Disposing of a Device Safely

A discarded computer holds more about you than almost anything else you own — documents, photographs, saved passwords, browsing history, tax records, messages. Deleting files does not remove them, and the steps that do take an hour.

Why deleting is not enough

Deleting a file removes the reference, not the contents. The space is marked available and the data remains until something overwrites it.

Recovery software finds it easily, and it is freely available. Researchers who buy second-hand drives routinely recover the previous owner's data.

Emptying the recycle bin changes nothing about this.

A quick format is also not enough on a mechanical drive — it rewrites the index, not the contents.

What actually works

If the drive is encrypted

The simplest and most reliable case.

Encrypted data without the key is unreadable. Destroying the key makes the entire drive unrecoverable, instantly.

A factory reset on an encrypted device does exactly this, which is why modern phones and encrypted computers can be reset in minutes rather than hours.

Check that encryption was actually on before relying on this. It is on by default on current phones and on many but not all computers.

If the drive is not encrypted

Encrypt it first, then reset. Turning on full-disk encryption and then wiping is faster and more thorough than most erasure tools.

Or use a secure erase utility. Both major systems include one, and dedicated bootable tools do a more thorough job.

On a solid state drive, use the manufacturer's secure erase rather than a multi-pass overwrite. SSDs manage where data physically sits, so overwriting the visible space does not reach everything — the drive's own secure erase command does.

On a mechanical drive, a single full overwrite pass is sufficient for any realistic threat. The old advice about many passes relates to technology that has not been in use for decades.

If the machine will not start

Remove the drive and erase it in another machine through an adapter. See reusing a drive.

Or destroy it physically, if the data is sensitive and the drive is worthless. Drilling through a mechanical drive's platters is effective. For solid state drives, physical destruction must reach the memory chips themselves.

Do not simply throw it away intact, on the assumption that a broken machine is unreadable. The drive frequently works perfectly.

Before you wipe it

In this order, because several are irreversible.

Get your files off. Everything, including the things not in folders. See moving to a new computer.

Find the encryption recovery key, if you might need to read the drive again.

Sign out of every account, and deauthorise the device where services track authorised devices — music, video, software licences.

Remove it from your account on the manufacturer's service. On Apple devices this is essential — activation lock makes the machine unusable to the next owner otherwise.

Remove it from any organisation's device management, if applicable.

Note licence keys for software you may want elsewhere.

Remove storage cards and SIM cards.

Where it should go

Pass it on, if it works. A machine inadequate for you is frequently entirely adequate for someone else, and installing a lightweight system extends its life for years. See making an old computer usable again.

Manufacturer take-back schemes, which most major manufacturers now operate, sometimes with a trade-in value.

Retailer take-back. In many countries, retailers selling electronics are obliged to accept old equipment.

Local authority electronics recycling. Most areas have collection points.

Charitable refurbishers, which take working machines, wipe them properly and pass them to people who need them. Frequently the best outcome, and worth checking their data handling policy.

Not household waste. Electronics contain materials that should be recovered and materials that should not go to landfill, and in many places it is illegal.

Batteries specifically

Never in general waste or general recycling. Lithium batteries cause fires in waste facilities and collection vehicles, and this is a genuine and growing problem rather than a theoretical one.

Take them to a battery collection point. Most supermarkets and electronics retailers have one.

A swollen battery is a hazard. Do not puncture it, do not charge it, and take it for disposal promptly.

The environmental part

Manufacturing accounts for a large share of a device's lifetime environmental cost — more than the electricity it uses in ordinary domestic operation.

Which means extending a device's life elsewhere is meaningfully better than recycling it early, and better again than replacing it unnecessarily.

Recycling recovers a fraction of the materials. It is the right end point and it is not equivalent to not having needed a new one.

A checklist

• [ ] All files recovered, including application data
• [ ] Encryption recovery key noted, if needed
• [ ] Signed out of all accounts
• [ ] Deauthorised in services that track devices
• [ ] Removed from manufacturer account — essential on Apple devices
• [ ] Licence keys noted
• [ ] Storage and SIM cards removed
• [ ] Drive wiped: reset if encrypted, secure erase if not
• [ ] Battery removed for separate disposal if applicable
• [ ] Taken to an appropriate collection point, or passed on

The short version

Deleting does not remove. Recovery software finds it, and it is freely available.

If the drive is encrypted, a factory reset is sufficient — destroying the key makes everything unreadable.

If it is not encrypted, encrypt it and then reset, which is faster than any erasure tool.

On a solid state drive use the manufacturer's secure erase, not a multi-pass overwrite.

Remove it from your manufacturer account before it leaves — on Apple devices, activation lock otherwise makes it useless to anyone else.

For practical baseline security guidance for home users, see CISA Secure Our World.