GadgetRenu
How to Wipe Android Phone Before Selling (2026 Guide)
Data Security8 min read

How to Wipe Android Phone Before Selling (2026 Guide)

Learn how to completely wipe your Android phone before selling it. Samsung Galaxy and Google Pixel step-by-step guide with encryption and FRP tips.

Robert Martinez

Content Manager

Published April 9, 2026
Share
Quick Answer

Encrypt your Android phone first, then sign out of all Google and Samsung accounts, disable Factory Reset Protection, remove your SIM and SD cards, and perform a factory reset to securely erase all personal data before selling.

Key Takeaways
  • A factory reset alone may leave recoverable data — encrypting your phone before resetting adds a critical layer of protection
  • Failing to disable Factory Reset Protection (FRP) locks the buyer out of the phone, which can delay your payment or reduce your offer
  • Samsung Galaxy owners must sign out of both their Google account and Samsung account before resetting
  • Always back up photos, contacts, and messages to Google Drive or Samsung Cloud before wiping your device
  • GadgetRenu performs a certified R2-compliant data wipe on every device received, providing a safety net even if you miss a step

Why Factory Reset Alone May Not Be Enough to Protect Your Data

If you're planning to sell your Android phone, you've probably assumed that hitting "Factory Reset" in your settings will erase everything. It does remove your apps, accounts, and files from the phone's interface — but that doesn't always mean the data is truly gone.

On older Android devices (pre-Android 10), a factory reset simply marks storage sectors as "available" without actually overwriting the underlying data. Security researchers have demonstrated that with freely available forensic tools, someone could potentially recover photos, messages, passwords, and even banking information from a phone that was factory reset without encryption.

Modern Android phones running Android 10 or later are encrypted by default, which significantly reduces this risk. When encryption is active, a factory reset destroys the encryption keys, rendering any residual data unreadable. But here's the catch: not all phones have encryption properly enabled, especially if the device was set up years ago, was rooted at some point, or has a custom ROM installed.

The safest approach — and the one we'll walk through in this guide — is to verify encryption is active, then perform the factory reset. This two-step process ensures that even if data remnants exist on the storage chips, they're scrambled beyond any practical recovery.

Beyond the technical data wipe, there are account-level steps that many sellers forget. If you don't sign out of your Google account and disable Factory Reset Protection before resetting, the next owner won't be able to set up the phone. This is a security feature designed to deter theft, but it becomes a headache when you're legitimately selling your device. The buyer (or the buyback company) will need to contact you to resolve it, which delays the process and can even result in a reduced offer.

Whether you're selling a Samsung Galaxy or a Google Pixel, this guide covers every step you need to take — in the right order — to protect your data and ensure a smooth sale. And if you've already wiped your iPhone instead, we have a separate guide for that.

How to Back Up Your Android Phone Before Selling

Before you erase anything, make sure everything important is backed up. Once you factory reset, there's no undo button.

Google Drive Backup (All Android Phones)

Google's built-in backup captures most of what you need:

  1. Open Settings > System > Backup (path may vary slightly by manufacturer)
  2. Make sure Back up to Google Drive is toggled on
  3. Tap Back up now to force an immediate backup
  4. Wait for the backup to complete — this can take 10-30 minutes depending on how much data you have

Google Drive backup covers your app data, call history, contacts, device settings, SMS messages, and photos/videos (if Google Photos backup is enabled). It does not back up music files, custom ringtones, or files stored outside of standard app directories.

Samsung Cloud Backup (Samsung Galaxy Only)

If you're using a Samsung Galaxy, you likely have additional data stored in Samsung's ecosystem:

  1. Open Settings > Accounts and backup > Samsung Cloud
  2. Tap Back up data
  3. Select all categories you want to preserve
  4. Tap Back up now

Samsung Cloud captures Samsung-specific items like your home screen layout, Samsung Notes, Samsung Health data, and Samsung Internet bookmarks. If you're switching to another Samsung device later, this backup will make the transition seamless.

Manual Backup of Files

Some things aren't covered by automatic backups:

  • Downloads folder: Connect your phone to a computer via USB and copy the Downloads directory
  • WhatsApp chats: Open WhatsApp > Settings > Chats > Chat backup > Back up to Google Drive
  • Authenticator apps: If you use Google Authenticator or a similar app, transfer your accounts to your new device before wiping. Losing authenticator codes can lock you out of important accounts. Consider switching to an authenticator that supports cloud backup, like Authy or Microsoft Authenticator
  • Photos and videos: Verify Google Photos has finished syncing by opening the app and checking for any upload-pending notifications

Take your time with this step. The most common regret sellers have is realizing they lost family photos or important documents after the reset. Spend an extra 15 minutes verifying your backup rather than rushing through it.

How to Sign Out of All Accounts on Android

Signing out of your accounts before resetting serves two purposes: it protects your accounts from unauthorized access, and it disables Factory Reset Protection (FRP) so the next owner can actually set up the phone.

Sign Out of Your Google Account

This is the most critical step. Factory Reset Protection is tied to your Google account — if you reset without signing out first, the phone will demand your Google credentials on the next setup screen, effectively bricking it for the buyer.

  1. Open Settings > Accounts (or Settings > Passwords & accounts on some phones)
  2. Tap your Google account
  3. Tap Remove account
  4. Confirm the removal
  5. Repeat for every Google account on the device

Sign Out of Samsung Account (Samsung Galaxy Only)

Samsung has its own activation lock system tied to your Samsung account and Find My Mobile:

  1. Open Settings > Accounts and backup > Manage accounts
  2. Tap your Samsung account
  3. Tap Remove account
  4. You'll be prompted to enter your Samsung account password — this is required to disable Samsung's reactivation lock

If you skip this step, Samsung's Find My Mobile reactivation lock will block the new owner from setting up the device, similar to how iCloud Activation Lock works on iPhones.

Disable Find My Device

Google's Find My Device is Android's equivalent of Apple's Find My iPhone. It should deactivate automatically when you remove your Google account, but it's worth verifying:

  1. Open Settings > Security > Find My Device
  2. Toggle it off

For Samsung users, also disable Find My Mobile:

  1. Open Settings > Biometrics and security > Find My Mobile
  2. Toggle it off

Sign Out of Other Apps

While less critical (the factory reset will remove app data), it's good practice to sign out of sensitive apps individually:

  • Banking and financial apps
  • Social media accounts (especially those with two-factor authentication)
  • Email clients
  • Messaging apps like WhatsApp, Signal, or Telegram

For WhatsApp specifically, deregistering your number before wiping ensures your account isn't associated with the old device.

How to Disable Factory Reset Protection (FRP) on Android

Factory Reset Protection is Google's anti-theft feature, introduced in Android 5.1 Lollipop. It requires the previous owner's Google account credentials after a factory reset, which is great for deterring thieves but problematic when you're selling your phone legitimately.

If you followed the previous step and removed all Google accounts from the device, FRP should already be disabled. But there's a nuance that trips people up: FRP has a 24-72 hour grace period on some devices. Even after removing your Google account, some phones will still trigger FRP if the factory reset happens within that window.

To be safe, here's the belt-and-suspenders approach:

  1. Remove all Google accounts from the device (as described above)
  2. If possible, wait 24 hours before performing the factory reset
  3. If you can't wait, the reset will still work — but the new owner might encounter FRP on first setup. In that case, they'd need you to verify the account remotely

Samsung-Specific FRP Notes

Samsung devices have an additional layer. Even after removing your Google account, Samsung's own reactivation lock (tied to your Samsung account) can block setup. Make sure you've removed your Samsung account as described in the previous section.

Some Samsung phones also require you to disable Secure Startup or Secure Lock before the reset will fully clear FRP:

  1. Open Settings > Lock screen
  2. Change your screen lock to None or Swipe (you'll need to enter your current PIN/pattern)
  3. This clears the secure startup requirement

Pixel-Specific FRP Notes

Google Pixel phones are generally more straightforward with FRP. Removing your Google account and disabling Find My Device is usually sufficient. Pixels running Android 14 or later also support a "Prepare for new owner" option that handles all of this in one flow — look for it under Settings > System > Reset options.

Buyback companies like GadgetRenu encounter FRP-locked devices regularly. If you forget to disable it, it won't ruin the sale — but it will create a delay while they reach out to you for verification. Disabling it beforehand makes the process faster for everyone and ensures you get paid sooner. For more about how your data is handled, read our guide on whether your personal data is safe when selling your phone.

How to Encrypt and Factory Reset a Samsung Galaxy Phone

Samsung Galaxy phones running Android 10 or later are encrypted by default using file-based encryption (FBE). But it's worth confirming before you reset:

Step 1: Verify Encryption

  1. Open Settings > Biometrics and security > Other security settings
  2. Look for Encrypt phone or Strong protection
  3. If it says "Encrypted," you're good. If it shows an option to encrypt, tap it and follow the prompts — the process takes 30-60 minutes and requires at least 80% battery

On Samsung phones running One UI 6 or later (Android 14+), encryption is mandatory and cannot be disabled, so you may not even see this option.

Step 2: Remove SIM and SD Cards

Before resetting:

  1. Power off the phone
  2. Use the SIM ejector tool (or a paperclip) to remove the SIM card tray
  3. Remove your SIM card — it may contain contacts and can be used for identity verification
  4. If you have a microSD card, remove it. The factory reset can optionally erase the SD card, but physically removing it is safer. Your SD card may contain photos, documents, and app data that aren't covered by the phone's encryption

Step 3: Factory Reset

  1. Open Settings > General management > Reset
  2. Tap Factory data reset
  3. Scroll down and review the list of accounts that will be removed
  4. Tap Reset
  5. Enter your PIN, pattern, or password
  6. Tap Delete all

The phone will reboot and begin the reset process. This takes 5-15 minutes. When it finishes, the phone will boot to the initial setup screen — the "Hello" screen that you saw when the phone was brand new.

Do not proceed through the setup wizard. Leave the phone on the setup screen. This confirms that your accounts are removed and the phone is ready for a new owner.

Samsung DeX and Linked Devices

If you used Samsung DeX with a monitor or laptop, or if your Samsung Galaxy was linked to a Windows PC via Microsoft's Phone Link app, those connections should break automatically after the reset. But it's a good idea to remove the device from your Microsoft account settings and Samsung account's linked devices list as well.

GadgetRenu accepts Samsung Galaxy phones in any condition — from the latest Galaxy S series to older A-series phones. Once they receive your device at their New Jersey facility, their R2-certified process includes a thorough data wipe that meets Department of Defense standards, giving you an extra layer of protection.

How to Encrypt and Factory Reset a Google Pixel Phone

Google Pixel phones have been encrypted by default since the original Pixel, and the process is streamlined compared to other Android manufacturers. Here's the complete Pixel-specific guide:

Step 1: Verify Encryption

  1. Open Settings > Security & privacy > More security & privacy
  2. Look for Encryption & credentials
  3. It should say "Encrypted" — all Pixel phones ship with encryption enabled and it cannot be turned off

Step 2: Use the "Prepare for New Owner" Feature (Pixel 6 and Later)

Pixel phones running Android 14 or later include a dedicated option that bundles several pre-sale steps together:

  1. Open Settings > System > Reset options
  2. If available, tap Prepare for new owner
  3. This will guide you through signing out of accounts, disabling Find My Device, and performing the factory reset in one guided flow

If your Pixel doesn't have this option (older software version), follow the manual steps below.

Step 3: Remove SIM Card

Pixel 9 and later models are eSIM-only (no physical SIM tray). For eSIM removal:

  1. Open Settings > Network & internet > SIMs
  2. Select your carrier
  3. Tap Delete SIM

For Pixel 8 and earlier with a physical SIM:

  1. Power off the phone
  2. Use the SIM tool to eject and remove the SIM card

Step 4: Factory Reset

  1. Open Settings > System > Reset options
  2. Tap Erase all data (factory reset)
  3. Tap Erase all data again to confirm
  4. Enter your PIN or password
  5. Tap Erase all data one final time

The Pixel will reboot and reset. This typically takes 5-10 minutes. The phone will boot to the initial setup screen with the Google logo and language selection.

Pixel-Specific Considerations

  • Titan M security chip: Pixel phones contain a dedicated security chip that stores encryption keys separately from the main processor. A factory reset triggers the Titan M chip to destroy existing keys, which is why Pixel resets are considered among the most secure in the Android ecosystem
  • Android beta or Developer Preview: If your Pixel is running a beta version of Android, it's best to flash it back to the stable release before selling. Buyers and buyback companies prefer stable software, and beta software can introduce bugs that affect the inspection process
  • Bootloader status: If you've unlocked the bootloader for custom ROM development, the phone will display a warning message during boot. Some buyers won't care, but it can affect your offer. You can re-lock the bootloader before resetting, but only do this if you've already flashed back to stock firmware — locking the bootloader on a custom ROM will brick the phone

GadgetRenu offers competitive prices for all Google Pixel models, and their certified data wipe process provides additional peace of mind. Whether your Pixel is a flagship Pro model or a budget Pixel A-series, you can get an instant quote and ship for free with their prepaid insured USPS label.

What Happens to Your Data After GadgetRenu Receives Your Phone

Even if you follow every step in this guide perfectly, there's understandable anxiety about whether your data is truly gone. What if you missed something? What if there's a cached login somewhere? This is where selling to a certified buyback company provides a significant advantage over selling to a random buyer on Craigslist or Facebook Marketplace.

GadgetRenu operates an R2-certified facility in Wallington, New Jersey. R2 (Responsible Recycling) certification requires strict data destruction protocols that go beyond a simple factory reset. Here's what happens when your phone arrives:

  1. Device intake and cataloging: Your phone is logged into their system with its IMEI number and matched to your order
  2. Certified data wipe: Every device undergoes a software-based data sanitization process that meets NIST 800-88 guidelines. This standard, published by the National Institute of Standards and Technology, specifies the methods required to render data unrecoverable
  3. Verification: After the wipe, the process is verified and logged. If the storage medium cannot be wiped (due to hardware failure, for example), it's physically destroyed
  4. Documentation: R2 certification requires maintaining records of data destruction, providing an audit trail

This certified process is your safety net. Even if you forgot to sign out of an account, missed removing your SD card, or weren't sure whether encryption was enabled, GadgetRenu's data destruction protocol covers you.

This is one of the key advantages of selling to a certified buyback company versus a peer-to-peer sale. When you sell on eBay, Swappa, or Facebook Marketplace, you're trusting the buyer with whatever data might remain on the device. With GadgetRenu, you have the backing of a certified, auditable process.

For a deeper dive into how your information is protected throughout the selling process, read our full guide: Is My Personal Data Safe When I Sell My Phone?

Frequently Asked Questions

Does a factory reset completely erase an Android phone?

On modern Android phones (Android 10 and later) with encryption enabled, a factory reset effectively destroys the encryption keys, making data unrecoverable through normal means. On older or unencrypted phones, some data could theoretically be recovered with forensic tools. The safest approach is to verify encryption is active before performing the reset. GadgetRenu also performs a certified NIST 800-88 compliant wipe on every device they receive.

Do I need to remove my Google account before factory resetting?

Yes — this is critical. If you factory reset without removing your Google account first, Factory Reset Protection (FRP) will activate and require your Google credentials on the next setup. This effectively locks the buyer out of the phone. Remove all Google accounts from Settings > Accounts before resetting, and on Samsung phones, remove your Samsung account too.

How do I factory reset a Samsung Galaxy phone that won't turn on?

If your Samsung won't boot normally, you can perform a reset through Recovery Mode: power off the phone, then hold the Volume Up + Power buttons simultaneously until the Samsung logo appears. Use the volume buttons to navigate to "Wipe data/factory reset" and press Power to confirm. Note that you won't be able to sign out of accounts first, so contact GadgetRenu and they'll work with you to resolve any FRP issues during processing.

Will wiping my Android phone remove my Google Authenticator codes?

Yes — and this is a common mistake that locks people out of their accounts. Before wiping your phone, transfer your authenticator accounts to your new device or switch to a cloud-backed authenticator like Authy. If you use Google Authenticator, you can export accounts by tapping the three-dot menu > Transfer accounts > Export accounts, then scanning the QR code with your new phone.

Can I sell my Samsung Galaxy or Google Pixel to GadgetRenu if I already factory reset without following these steps?

Absolutely. GadgetRenu accepts phones in any state, including those that may still have FRP active. If FRP is enabled, they'll contact you to verify ownership so the lock can be removed. It may add a day or two to the processing time, but it won't affect your payout. Their R2-certified New Jersey facility handles the complete data wipe regardless of what steps you took beforehand, shipping nationwide with free insured USPS labels.

Ready to sell?

Get an instant quote. Free shipping. Paid in 3-5 days.

Get My Instant Quote