Cyber Hygiene Field Notes
Русский

4 min read. Based on guidance from CISA. Updated 11 November 2026

Before you sell, give away or bin a device

Deleting files does not remove them. A few steps make sure the next owner gets an empty device.

Deleted is not erased

Moving files to the bin, or even a quick format, only marks the space as free. The data stays on the disk until something overwrites it, and free tools recover it.

Phones, laptops and tablets are the obvious cases. Printers, routers, smart TVs, cameras and cars also remember accounts, Wi-Fi passwords, documents and contacts.

The order that works

First make a backup and check that it opens. Then sign out of your accounts on the device and remove it from the list of trusted devices in each account. Take out the SIM card and any memory card.

Only then run the full factory reset from the settings. If the storage was encrypted, as it is on current phones and on a laptop with disk encryption switched on, the reset destroys the key and the old data becomes unreadable.

When the device no longer starts

A broken laptop still has a working disk inside. Remove the disk and keep it, or hand the device to a recycler that destroys storage and confirms it in writing.

At work, never dispose of equipment yourself. Return it to IT, including old flash drives and phones from a drawer.

This note is our own plain-language summary. For the full guidance, read the original: https://www.cisa.gov/news-events/news/proper-disposal-electronic-devices

Next noteWhat the current NIST guidance says about passwords

All articles

The reset is the last step, not the only one.