Selling or Trading In Your iPhone? Wipe Private Data First

Quick answer

Back up anything you want to keep, sign out of iCloud and iTunes & App Store, then run Erase All Content and Settings from Settings > General > Transfer or Reset iPhone. That single step does more than clear files — it destroys the encryption keys protecting everything on the device, which is why ordinary "deleted" files can often be recovered while a proper device erase can't. Skip the sign-out step, though, and you can leave the next owner locked out of the phone entirely.

Below is the order that avoids both problems, plus the two mistakes — Activation Lock and forgotten two-factor codes — that trip people up most.

Step-by-step

Before you erase anything:

• Back up the phone to iCloud or a computer so nothing you need is lost.
• If you use authenticator apps like Google Authenticator or Microsoft Authenticator, move those accounts to your new phone first — their codes don't travel with a standard iCloud backup, and skipping this step can lock you out of your own accounts.
• If you keep private photos, documents, or contacts in a separate vault app, back up what you want to keep from inside that app too — see how to back up private photos without iCloud if you'd rather not route them through Apple's cloud.
• Unpair an Apple Watch through the Watch app if one is linked to the phone.

The actual wipe, in order:

1. Sign out of iCloud: Settings > [your name] > scroll down > Sign Out, enter your Apple ID password, then Turn Off.
2. Sign out of iTunes & App Store: Settings > iTunes & App Store > Apple ID > Sign Out.
3. Go to Settings > General > Transfer or Reset iPhone > Erase All Content and Settings, enter your passcode or Apple Account password, and confirm.

Erase All Content and Settings removes Apple Pay cards, photos, contacts, and every third-party app's local data, and turns off iMessage, FaceTime, and Game Center on that device. It's the same step that matters for Stolen Device Protection on iPhone — both features assume the device has been properly signed out of before it changes hands.

One timing note: wait until your replacement phone is fully set up and everything has transferred over before wiping the old one. If something doesn't transfer cleanly, you'll want the old phone as a fallback until the new one is confirmed working.

Common problems and fixes

"The buyer says the phone is stuck asking for my Apple ID." This is Activation Lock. It turns on automatically the moment Find My is enabled, and it can persist through an erase if you didn't sign out of iCloud first. Fix it going forward by always signing out before you erase — if it's already happened, you can remove Activation Lock remotely from Find Devices on iCloud.com using your original Apple ID.

"I erased the phone, but my old photos are still in my iCloud account." That's expected. Erase All Content and Settings only clears the device itself — it doesn't touch what's already stored in your iCloud account. If you want those photos gone entirely, delete them from iCloud separately, on your own schedule.

"I keep some content in a vault app that never synced anywhere — is it actually gone after I erase?" Yes. The erase works at the device level, discarding the encryption keys for all local storage, not just files inside apps that sync to iCloud. If you're curious about the narrower case of removing just the app instead of wiping the whole phone, see what happens to your vault photos when you delete the app — that's a different, more limited action than a full device erase.

Doing this with Privara

A clean device erase handles what happens at the moment of sale. But plenty is visible on your phone well before that point — whenever it's unlocked, borrowed, or handed to a repair tech. Privara keeps your private photos, videos, documents, and contacts behind one AES-256-encrypted vault that looks and works exactly like an ordinary calculator, so nothing sensitive shows up in your camera roll or contacts list in the meantime.

There's no account to set up and nothing is uploaded anywhere by default — it's a local, zero-knowledge vault, so the content stays under your control until you decide otherwise. Face ID or Touch ID locks the vault on top of your PIN, a separate decoy PIN can open an entirely different vault, and break-in detection quietly captures a photo of anyone who tries the wrong PIN. And because photos, videos, documents, and contacts all live in the same encrypted vault, you're not piecing together separate tools for each type of content.

None of that changes the resale checklist above — you still back up, sign out, and erase before handing the phone off. It just means there's less riding on getting that checklist exactly right, since the sensitive material was never sitting in the open to begin with. Download Privara on the App Store to set it up before the next time your phone leaves your hands.