Auraz Tech logoAuraz Tech

How to Factory Reset Your Android Phone Before Selling It in Pakistan (2026): Complete Data-Wipe Guide

By Auraz Tech Editorial Team | October 2026

You found a buyer on OLX, agreed on a price, and you are meeting tomorrow. One question decides whether this sale goes smoothly or becomes a nightmare: is your personal life still on that phone? Your photos, WhatsApp chats, saved passwords, bank apps, Google account, location history — a phone you have used for two or three years holds more of your private data than your wallet and your filing cabinet combined. A careless sale hands all of it to a stranger. The good news: a proper wipe takes about 30 minutes and is almost entirely foolproof if you do the steps in the right order. The bad news: the order matters enormously — reset first and ask questions later, and you can lock the phone to your own Google account (FRP lock) or lose data you meant to keep. This guide walks you through the complete, correct sequence: back up everything worth keeping, remove the accounts that can lock the phone, pull your SIM and SD card, encrypt and reset, verify the wipe, and handle the buyer meeting like a pro — with brand-specific steps for Samsung, Xiaomi, Infinix, Tecno and Pixel.

Illustration of an Android smartphone with a factory-reset progress ring and security shield on screen, with photo, contact and message icons dissolving into particles and a padlock above

Why a Quick Factory Reset Alone Is Not Enough

Most people tap "Factory reset", hand over the phone, and assume they are done. On a modern phone (Android 6 or newer), the reset itself is actually quite thorough — storage is encrypted by default, and the reset destroys the encryption keys, turning any leftover data into unreadable noise. So the reset is not the weak link. The weak links are everything around the reset:

The fix is a strict order of operations: back up → sign out of everything → remove SIM/SD → encrypt if needed → reset → verify. Follow that order and there is nothing to worry about.

Step 1: Back Up Everything Worth Keeping

Do this first, while the phone is still fully yours and logged in. Once you sign out and reset, anything not backed up is gone forever — there is no "undo" after a proper wipe.

  1. Google backup: go to Settings > System > Backup (on Samsung: Settings > Accounts and backup > Back up data) and run a backup now. This saves app data, Wi-Fi passwords, call history and settings to your Google account. Our Android backup guide walks through the full setup if you have never done it.
  2. WhatsApp chats: open WhatsApp > Settings > Chats > Chat backup and back up to Google Drive now. Your chat history, including media, moves with you to the new phone — and our WhatsApp transfer guide covers restoring it on the other side.
  3. Photos and videos: open Google Photos and confirm backup is complete (check the cloud icon — no pending uploads). If you use the phone maker's gallery cloud (Samsung Cloud, Xiaomi Cloud), back that up too, or copy everything to a computer with a USB cable.
  4. Authenticator / 2FA codes: this is the one people forget. If you use Google Authenticator, transfer accounts to your new phone first (Authenticator > transfer accounts). For banking and email 2FA apps, move each account or save the backup codes somewhere safe. Losing these can lock you out of your own accounts for days.
  5. Contacts, calendar, notes: confirm they are syncing to your Google account (Settings > Accounts > Google — everything toggled on, last sync recent). Samsung Notes and Xiaomi Notes have their own cloud sync — check those too.
  6. Files and downloads: copy anything in the Downloads folder, voice recordings, and documents to Google Drive or a PC. The photo recovery guide exists because people skip this step — do not be one of them.

Take your time here. An hour of careful backup beats a month of regret.

Step 2: Remove Your Accounts — Avoid the FRP Lock Trap

This is the single most important step, and the one most sellers skip. Factory Reset Protection (FRP) is an anti-theft feature built into Android: if the phone is reset while a Google account is still signed in, the setup wizard afterwards demands that exact Google account's email and password. A buyer who sees that screen will assume the phone is stolen — and honestly, from their perspective, it looks exactly like a stolen phone. Here is how to avoid it:

  1. Go to Settings > Passwords & accounts (Samsung: Settings > Accounts and backup > Manage accounts; Xiaomi: Settings > Accounts > Manage accounts).
  2. Tap your Google account and choose Remove account. Confirm. Repeat for every Google account on the phone.
  3. Remove your brand account too: Samsung account (Samsung phones), Xiaomi account (Xiaomi/Redmi/Poco), Infinix/Tecno ID where applicable. These have their own activation locks — a Samsung phone reset with the Samsung account still attached can demand that login as well.
  4. Sign out of anything else that ties the device to you: WhatsApp is handled by the reset, but also sign out of banking apps, Easypaisa/JazzCash, and any device-management or parental-control app.
  5. If your phone was ever enrolled in a work profile or company device management, have your IT admin release it first — enterprise locks survive consumer resets.

Only after every account shows as removed should you proceed to the reset. If you already reset without doing this and the FRP screen appears, you can still fix it: connect to Wi-Fi, sign in with the original Google account, then remove it properly and reset again.

Step 3: Remove Your SIM Card and SD Card

Simple, but non-negotiable:

Step 4: Encrypt First (Only Needed on Very Old Phones)

Skip this section if your phone runs Android 6 or newer — which is virtually every phone sold in Pakistan in the last decade. Those encrypt storage by default, and the factory reset destroys the encryption keys, which is what makes the wipe effective.

If you are selling something ancient running Android 5 (Lollipop) or earlier:

  1. Charge the phone to at least 80% and plug it in — encryption takes a while and must not be interrupted.
  2. Go to Settings > Security > Encrypt phone and let it finish (can take an hour).
  3. Then do the factory reset. The reset now only needs to destroy the key, and your old data is cryptographically unrecoverable.

Honestly, if your phone is that old, its resale value is minimal — but the data on it is still yours, so the hour is worth it.

Step 5: The Factory Reset — Brand by Brand

With backups done and accounts removed, the reset itself is straightforward. The menu path differs by brand:

Let it finish undisturbed. Do not hold the power button, do not remove the battery (on the rare phone that still has one), and do not panic if it sits on the logo for several minutes — that is normal.

Step 6: Verify the Wipe Before You Hand It Over

Do not skip verification — it takes two minutes and it is your proof the job is done:

  1. The phone should boot to the "Hi there" / welcome setup screen asking for language and Wi-Fi. If it boots straight to your home screen, the reset did not happen — do it again.
  2. Walk through setup without signing into anything — skip the Google sign-in, skip everything — just to reach the home screen.
  3. Open Settings > Storage: it should show nearly all space free. Open the gallery, contacts and file manager: all empty.
  4. Power the phone off. It is now ready to hand over in a clean, out-of-box state — which is also what buyers expect to see.

If anything of yours is still visible, you reset without removing accounts or the reset was interrupted — go back to Step 2 and repeat the sequence properly.

Step 7: At the Sale — The Buyer Meeting Checklist

In Pakistan, most phone sales happen face-to-face — OLX meetups, market shops in Hafeez Centre or Saddar, or a friend of a friend. A smooth handover protects both sides:

Selling to a Shop vs. Selling Online

The wipe process is identical, but the sale dynamics differ. Market shops (the mobile markets in every Pakistani city) pay less than a private buyer — typically 10 to 20 percent below OLX prices — but they pay cash on the spot and handle the hassle. Get quotes from three shops before accepting; prices vary more than you would expect. Online (OLX, Facebook Marketplace): better prices, but meet in a public place, accept cash or verified bank transfer only (confirm the transfer in your banking app before handing over the phone), and never ship the phone before payment clears. Either way, complete the wipe before the meeting — resetting the phone in front of a stranger while they wait is stressful and error-prone.

One more thing: after the sale, keep an eye on your accounts for a few days. If you did everything in this guide, there is nothing to find — but if a "new device" login alert appears anywhere, change that password immediately and review the account's active sessions. Our guide on checking whether your phone or account is compromised covers the warning signs.

FAQ

Is a factory reset enough to permanently delete my data before selling my phone?

On any phone running Android 6 or newer, effectively yes — the storage is encrypted by default, and a factory reset destroys the encryption keys, which makes the old data unreadable garbage even to recovery tools. On very old phones (Android 5 or earlier) that were never encrypted, a reset is not enough: encrypt the phone first in Settings, then reset. Either way, remove your Google and brand accounts before resetting to avoid FRP lock.

What is FRP lock, and why is the phone asking for my old Google account after a reset?

FRP (Factory Reset Protection) is an anti-theft feature: if the phone is reset without first removing the signed-in Google account, it demands that same account's login on first setup to prove the reset was authorized. This is exactly what happens when people reset through recovery mode or forget to sign out. Always remove your Google account in Settings > Accounts before resetting, and you will never see the FRP screen.

Should I remove my SIM card and SD card before selling my phone?

Yes, always. Your SIM is tied to your identity, your mobile banking OTPs, and your WhatsApp account — never hand it to a buyer. Your microSD card may hold years of photos, documents, and app data; back it up, format it separately on a computer or in another device, and decide whether to include it in the sale. If you include it, format it in the phone after the reset so it starts clean.

Can the buyer recover my deleted photos or WhatsApp chats after a factory reset?

On a modern encrypted phone (Android 6+), no — the reset wipes the encryption keys, so any leftover data fragments are unreadable. The real risk is not the phone itself but your cloud accounts: if you forgot to sign out of Google, the buyer could restore your backup onto the device. That is why signing out of every account before the reset matters more than the reset itself.

How do I wipe my microSD card before selling the phone with it?

Back up anything you want to keep first, then format the card: go to Settings > Storage, tap the SD card, and choose Format (or Format as portable). For extra certainty, format it once more in a computer using a full (not quick) format. If the card was adopted as internal storage, the phone's factory reset handles it, but formatting separately first is still the safest routine.

Does a factory reset remove viruses and malware from my Android phone?

Almost always. A factory reset wipes every installed app and returns system partitions to their factory state, which removes ordinary malware, adware, and spyware apps. The rare exception is malware that infected the system partition itself (usually only possible on rooted phones), which can survive a reset — in that case, reflashing the stock firmware is the fix. For a phone you are selling, a normal reset is more than sufficient.

Auraz Tech Editorial Team — we test every guide on real devices and keep our tutorials updated.