull out. Resetting the device can delete the profile, and depending on your operator you may then need a fresh eSIM issuance to get your number onto the new phone. Some operators charge for reissuance and some make you visit a store.

Do the transfer before the wipe. Both Android and iOS now support transferring an eSIM to a new device directly in settings on many operator and handset combinations, and if that path is not available your operator can reissue the profile. Our complete eSIM guide for India covers how Jio, Airtel and Vi handle transfers and what to expect. If you use a physical SIM, simply remove it and keep it, along with the memory card if the phone has one.

Step three: unlink accounts and services

This is where a reset alone is not enough. Several categories of registration live on a server, not on the handset, and wiping the phone leaves them intact.

UPI apps are the most important item for Indian users, because UPI binds your payment identity to the specific handset and SIM. Open each payment app, remove the linked bank accounts or use the app’s own deregistration option, and only then wipe. If you skip this and sell the phone with a working SIM inside, you have handed over a device that has been trusted by your bank. Our guide to UPI payment fraud protection explains why device binding matters and what to watch for.

For WhatsApp, the clean approach is to install it on the new phone and verify your number there, which automatically deregisters the old device. Restore your backup on the new phone first so nothing is lost. If you want to tighten things while you are at it, our guide to securing your WhatsApp account covers two-step verification and the linked devices list, which is worth reviewing whenever you change handsets.

Step four: why a factory reset is enough

Older advice from the era of unencrypted Android says to reset the phone, fill the storage with junk videos, and reset again, on the theory that deleted data can be recovered from flash. That advice is genuinely obsolete on any reasonably modern device.

Android has enabled storage encryption by default since Android 6 on capable hardware, and iPhones have used hardware-backed encryption for far longer. The data on the storage chip is encrypted with a key held in a dedicated secure element. A factory reset does not just delete files; it destroys that key. Without the key, what remains on the chip is indistinguishable from random data. There is nothing meaningful left to recover, which is precisely why cryptographic erase is the recommended approach for encrypted storage generally.

Two caveats are worth knowing. Very old budget phones running Android 5 or earlier may not have been encrypted, and on those the extra overwrite step still makes sense. And a removable microSD card is often not encrypted, so remove it and either keep it or format it separately.

Step five: the wipe, in the right order

1. Complete your backup and confirm the files exist on the new device or in cloud storage before going further.
2. Transfer your eSIM to the new phone, or remove the physical SIM and microSD card.
3. Move your authenticator app entries to the new device and verify a code works.
4. Deregister UPI and banking apps, and unlink any wallet or payment services.
5. Set up WhatsApp on the new phone so the old handset is deregistered automatically.
6. Turn off Find My Device on Android or Find My iPhone on iOS, then sign out of your Google or Apple account on the device. This is the step that prevents activation lock stranding the buyer.
7. Now run the factory reset from Settings, then System or General, then Reset. Choose the erase all content and settings option.
8. After the reset completes, walk through the first setup screen only far enough to confirm no account is requested. Do not sign in again.
9. Log in to your Google or Apple account from another device and remove the old handset from the list of devices.
10. Note the IMEI and keep the invoice and box until the sale is fully settled.

The screen lock is worth a specific mention. Do not remove your PIN, pattern or password before wiping. On Android, removing the screen lock can weaken the protection on the data still present, and there is no benefit to doing it early. Reset the device with the lock still in place; the reset removes it.

Step six: check the buyer and the platform

Where you sell matters as much as how you wipe. Organised buyback and exchange programmes from manufacturers and large retailers are the lowest-risk route because payment and handover happen together. Marketplace listings expose you to a set of familiar problems: buyers who ask to complete payment outside the platform, payment screenshots that turn out to be edited, and requests to hand over the device before funds settle.

Confirm money has actually credited to your bank account, not just that a notification appeared, before you release the phone. Meet in a public place. Do not share OTPs with anyone under any circumstance, including someone claiming to be from the platform. And keep a record of the IMEI, since it is your only identifier if a dispute arises later. The same verification logic that buyers use applies in reverse, and our guide on how to check whether a phone is original or refurbished using the IMEI is worth reading so you understand what a careful buyer will ask you.

Frequently asked questions

Is a factory reset enough to protect my data?

On any modern encrypted Android phone or iPhone, yes. The reset destroys the encryption key, leaving the remaining data unreadable. Signing out of your accounts first is the part people more often get wrong.

Do I still need to overwrite the storage with junk files?

No, not on encrypted devices, which covers essentially every phone from the last decade. It only makes sense on very old unencrypted handsets.

What happens if I reset without signing out of my Google account?

Factory Reset Protection will demand your account credentials during setup, making the phone unusable for the buyer. You would need to sign in remotely or remove the device from your account to release it.

Should I remove the screen lock before selling?

No. Leave it in place and let the factory reset clear it. Removing it early offers no benefit and can reduce protection on data still stored on the device.

Will resetting delete my eSIM?

It can, depending on the phone and the reset option chosen. Transfer the eSIM to your new device or arrange reissuance with your operator before you wipe.

The bottom line

Selling an old phone safely is mostly a sequencing problem. The encryption on your device already does the hard work, so the wipe itself is a single reset rather than an elaborate ritual. What needs your attention is everything that lives outside the handset: the accounts that still list it, the bank that still trusts it, and the operator profile that still routes your number to it.

Work through the order above, verify each step rather than assuming it worked, and keep the IMEI and invoice until the transaction is complete. If you are replacing the phone rather than simply disposing of it, our smartphone buying checklist covers what to look for in the replacement, and it is also worth keeping the new device secure from day one, which our guide to securing your Android phone explains.