How to securely wipe a hard drive before selling your PC

Selling an old computer can be a good way to recover some money, whether you list it on Gumtree, Facebook Marketplace, or take it to a local refurbisher. Before handing it over, however, deleting files and emptying the Recycle Bin is not enough. Personal documents, saved passwords, tax records, browser history and photographs may still be recoverable.

A secure wipe removes or renders unreadable the information stored on the internal drive. The right method depends on whether the computer uses a traditional hard disk drive (HDD) or a solid-state drive (SSD), as well as whether encryption was enabled. The process also needs to account for recovery partitions, linked accounts and any removable storage left in the machine.

The safest approach is to back up what you need, sign out of your accounts, identify the drive type and use an erasure method designed for that hardware. A careful clean-up protects your privacy and gives the next owner a reliable, ready-to-use PC.

Storage type	Suitable method	Important point
HDD	Full overwrite or manufacturer secure-erase utility	Several overwrite passes are usually unnecessary for modern drives
SSD	Manufacturer secure erase, sanitize command or cryptographic erase	Repeated overwriting can add wear and may miss reserved cells
Encrypted HDD or SSD	Destroy or remove the encryption key, then reset the computer	Confirm that encryption was active before relying on this method
Damaged or inaccessible drive	Professional data destruction or physical shredding	A failed drive may still contain recoverable information

Back up files before wiping the computer

Copy personal files to a trusted external drive or a reputable cloud service before starting. Check common locations such as the Desktop, Documents, Downloads, Pictures and Videos folders, then review application-specific folders for email archives, accounting data, game saves and design projects. Open several copied files to verify that the backup works.

Australian users should also check records stored for Medicare, the ATO, private health insurance, property rentals and school or university accounts. If you work from home, look for files synchronised through OneDrive, Google Drive, Dropbox or a business VPN. Cloud copies may remain available after the PC is wiped, so review those services separately rather than assuming the local reset handles everything.

Keep the backup disconnected once it has been checked. This prevents a faulty reset, malware infection or accidental deletion from affecting both the original files and the backup copy.

Identify whether the drive is an HDD or SSD

In Windows, open Settings, select System, then Storage and Advanced storage settings. Disk and volumes may show the drive model, which can be searched on the manufacturer’s website. Device Manager can provide the model number as well, although it may not clearly state whether the device is solid-state.

An HDD contains spinning magnetic platters and can generally be sanitised by writing over the entire available space. An SSD stores data in flash memory, where wear levelling and spare cells mean ordinary overwriting may not reach every previous block. Using an HDD procedure on an SSD is inefficient and may shorten its usable life.

If the PC has multiple internal drives, identify each one before erasing anything. Some desktops contain a small SSD for Windows and a larger HDD for files. Wiping only the system drive could leave private material on the second disk.

Use Windows reset for a straightforward sale

For many Windows 10 and Windows 11 computers, the built-in reset feature is sufficient when combined with the correct options. Go to Settings, choose System, Recovery and Reset this PC, then select Remove everything. Under the data-cleaning option, choose the setting that cleans the drive rather than merely removing files.

Windows may offer cloud download or local reinstall. Cloud download can provide a fresh installation when local system files are damaged, though it requires a stable connection and may use several gigabytes of data. This is worth bearing in mind in regional Queensland, Western Australia or other areas where fixed-line internet can be slower or data allowances may matter.

A standard reset is more suitable for a lightly used personal machine than for a PC that held sensitive business information. If the drive was encrypted with BitLocker, the combination of encryption and a complete reset offers stronger protection. Verify the reset has finished and reaches the initial Windows setup screen before selling the computer.

Securely erase an SSD or encrypted drive

For an SSD, use the secure erase or sanitize function provided by the drive manufacturer. Many brands supply a support utility that detects compatible drives and performs the operation from a bootable environment. Some computer firmware also includes a secure erase tool in its storage or security menu.

BitLocker changes the risk assessment because the data is encrypted while the computer is in use. If the recovery key and encryption keys are removed correctly, old sectors are much harder to interpret. Still, do not assume encryption was enabled: check Windows settings or the BitLocker control panel before relying on cryptographic erasure.

Technical documentation can vary by model, so a general technology reference may help when checking terminology before following the drive maker’s instructions. Never interrupt a secure-erase process, disconnect power or close a laptop lid if the utility warns against it.

Remove accounts, licences and personal access

Before the wipe begins, sign out of Microsoft, Google, Apple, Adobe, Office and password-manager accounts. Deauthorise software that limits the number of activated devices, including creative applications, security suites and paid business programs. Remove the computer from account dashboards where possible.

Sign out of browsers after disabling synchronisation, then clear saved passwords, payment details and autofill data. Disconnect Bluetooth phones, smart watches and other paired devices. If the computer is joined to a workplace or school network, ask the administrator to remove it from device management rather than simply resetting Windows.

Do not forget local services. Remove saved Wi-Fi networks, Outlook profiles, email archives and remote-access applications such as AnyDesk or TeamViewer. If the PC was used for banking or government services, review account security pages from another trusted device and revoke old sessions.

Handle the physical computer and accessories safely

After the wipe, inspect the machine for USB drives, SD cards and external hard disks. These are often overlooked when a PC is prepared for sale. Remove printed recovery keys, handwritten passwords and labels containing names, addresses or asset numbers. Clean the case and photograph the model and serial number for your records.

When selling privately in Australia, meet in a safe public location and avoid displaying unnecessary personal details in an online listing. Local buyers may use phrases such as “pickup only” or “cash on pickup”, but electronic payment and a written receipt provide a clearer transaction record. If arranging collection in a busy area of Sydney, Melbourne or Brisbane, keep the computer visible and retain proof of sale.

For old equipment that is not worth selling, use an approved e-waste service rather than placing a computer in a standard household rubbish bin. State and council arrangements differ, while retailers and recycling programs may accept certain devices. A damaged drive that cannot be wiped should be removed and professionally destroyed before the rest of the PC is recycled.

Verify the wipe and prepare a clean handover

Start the computer after erasure and confirm that it displays the Windows region, keyboard and network setup screens. It should not automatically open an old user profile, show previous files or request the seller’s Microsoft account. If the previous desktop appears, the process was not completed correctly.

For additional verification, boot from a trusted maintenance environment and inspect the drive for readable folders or recoverable file names. A specialist technician can perform a more formal sanitisation check when the computer held client records, health information, legal documents or business credentials. Keep a brief record of the drive model, method used and date of erasure.

A properly sanitised PC can then be listed with accurate details about its processor, memory, storage capacity and Windows version. Providing the next owner with a clean first-boot experience protects the seller’s information while making the handover straightforward.