How to Wipe a Windows PC Before Selling It

Dragging your documents folder to the recycle bin and emptying it does not remove anything. Deleting a file removes the index entry that points to it and marks the space as available; the bytes stay exactly where they were until something else happens to write over them. Free recovery tools will pull those files back, and the buyer of your laptop can run one.

That is the whole reason this process exists. The second reason is accounts: a PC that is still signed in to your Microsoft account, your browser profile and your password manager hands over far more than files.

Everything below is irreversible. Once a reset with data cleaning begins, nothing on that drive is coming back. Finish your backup before you start, and verify the backup actually contains what you think it does.

Do these before the reset, in this order

The reset wipes the machine, which means it cannot sign you out of anything afterwards. Do the account work first.

1. Back up your files. Documents, photos, browser bookmarks and saved passwords, software licence keys, anything you made yourself. Our checklist of what to back up before a factory reset covers the items people discover missing a week later.
2. Open the backup and check it. Open three or four actual files from it. An external drive that mounted but copied nothing is a common and painful discovery.
3. Deauthorise licensed software. Adobe, Microsoft 365, some music software and most professional tools tie activations to machines and limit how many you can hold. Deactivate from inside each application while it still runs.
4. Sign out of your browser profile. In Chrome or Edge, remove the profile entirely rather than just signing out, and then check where your Google account is signed in afterwards to confirm the device has dropped off.
5. Sign out of your Microsoft account. Settings → Accounts, and switch the PC to a local account if it is linked to one.
6. Turn off Find My Device. Settings → Privacy & security → Find my device.
7. Remove the device from your Microsoft account online. Sign in at your account’s devices page and remove the PC from the list. This is the step almost everyone skips, and it leaves the machine listed against you indefinitely.
8. Note the BitLocker recovery key, then stop caring about it. If the drive is encrypted, you need the key to be unavailable to the buyer, not to you.

Reset the PC properly

Windows has the tool built in. The important part is one option in the middle of the flow.

Go to Settings → System → Recovery → Reset this PC → Reset PC.

1. Choose Remove everything. Not Keep my files — that one preserves your user data, which defeats the exercise entirely.
2. Choose Local reinstall or Cloud download. Cloud download fetches a fresh copy of Windows and is more reliable if the existing install is damaged; it needs several gigabytes of data. Local reinstall uses the files already on the machine and is faster.
3. On the Additional settings screen, click Change settings.
4. Turn Clean data to Yes.

That fourth step is the one that matters. Without it, Windows removes your files in the ordinary sense — the pointers go, the data stays, and recovery software finds it. With Clean data on, the drive’s contents are overwritten or securely erased, and the reset takes considerably longer as a result.

If the PC has more than one drive, also turn on the option to clean all drives rather than only the one holding Windows. A second drive full of photos is easy to forget about.

Keep the laptop plugged in. A reset interrupted by a flat battery leaves the machine in a state that needs a USB installer to recover.

How long it takes

A plain reset is typically 30 to 90 minutes. With Clean data enabled:

• On an SSD, usually under an hour. The drive uses its own internal erase rather than writing over every block.
• On a mechanical hard drive, several hours is normal, because every sector is physically being written. Start it in the evening and leave it.

If you want to be more thorough

For most private sales, a reset with Clean data is the right level of effort. Two situations justify more.

If the machine held genuinely sensitive material — client records, financial documents, anything regulated — wipe at the drive level instead. Boot from a USB tool and issue the drive’s own secure-erase command. SSD manufacturers ship utilities that do this for their drives, and it is the mechanism the controller is designed around.

Overwrite utilities that write multiple passes of random data were designed for mechanical drives and are a poor fit for SSDs. An SSD’s controller remaps writes across physical blocks, so writing over “the file” does not necessarily touch the blocks that held it. Use the manufacturer’s secure erase, not a multi-pass overwrite.

If the drive is leaving your hands for good and is not being sold — recycling, disposal, a failed drive going back under warranty — remove it and destroy it physically. A drive that no longer powers on cannot be wiped by any software method, and a failed drive is still readable in a lab.

The things people forget

The PC is not the only thing carrying your data.

• The TPM. Clearing it removes stored encryption keys. It lives in Windows Security → Device security → Security processor details → Security processor troubleshooting. Only do this once the backup is confirmed.
• Secondary drives and SD cards. Check for a second internal drive, and physically check the SD card slot. Cards left in slots are extremely common.
• Paired devices. Remove the PC from the pairing list on your phone, headphones and smartwatch after the sale.
• Network credentials. The reset clears saved Wi-Fi passwords, but if you ever shared your network password from this machine, it is worth changing it anyway.
• The sticker on the bottom. Service tags and serial numbers are fine to pass on, but if you have ever written a password on tape and stuck it anywhere, now is the moment.

For a phone or tablet instead

The principles are the same but the mechanism is different, and simpler.

Modern phones encrypt storage by default and a factory reset destroys the encryption key, which makes the remaining data unreadable without overwriting anything. There is no equivalent of the Clean data choice because it is not needed.

What does need doing first is account removal:

• iPhone and iPad: Turn off Find My iPhone and sign out of your Apple Account before resetting. Resetting without doing so leaves Activation Lock engaged and the device is unusable for the buyer.
• Android: Remove your Google account under Settings → Passwords & accounts before the reset, or Factory Reset Protection locks the device to that account.
• Both: Remove the SIM card and any microSD card.

Activation Lock and Factory Reset Protection exist to make stolen phones worthless, and they do that job well. They also strand honest buyers when a seller forgets the step, which is why a buyer should always check — see how to check whether a used phone is stolen for what to verify before handing over money.

What a properly wiped PC looks like

When it finishes, the machine boots to the out-of-box setup screen asking for a region and a keyboard layout. That is the correct end state, and it is how the buyer expects to receive it. Do not complete the setup yourself — stopping at that screen is both the cleanest handover and proof that you did it.

No consumer-grade wipe is a mathematical guarantee, and anyone claiming one is overselling. A reset with Clean data, accounts removed and the device delisted from your Microsoft account puts the data far beyond the reach of recovery software and ordinary buyers. For anything you genuinely could not afford to have recovered, keep the drive and sell the machine without it.