Selling or donating an old laptop is one of the most common moments when personal photos and files get exposed without the owner realizing it. A standard factory reset doesn’t securely wipe data on most modern laptops. Deleted files often remain recoverable for weeks or months. And most guides focus on what to delete, but skip the step most people forget: where your files actually live now.
This guide covers the complete process — from backing up what you want to keep, to securely wiping what you’re leaving behind, across Windows, macOS, and Chromebooks.
Why “Just Delete the Files” Doesn’t Work
When you delete a file on any modern operating system, you’re telling the OS to mark that storage space as available. The bits that make up the file stay on the drive until something else overwrites them. On a traditional spinning hard drive, this is why forensic tools can often recover “deleted” files even years later.
On SSDs — which are in essentially every laptop sold in the last several years — the situation is different but not simpler. SSDs use wear-leveling and overprovisioning, which means data may persist in areas the file system doesn’t think it owns. Standard overwrite tools designed for hard drives don’t work reliably on SSDs.
The effective approach for most modern laptops is to use the platform’s built-in secure erase mechanisms, which interact with the drive at a level that accounts for its actual architecture — not to run a file-deletion utility that was designed for older hardware.
Step One: Figure Out Where Your Files Actually Live
Before you do anything else, you need to know where your photos and files are located, because modern laptop setups create multiple places your personal data could be sitting:
Local storage. The most obvious location — files in your Photos app library, your Downloads folder, your Documents folder. These are on the internal drive.
Cloud sync folders. If you use iCloud Drive, OneDrive, Google Drive, or Dropbox, your local device likely has a synced folder that mirrors cloud content. Wiping the laptop removes the local copies but doesn’t affect what’s in the cloud. That’s usually fine — but if you’d forgotten that a folder was being synced to a service you no longer use, the content may persist there indefinitely.
iCloud Photos / Google Photos library. On macOS with iCloud Photos enabled, your Photos app may show photos that are stored in iCloud rather than locally, with local cached copies. Wiping the laptop removes the cached copies but not the originals in iCloud. Again, usually fine — but you need to know which is which.
Browser profiles. Chrome, Firefox, and Edge store saved passwords, form autofill data, browsing history, and sometimes downloaded files within their profile data. If your browser is synced to an account, that data is also in the cloud — but the local profile cache is on the drive.
Messaging and communication apps. Applications like Slack, Discord, Teams, WhatsApp Desktop, and similar tools may store downloaded files, chat histories, and media attachments locally.
Deleted items not yet cleared. The Trash (macOS) or Recycle Bin (Windows) may contain files you “deleted” months ago but never permanently removed.
Do a thorough account of these before you start wiping. The goal is not just to clear the drive — it’s to know what’s going where before you wipe the device you’ll no longer have access to.
Step Two: Back Up Everything You Want to Keep
If you haven’t already backed up your files from this laptop, do it before anything else. A few specifics:
Export your Photos library (macOS) to an external drive or a cloud backup service in original format before signing out of iCloud. Photos in iCloud should be accessible from other devices after you sign out, but an explicit export is insurance.
Confirm your cloud sync is complete. Before relying on iCloud, OneDrive, or another sync service to hold your files, verify that sync is up to date — that there are no pending uploads or conflicts sitting in the queue. A sync client that’s been offline for a while may have local-only changes that haven’t made it to the cloud yet.
Download anything you’re not sure is backed up. If in doubt, download it to an external drive. It’s easier to have a redundant copy than to discover after the fact that something wasn’t synced.
Export passwords separately from the browser. If you use a browser’s built-in password manager, export the passwords to a password manager before wiping. They won’t be accessible after you wipe the device.
Step Three: Sign Out of Everything
Before wiping, sign out of accounts associated with this device. This does two things: it deauthorizes the device from your accounts (so the new owner can’t use any services tied to it), and it initiates the process of removing your credentials from local storage.
The sign-outs that matter most:
iCloud (Mac). System Settings > [Your name] > Sign Out. This signs you out of iCloud, deauthorizes the Mac from your Apple ID, and turns off Find My Mac. Do this before wiping — if you wipe without signing out first, Activation Lock may be enabled, which can prevent the new owner from using the device.
Windows / Microsoft Account. Settings > Accounts > Your info > Sign in with a local account instead (or just proceed to the reset, which handles this).
Google Account (Chromebook or if Google is used on Windows/Mac). Remove the primary account from Chrome and any other Google apps.
Dropbox, OneDrive, Google Drive desktop clients. Disconnect the account from the desktop app before uninstalling or resetting.
Licensed software. If you have software that requires per-machine licensing (Adobe Creative Cloud, certain productivity tools), deactivate the license for this machine before wiping. Most software has a “deactivate this computer” or “sign out” option that returns the license to your pool.
Step Four: Wipe the Drive
This is where the guidance differs significantly by platform:
macOS
The most effective approach on a modern Mac is Erase All Content and Settings, available in macOS Monterey (12) and later under System Settings > General > Transfer or Reset > Erase All Content and Settings.
This built-in tool handles the complete secure wipe process: it securely erases the volume, signs out of iCloud, deactivates associated services, and resets the chip (including the Secure Enclave on Apple Silicon machines). For Apple Silicon Macs, this erase process is cryptographically secure — it destroys the encryption keys that protect the data, making the data irrecoverable even if someone has the drive.
If you have an older Intel Mac that doesn’t support this option, the alternative is to boot into Recovery Mode (hold Cmd+R during startup), use Disk Utility to erase the internal drive, and reinstall macOS. For Intel Macs with FileVault enabled, erasing the drive destroys the encryption keys, which is functionally equivalent to a secure wipe.
Windows
Windows 11 (and Windows 10) includes a reset option that can securely erase the drive: Settings > System > Recovery > Reset this PC > Remove everything. The critical step is ensuring you select “Remove everything” (not “Keep my files”) and, on the next screen, “Change settings” > enable “Data erasure”.
With Data Erasure enabled, Windows performs multiple overwrite passes over the drive. This adds significant time (hours for a large SSD or HDD), but results in a wipe that makes recovery significantly harder than a standard reset.
For drives with hardware encryption (most modern SSDs from major manufacturers), some IT-grade wipe tools can trigger a Secure Erase command directly, which is faster and more reliable than overwrite passes. This is most relevant if you’re preparing a large number of devices; for an individual laptop, the Windows reset with data erasure is sufficient.
Chromebook
Chromebook’s Powerwash (Settings > Advanced > Reset settings > Powerwash) removes all local data, signs out of Google accounts, and restores the device to factory state. Because Chrome OS handles encryption at the OS level and stores minimal data locally (most data is in Google’s cloud), Powerwash is generally effective for consumer Chromebooks.
For business-managed Chromebooks, the administrator may need to remove the device from enrollment before or after Powerwash, depending on the organization’s policy.
What Remains After Wiping (and Whether It Matters)
After a secure wipe, three things may still be present:
BIOS/UEFI settings. The firmware-level configuration of the machine persists through a software wipe. This typically doesn’t include personal data, but your Wi-Fi passwords may be stored in NVRAM on some systems. Check your model’s support documentation if this matters to you.
The TPM. On Windows machines, the Trusted Platform Module retains certain configuration state. The Windows reset process handles clearing the TPM, but if you ran the reset without the option to reset the TPM, you may want to do this separately through your BIOS.
Cloud data associated with the machine. As noted, wiping the laptop doesn’t affect data stored in cloud services. If you want to remove session or device records from iCloud, Google, Microsoft, or other services, do that separately through each service’s account management interface.
For most personal laptop sales or donations, a properly executed factory reset with data erasure is sufficient. The new owner won’t be able to recover personal files. Forensic-grade recovery tools used by law enforcement or security researchers have higher capability, but a private buyer or charity recipient doesn’t have those resources.
The Files You Might Have Forgotten
A few specific locations that are easy to miss:
Screenshot folder. If you use a screenshot tool, screenshots often go to a dedicated folder that isn’t part of a standard Photos library backup.
Desktop and Downloads. These are two of the most common locations for files that haven’t been organized — documents, photos, PDFs, receipts — that users forget to back up before wiping.
External drives. If you’ve ever used an external drive with this laptop, it may have cached copies of files from the machine, depending on how you used it. If that drive is going with the laptop, review its contents.
Browser download history and cached media. Browsers cache images and files locally. While these are cleared by a full wipe, they may include photos and files you viewed online from personal accounts if the wipe isn’t performed.
Chat app attachments. Messages, Telegram, Signal Desktop, and similar apps store attachments locally. If you’ve sent or received photos through these apps on this laptop, those files are in app-specific directories that a standard “delete files” approach won’t necessarily find.
After You Wipe: What to Do With Your Backup
Once the laptop is wiped and gone, your personal photos and files exist only in whatever backup you made before the wipe. This is a good moment to audit the state of that backup:
Verify the backup is complete. Open a sample of files from the backup — don’t just count them. A backup that copied file names but not content, or that truncated during transfer, looks fine from the outside.
Make sure you have a second copy. A backup on a single external drive is one hard drive failure away from being lost. The 3-2-1 rule — three copies, on two types of media, with one off-site — is a standard framework. A cloud backup of your primary backup is the easiest way to achieve the off-site copy.
Consider where you’re storing photos long-term. A laptop replacement is often the natural moment to reconsider cloud photo storage. The question worth asking isn’t just “which service has the most free storage” but “what does this service do with my photos, and under what conditions?”
daftei stores files with AES-256 encryption at rest and TLS 1.3 in transit, with 5 GB free and unlimited storage on Pro ($5.99/month or $44.99/year). It never trains third-party AI models on user content and never sells data. If you close your account, a 30-day grace window gives you time to recover files before permanent erasure. It’s available on iOS, Android, and the web at /app.
A laptop transition is one of those moments where privacy decisions that usually seem abstract become concrete. You can see exactly what you’re handing someone else access to if you don’t wipe it properly. Apply the same thinking to the cloud services holding your ongoing backup: know who can see what, under what conditions, and what happens when you want it gone.