Anyone preparing to sell, trade in, or give away an old iPhone faces a simple but high-stakes checklist: sign out of the right accounts, disable the right locks, and wipe the device so no personal data follows it to its next owner. Apple’s own support documentation walks users through signing out of iCloud, turning off Find My, and erasing all content and settings. Yet conflicting guidance on when Activation Lock actually gets removed, combined with federal research showing that a basic factory reset falls short of a true cryptographic erase, means that many sellers still hand over devices with recoverable data or locks that brick the phone for the buyer.
Why a factory reset alone leaves data at risk
The gap between what most people think a factory reset does and what it actually accomplishes is where the real danger sits. The National Institute of Standards and Technology published SP 800-88 Rev. 1, which defines three levels of media sanitization: Clear, Purge, and Destroy. A standard consumer reset typically meets only the Clear level, which overwrites user-addressable storage but can leave data fragments intact in areas the operating system does not touch. SP 800-88 Rev. 1 also provides guidance on cryptographic erase for mobile devices, a method that destroys the encryption key so that even recovered data blocks are unreadable without it.
The practical difference matters because modern phones store far more than photos and texts. Banking apps, password managers, email clients, and social-media accounts all maintain session tokens and cached credentials. A phone processed with only a Clear-level reset could, in theory, still hold accessible third-party app tokens that a technically skilled buyer might extract. Cryptographic erase, by contrast, renders the entire encrypted volume useless in one step. Apple’s “Erase All Content and Settings” function on iPhones with hardware encryption is designed to perform this kind of key destruction, but users who skip the preliminary sign-out steps risk leaving cloud-linked services tethered to the old hardware.
Apple’s own guidance and where it conflicts
Per Apple Support, sellers should sign out of their Apple Account and iCloud, turn off Find My, and then erase all content and settings before handing over an iPhone or iPad. The same documentation advises disabling Activation Lock and, for anyone switching to a non-Apple phone, deregistering iMessage so text messages are not silently routed to a device the person no longer owns.
A separate page in the iPhone User Guide, however, states that Activation Lock is removed automatically when Erase All Content and Settings is performed while Find My is enabled. That creates a point of confusion: one set of instructions tells users to turn off Find My first, while another says the erase step itself handles the lock. Per Apple’s iCloud documentation, users who have already given away a device without completing these steps can still remove the device from Find Devices on iCloud.com to strip Activation Lock remotely. The existence of this fallback suggests that forgotten locks are common enough to warrant a dedicated recovery path.
The on-device sequence, per the iPhone User Guide, is straightforward: open Settings, tap the user’s name, select Sign Out, then navigate to Transfer or Reset iPhone and choose Erase All Content and Settings. Completing both steps in order addresses the conflict by ensuring the account is unlinked before the wipe runs, so neither the seller nor the buyer has to troubleshoot a locked device after the fact.
What to do first before listing or mailing a device
For anyone about to sell or trade in a phone, the safest sequence starts with a full backup, then proceeds through account sign-outs, and ends with the erase. On iPhone, that means signing out of iCloud, which also disables Find My and Activation Lock, then running Erase All Content and Settings. Users leaving the Apple ecosystem entirely should also deregister iMessage so their phone number is freed from Apple’s messaging servers. Skipping that step can cause incoming texts from other iPhone users to vanish into a defunct iMessage account for days or weeks.
After the erase, sellers should verify on iCloud.com that the device no longer appears under their account. If it does, removing it manually from Find Devices completes the cleanup. These steps take only a few minutes through the Settings menu but prevent the most reported post-sale problems: buyers receiving a locked phone they cannot activate, and sellers discovering that their email, payment methods, or app subscriptions remain accessible on hardware they no longer control.
Gaps in the evidence and what to watch
No publicly available dataset quantifies how many trade-ins fail each year because of residual Activation Locks or lingering account tokens. Carriers and recyclers have not released aggregate numbers, which makes it difficult to measure the true scale of the problem. Android-specific official sanitization checklists from major device makers are also absent from the current source set, leaving a gap for the roughly half of U.S. smartphone owners who do not use iPhones.
More from Morning Overview
*This article was researched with the help of AI, with human editors creating the final content.
