A Comprehensive Guide to Secure Data Removal and Malware Disinfection

Introduction:

In today’s digital age, our smartphones, tablets, laptops, and desktop PCs store a vast amount of work, personal, and financial data. Ensuring the complete removal of this data is crucial when devices are lost, stolen, hacked, or simply repurposed for others. However, mere file deletion may not suffice, as data can still be recovered due to the way storage works on devices. Similarly, dealing with malware infections requires more than running antivirus scans or deleting infected apps. This article explores secure data erasure methods and malware removal options to protect your information effectively.

Why Use Secure Erase? Securely erasing your device is essential when:

1. Selling or giving it to others >
2. Suspecting loss, theft, or remote erasure
3. Disinfecting it from viruses or malware
4. Returning it for repair or replacement
5. Repurposing it for another user
6. Preparing a recently acquired device for use

(Note: Although these methods prevent data recovery for most individuals, determined experts using specialized techniques may recover some data in specific circumstances. For complete data erasure, refer to our guidance on Secure Sanitization of Storage Media. Please note that some methods may render the device unusable.)

Preparation for Secure Erasure: Before you proceed with data erasure, consider the following steps:

1. Back up your essential data to avoid permanent loss during erasure.
2. Utilize built-in features like Restore, Factory Reset, or Erase all content and settings, depending on your device type. These features wipe all content, including messages, contacts, and photos.
3. In case of any issues during the process, you might need to reinstall the device’s operating system, which requires advanced skills.

Remotely Erasing Lost Devices: For lost or stolen devices, remote erasure options might be available through cloud services or Mobile Device Management (MDM) provided by your organization.

Selling Used Devices: Disabling activation lock (iOS) or factory reset protection (Android) may be necessary before selling the device to enable the recipient to use it.

How to Securely Erase Devices:

1. Back up all important data, passwords, and credentials.
2. Choose from secure, remote, or advanced options based on device enrollment in MDM or cloud accounts.
3. Securely erase devices through remote wipe commands, MDM, or physical access, as listed in the table below.
4. Follow the recommended method for your device type.

Device Type	Recommended Secure Wipe	Recommended Secure Remote Wipe	Advanced Options
Android	Erase all data (factory reset)	Android remote erase or MDM	Re-install Android using stock images available from some OEMs (e.g., Google, Sony)
Chrome OS	Reset to Factory Settings	MDM	Recover your Chromebook
iOS	Erase all content and settings	Find my iPhone or MDM	DFU mode restore (PDF)
macOS	Manually erase your hard disk, choosing the Secure erase option	Find my iPhone or MDM
Windows	Use Recovery drive or Installation media to reset your PC, choose the Remove everything option; or clear your TPM	Use MDM if using MDM-managed Windows	Use Recovery drive or Installation media to reset your PC, choose the Remove Everything option; or clear your TPM

(Note: Erasure time varies but usually takes a few minutes; older devices might take longer.)

After Erasure: After securely erasing your device, you can set it up again or pass it on with the assurance that data recovery is highly unlikely.

Technical Notes: For Mac devices without the T2 security chip and encryption not enabled from the start, complete data removal cannot be guaranteed through secure erase. Refer to NCSC media sanitization guidance in such cases.

---

Efficient Transition and Security Measures for Device Transfer

For those in possession of an older iPhone or iPad, here is a streamlined guide to effectively transfer information to a new device and ensure your personal data’s security.

Transferring Information to Your New Device:

1. Utilize Quick Start (for iOS 11 or later) or iCloud, iTunes, or Finder (for iOS 10 or earlier) to automatically transfer data from your old to your new device.
2. If your phone number changes, add additional trusted numbers to prevent access loss. For obsolete numbers, generate a two-factor authentication code on the old device if necessary.

Securing Your Personal Information on Your Old Device:

1. If paired, unpair an Apple Watch.
2. Back up the device.
3. Cancel an AppleCare plan, if applicable.
4. Sign out of iCloud and the iTunes & App Store:
   • iOS 10.3 or later: Settings > [your name] > Scroll down > Sign Out.
   • iOS 10.2 or earlier: Settings > iCloud > Sign Out.
5. Deregister iMessage when switching to a non-Apple phone.
6. For in-store trade-in, visit your nearest Apple Store without erasing the device.
7. If not trading in-store, navigate to Settings > General > Transfer or Reset [device] > Erase All Content and Settings. If prompted for Find My [device], enter your Apple ID and password. For eSIM devices, choose to erase both device and eSIM profile.
8. Provide your device passcode or Restrictions passcode if requested, then tap Erase [device].
9. Contact your network provider to facilitate service transfer for the new owner, especially without a SIM card.
10. Remove your old device from your trusted devices list.
11. Erasing the device will disable Find My [device] and Activation Lock.

Forgot Your Apple ID or Password?

For Devices No Longer in Your Possession:

1. Request the new owner to erase all content and settings (refer to previous steps).
2. If Find My [device] is active, use iCloud.com/find or the Find My app to erase it. Then, remove it from your account.
3. In case the above steps aren’t viable, change your Apple ID password. This won’t erase data but prevents the new owner from deleting your iCloud information.
4. Deregister iMessage when moving to a non-Apple phone.
5. If using Apple Pay, manage your cards on iCloud.com. Remove devices using Apple Pay.
6. Eliminate your old device from your trusted devices list.
7. Cancel your AppleCare plan, if applicable.

Switching from Android to Apple Trade-In:

Before trading in an Android device with Apple, adhere to the following:

1. Back up data.
2. Erase the device.
3. Remove SIM cards, memory cards, cases, and screen protectors.
4. For assistance, contact the device’s manufacturer.

---

Optimizing the Transition of Your Android Phone for Sale

The typical lifespan of a smartphone tends to be around three years, after which the battery’s performance may diminish and software updates cease to be provided by OEMs. This juncture often prompts individuals to part ways with their old phones in favour of newer models.

In the event that you’re considering the sale of your Android phone and seeking guidance on the process, this comprehensive guide will adeptly steer you through each step. Simply adhere to the guidelines below to ensure a seamless transition.

1. Comprehensive Data Backup:

The foundational and imperative initial step when preparing your old Android phone for sale involves the thorough backup of all data. This encompasses a broad spectrum of elements including contacts, call records, messages, multimedia files, documents, notes, media, application data, and WhatsApp conversations.

A word of caution: Exercise patience during this phase. Regrettably, accounts of individuals losing personal data while transitioning to a new device, especially WhatsApp conversations, abound. Fortunately, avenues to recover deleted or missing WhatsApp messages exist to mitigate such situations.

Should you not have procured a new phone yet, it’s highly advisable to hold off on selling your old device. Instead, prioritize obtaining your new device, transferring data to it, verifying successful data migration, and subsequently initiating the process to prepare the old device for sale. While numerous data transfer apps populate the Play Store, Samsung Smart Switch emerges as a favourite, catering not exclusively to Samsung devices.

2. Account and Device Preparation:

Once data backup and transfer are accomplished, proceed to detach all linked accounts from your old device. This encompasses disassociating your Google and Microsoft accounts, WhatsApp accounts, social media profiles, and other miscellaneous third-party accounts affiliated with apps.

Notably, if you perform a factory reset without disassociating your Google account, the subsequent owner may encounter difficulties using or logging into their Google account, as the device may still identify you as the primary owner. The subsequent course of action can be observed below:

• Access device settings.
• Navigate to “Accounts and backup.”
• Select “Manage accounts.”
• Choose your Google account and execute “Remove account.”
• Confirm the removal action.

Simultaneously, proceed to unpair all devices tethered to your phone, such as smartwatches, wireless speakers, and earbuds. Lastly, eliminate all forms of lock screen protection, be it passwords, PIN codes, patterns, or registered fingerprints.

3. SIM and MicroSD Card Disengagement:

Efficiently safeguarding your privacy entails removing the SIM card from your old phone. Additionally, if your device houses a microSD card, ensure its removal as well. In the scenario where you choose to bundle the microSD card with your old phone to enhance its appeal to prospective buyers, recognize that retaining the card during a factory reset will lead to data erasure from the microSD card as well.

4. Crucial Factory Reset:

Preceding the sale, the factory reset stage is pivotal. This step ensures a clean slate for the impending new owner by eradicating all traces of your personal data from the device’s memory. Furthermore, this action facilitates smoother device functionality by erasing downloaded files and applications, thereby optimizing RAM and internal storage.

The course of action for a factory reset on a Samsung phone is detailed below:

• Access device settings.
• Navigate to “General management” and proceed to “Reset” > “Factory data reset.”
• Confirm the factory reset by entering your lock screen password.
• Execute “Delete all.”

It is imperative to note that a factory reset exclusively eliminates locally stored device data, leaving cloud-based application data—such as Google Drive or Microsoft OneDrive—unchanged. For instance, Gmail emails will reappear as usual upon signing into your Google account on your new device.

In closing, this comprehensive guide ensures the smooth and secure transition of your Android phone to its next owner. By meticulously following these steps, you safeguard your personal information, extend your device’s legacy, and streamline the transition process.

---

Erazed4Good’s Advice to Sellers:

In the context of selling devices, especially when data security is paramount, consider partnering with Erazed4Good. Their expertise ensures data is securely wiped, personal information is safe, and devices are ready for a new owner. This proactive step provides peace of mind and assures responsible data handling during device transitions.

For More Information: For further guidance and information on these topics, consult:

• Manufacturer’s guides for your device
• NCSC Secure Sanitization of Storage Media
• CPNI Secure Destruction Guidance

Sources:

https://www.cpni.gov.uk/secure-destruction-0 https://www.ncsc.gov.uk/guidance/secure-sanitisation-storage-media https://www.ncsc.gov.uk/collection/device-security-guidance/getting-ready/mobile-device-management https://www.ncsc.gov.uk/guidance/secure-sanitisation-storage-media https://www.ncsc.gov.uk/collection/device-security-guidance/getting-ready/choosing-devices