Not really and not always. On a modern iPhone or Android phone with encryption on from day one, a factory reset destroys the encryption keys and leaves your data mathematically unrecoverable. On older phones, unencrypted Windows PCs, and bare hard drives, researchers have recovered photos, emails, passwords, and entire account logins after a reset. And for businesses, an unverified reset never counts as data destruction at all.
That gap between “I reset it” and “the data is gone” is one of the most expensive misunderstandings in IT. This guide explains exactly what a factory data reset does at the storage level, what forensic researchers have actually recovered, when a reset is genuinely enough, and when you need certified data destruction instead.
Table of Contents
- What Is a Factory Reset?
- What a Factory Reset Actually Does, Device by Device
- What Researchers Actually Recovered After Resets
- When a Factory Reset Is Enough for Data Security Purposes
- When a Factory Reset Is Not Enough for Data Security Purposes
- How to Reset Factory Data the Right Way (Step by Step)
- Why Businesses Can’t Rely on Factory Resets for Data Destruction or Data Sanitization
- Frequently Asked Questions
What Is a Factory Reset?
A factory reset (also called a factory data reset) is a built-in software function that returns a device to its out-of-the-box state. It removes your accounts, apps, and settings, and it makes your files invisible to the operating system. What it does not automatically do is physically remove data from the storage chips inside the device. Whether your data actually becomes unrecoverable depends on how the device handles encryption.
Here’s the mechanism that surprises most people. Flash storage (the kind in every phone, SSD, and modern laptop) uses a controller that constantly shuffles where data physically lives, a process called wear-leveling. When software “deletes” a file, the controller usually just marks the old location as available and moves on. The original data sits in physical memory cells the operating system can no longer see, but a forensic lab still can. This is why the answer to “does a factory reset erase everything?” is: only if the reset destroys an encryption key instead of relying on deletion.
What a Factory Reset Actually Does, Device by Device
The National Institute of Standards and Technology sorts every data-erasure method into three levels in NIST Special Publication 800-88 Rev. 2, the U.S. government’s media sanitization guideline, updated in September 2025. Clear protects against simple recovery software. Purge makes data unrecoverable even in a forensics lab. Destroy physically annihilates the media. Here’s where each device’s built-in reset lands:
| Device | What the reset does | NIST 800-88 level |
|---|---|---|
| iPhone / iPad (“Erase All Content and Settings”) | Secure Enclave destroys the encryption keys in dedicated hardware; all data becomes cryptographically inaccessible | Purge |
| Android 10 or newer | Deletes hardware-protected encryption keys; file-based encryption has been required on new devices since Android 10 | Purge, if encryption was on from first boot |
| Android before 5.0 | Logical format only; user data remains in flash memory | Fails even Clear |
| Windows PC, BitLocker ON (“Remove everything” + clean the drive) | Destroys the volume encryption keys via the TPM chip | Purge |
| Windows PC, no BitLocker | Reinstalls Windows and overwrites what it can see; wear-leveling leaves fragments in hidden SSD regions | Clear at best |
| Mac with Apple Silicon or T2 chip | Same key-destruction model as iPhone | Purge |
| Intel Mac without T2 | Software erase from Disk Utility; subject to the same SSD limitations as Windows | Clear |
| Chromebook (Powerwash) | Clears the TPM secrets that protect the encrypted user profile | Purge |
| Bare hard drive or SSD (reformat) | Removes file system pointers only; data remains until overwritten | Fails Clear |
Two patterns jump out. First, every “Purge” row works the same way: the device never erases your files at all. It destroys the keys, and encrypted data without keys is permanent noise. Second, every weak row involves either an old device, a missing encryption layer, or a bare drive. That’s the myth in one table: “factory reset” is not one thing. It’s a strong cryptographic erase on some devices and a cosmetic cleanup on others.
What Researchers Actually Recovered After Resets
This isn’t theoretical. Twenty years of peer-reviewed forensics research documents exactly what survives.
- Only 9% of used hard drives were properly wiped. In the foundational study of secondhand storage, Garfinkel and Shelat bought 158 used hard drives on the secondary market. Of the 129 drives they could image, only 12 had been properly sanitized. The rest gave up credit card numbers, medical records, and one drive holding roughly 9,500 emails.
- The drive’s own “secure erase” button failed 8 times out of 12. University of California San Diego researchers tested the built-in sanitize commands on 12 SSDs and found only 4 executed correctly. One drive reported success while leaving all data intact, and software overwrites of single files left between 4% and 75% of the contents recoverable from the flash chips.
- Android factory resets leaked the keys to your Google account. University of Cambridge researchers studied factory resets on 21 Android phones running Android 2.3 through 4.3 and recovered the Google “master token,” which unlocks the previous owner’s entire account, from 80% of the devices with flawed resets. They estimated up to 500 million devices at the time did not properly sanitize their data partitions.
- Even modern phones don’t wipe everything. A 2023 study in Forensic Science International: Digital Investigation put factory-reset Android 11 and 12 phones through chip-off extraction, reading the memory chips directly. Encrypted personal data held up, but multiple partitions were never wiped at all, leaving system logs and usage artifacts from the previous owner readable.
- And most of us are guessing. A University of Waterloo survey found 73% of people keep at least one old device out of data-leakage fear, and a quarter of those who did dispose of a device used an insecure method to erase it.
When a Factory Reset Is Enough for Data Security Purposes
O the right hardware, the “nothing is ever really deleted” line is simply false. A factory reset is genuinely sufficient for a personal device when all four of these are true:
- The device encrypted itself from first boot. True for every iPhone since iOS 8, every Android that shipped with version 10 or later, Macs with T2 or Apple Silicon, and Windows PCs with BitLocker or device encryption active.
- The keys live in dedicated security hardware. Apple’s Secure Enclave, Android’s hardware keystore, or a TPM chip, which is what makes the key destruction trustworthy.
- You used the real reset function, not a quick “delete files” or a drag-to-trash cleanup.
- There’s no unencrypted storage along for the ride. MicroSD cards are the classic miss; most factory resets skip them entirely.
Meet all four and even a forensics lab reading the raw memory chips recovers only encrypted noise. For a personal phone headed to a family member or a donation box, that’s real security.
When a Factory Reset Is Not Enough for Data Security Purposes
- Older or unknown-history devices. Phones from the pre-encryption era, hand-me-down laptops, and any device where you can’t confirm encryption was on from day one.
- Unencrypted Windows PCs and Intel Macs. The reset overwrites what the operating system can see. Wear-leveling means hidden regions of the SSD keep fragments the overwrite never touched.
- Bare drives, servers, and external storage. A reformat removes the map, not the territory. This is why professional hard drive destruction exists as a discipline.
- Broken devices. If the screen or board is dead, you can’t run the reset at all, and the data sits intact on the chips.
- Any device leaving a business. Not because the cryptography is different, but because compliance doesn’t run on faith. That’s the next section.
How to Reset Factory Data the Right Way (Step by Step)
If your device qualifies (see the four conditions above), here’s how to reset data properly before you donate, sell, or recycle it.
Before any reset, on any device:
- Back up what you want to keep.
- Sign out of your accounts: iCloud/Find My on Apple devices, your Google account on Android, your Microsoft account on Windows. Skipping this triggers Activation Lock or Factory Reset Protection, which bricks the device for the next user (and is the #1 reason donated devices can’t be refurbished).
- Remove the SIM card and any microSD card. Resets typically don’t touch them.
iPhone / iPad: Settings → General → Transfer or Reset iPhone → Erase All Content and Settings.
Android: Settings → System → Reset options → Erase all data (factory reset). On older versions this is labeled “Factory data reset.” Confirm the device is encrypted first (Settings → Security); on anything running Android 10 or later, it is by default.
Windows: First turn on device encryption or BitLocker (Settings → Privacy & security) if it isn’t already. Then Settings → System → Recovery → Reset this PC → Remove everything, and when prompted, choose the option to fully clean the drive.
Mac: On Apple Silicon or T2 Macs: System Settings → General → Transfer or Reset → Erase All Content and Settings. On older Intel Macs without a T2 chip, use FileVault ahead of time, then erase from macOS Recovery; without FileVault, treat the machine as “not enough” and use a professional service.
Chromebook: Settings → System preferences → Reset (Powerwash).
Why Businesses Can’t Rely on Factory Resets for Data Destruction or Data Sanitization
For an organization, the technical question (“is the data gone?”) is only half the problem. The other half is proof.
Regulators don’t accept “we reset them.” The FTC’s Disposal Rule requires the destruction or erasure of electronic media “so that the information cannot practicably be read or reconstructed,” and the FTC Safeguards Rule requires financial institutions to dispose of customer information securely as part of a written security program. HIPAA and state disposal laws impose parallel duties. The common thread is that you must be able to demonstrate the data was destroyed, per device, with documentation.
A factory reset produces no evidence. There is no serial-number record, no verification pass, no certificate. And the stakes of skipping that paper trail are well documented: the SEC fined Morgan Stanley $35 million after decommissioned servers and drives holding data on 15 million customers were resold without being properly wiped.
There’s also a genuine verification problem that NIST 800-88 Rev. 2 and the IEEE 2883-2022 sanitization standard both wrestle with: after a cryptographic erase, the remaining data looks like random noise whether the wipe succeeded or failed. Compliance therefore hinges on controlled process and per-device verification, which is exactly what consumer reset buttons don’t provide. Our guide to data sanitization standards covers how professional providers close that gap.
This is the work Human-I-T does every day as part of IT asset disposition. Every donated device is sanitized with NIST 800-88 compliant methods at our NAID AAA-certified facilities, re-scanned to verify the data is gone, and physically crushed if verification isn’t possible. You receive a Certificate of Data Destruction and serialized, per-device reports, and your retired technology goes on to connect families who lack computers and internet instead of going into a shredder by default.
Retiring devices with sensitive data on them? Talk to our ITAD professionals data destruction team about our certified, documented data destruction and data sanitization services that are provided to you when you donate your technology.
Frequently Asked Questions
Does a factory reset permanently delete everything? On modern encrypted devices (iPhones, Android 10+, Macs with T2/Apple Silicon, BitLocker-enabled PCs), yes: the reset destroys the encryption keys, which makes the data permanently unreadable. On older or unencrypted devices, no. The files are hidden from the operating system but often remain recoverable from the storage chips.
Can data be recovered after a factory reset? On legacy devices, routinely. Cambridge researchers recovered account credentials from 80% of flawed Android resets, and a 2023 chip-off study found even Android 11/12 resets leave some partitions unwiped. On a properly encrypted modern device, recovery of personal files is not practically possible.
Is a factory reset enough before selling or donating my phone? For a personal phone made in roughly the last decade: yes, if encryption was on, you sign out of your accounts first, and you pull the SD card. For any device that held business, customer, patient, or financial data, use a certified provider that issues destruction documentation instead.
What’s the difference between a factory reset and data destruction? A factory reset is a self-service convenience feature with no verification. Data destruction (in the NIST 800-88 sense) is a controlled process that reaches Purge or Destroy level, is verified per device, and is documented with a certificate. The end state can be similar; the difference is assurance and proof.
Does a factory reset wipe the SD card too? Usually not. Most resets cover only internal storage. Remove and separately wipe (or destroy) any microSD card before passing a device on.
What should my company do instead of factory resets? Follow NIST 800-88: inventory devices by serial number, sanitize to Purge level or physically destroy, verify, and keep Certificates of Destruction. A certified ITAD partner handles all of it; here’s how the full process works.
