How to Securely Wipe an Android Phone

Before you donate, sell, or recycle an Android phone, a simple factory reset is not enough. Your personal data—photos, messages, passwords, and financial app data—can often be recovered with free software. This guide walks you through the steps to securely erase your device so your data stays private, and covers what to do if you can’t complete the standard process.

What You’ll Need

Your Android phone and its charging cable
A computer (optional, for one method)
Your Google account password (to remove Factory Reset Protection)
A backup method: Google Drive, a computer, or an external drive if you want to keep any data

Step-by-Step

Back up anything you want to keep. Go to Settings > System > Backup and confirm that backup is on, or manually copy photos and documents to Google Drive, a computer, or an external drive. Don’t skip this—the wipe is permanent.
Sign out of your Google account (critical). Go to Settings > Accounts > Google and tap Remove account. This prevents Factory Reset Protection (FRP) from locking the phone after the reset, which would make it unusable for the next owner.
Remove other accounts and screen locks. In Settings > Accounts, remove any other accounts (email, social, work). Then go to Settings > Security > Screen lock and set it to None. Also remove any PIN, password, or fingerprint.
Encrypt the device (if not already). On older Android versions (pre-7.0), encryption may not be on by default. Go to Settings > Security > Encrypt phone and follow the prompts. This step is optional on modern phones, but it adds an extra layer of security if you’re worried about advanced recovery.
Perform the factory reset. Go to Settings > System > Reset options > Erase all data (factory reset). Read the warning, then tap Reset phone or Erase everything. Enter your PIN/pattern if asked.
Overwrite the internal storage (the key step). After the reset, the phone will boot to the setup screen. Do not set it up. Instead, do one of the following to overwrite the empty storage with meaningless data:
- Method A (fill storage with a video): If you can get the phone to boot normally (you’ll need to set it up temporarily), record a video with the camera for as long as possible, or download a large file (like a movie) until the storage is full. Then delete it and perform another factory reset. This overwrites the old data with new data.
- Method B (use a file manager during setup): Some devices allow you to open a file manager from the setup wizard (e.g., by tapping the ‘Welcome’ text multiple times or using an accessibility shortcut). If you can, create a large file (e.g., a text file filled with random characters) repeatedly until storage is full, then reset again.
- Method C (use a computer): If the phone mounts as a USB drive in recovery mode, connect it to a computer and copy a large file (like a 4GB movie) to the internal storage, then delete it and reset again. This is less common on modern Android.
Final reset after overwriting. Once you’ve filled and deleted storage, do one more factory reset. This leaves the phone clean and ready for the next user.
Verify the wipe. Boot the phone to the setup screen. It should not ask for your old Google password. If it does, you didn’t remove the account properly—go back and remove it.

Common Mistakes

Skipping the Google account removal. This is the #1 cause of the phone being locked after reset. Always remove your Google account first.
Assuming a factory reset is enough. It isn’t. Data can be recovered with forensic tools. The overwrite step is what makes it secure.
Forgetting to back up. Once wiped, there’s no going back. Double-check that your photos and contacts are safe.
Not removing the SD card. If your phone has an SD card, remove it and wipe it separately on a computer, or physically destroy it if it’s old.
Donating without a factory reset at all. Some people just delete files, which leaves recoverable data. Always do a full reset.

Tips

Charge your phone. The reset and overwrite process can take 30-60 minutes. A dead phone mid-reset can cause issues.
Use a strong overwrite method. Recording a video in 4K or downloading a large game (like Genshin Impact) fills storage quickly. The more times you overwrite, the better.
For maximum security, use an encryption-based wipe. If your phone supports it, encrypt the device before the final reset. Modern phones are encrypted by default, so the reset alone is often sufficient.
For truly sensitive data (e.g., corporate secrets), consider physical destruction. If you’re extremely concerned, remove the storage chip and destroy it. But for most people, the steps above are enough.
Check the phone’s storage after reset. If it shows a large amount of space used, the overwrite didn’t work. Try again.

Troubleshooting

The phone won’t reset. If the reset fails, try booting into recovery mode: turn off the phone, then press and hold Volume Up + Power (or Volume Down + Power, depending on the model) until the recovery menu appears. Use the volume keys to navigate to ‘Wipe data/factory reset’ and press Power to select.
The phone asks for a Google password after reset. This is FRP. You must remove your Google account before the reset. If you’ve already reset and it’s locked, you’ll need to enter the last Google account password that was on the device. If you don’t know it, you may be able to use the ‘Forgot password’ option on the lock screen, but this can be time-consuming.
Can’t remove the Google account. If the option is greyed out, try going to Settings > Apps > Google Play Services > Storage > Clear data, then try again. Or, do a factory reset first, then sign in with your Google account, and then remove it and reset again.
The phone is slow during overwrite. That’s normal. Give it time. If it freezes, hold the power button for 10 seconds to restart, then try again.
Can’t mount as USB in recovery. Modern Android doesn’t support USB mass storage in recovery. Use the video/download method instead.

Frequently Asked Questions

Is a factory reset enough to wipe my phone?

For most people, yes. But data can be recovered with specialized software. The overwrite step adds security, especially if you have sensitive data.

What is Factory Reset Protection (FRP)?

It’s a security feature that requires your Google account password after a factory reset, to prevent thieves from using your phone. If you don’t remove your account first, the next owner will be locked out.

How many times should I overwrite the storage?

Once is generally enough for modern phones with encrypted storage. If you’re paranoid, do two or three times. More than that is overkill.

Will wiping the phone remove the SD card data?

No. The factory reset only wipes internal storage. You must remove and wipe the SD card separately, or destroy it.

Can I wipe the phone without turning it on?

Yes, you can use recovery mode (Volume Up + Power) to do a factory reset. But you still need to remove your Google account first, which requires booting the phone.

What if I already reset the phone and it’s now locked?

You’ll need to enter the last Google account password. If you don’t know it, try the ‘Forgot password’ option on the lock screen, or contact the device manufacturer for help. If all else fails, you may have a bricked phone.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →