Retiring a computer means making two decisions: where the equipment should go, and how to prevent its next owner from recovering your information. A machine can be useful to someone else even when it no longer suits you. Its files, accounts and storage devices need a deliberate handoff either way.
This guide is for planning that handoff, with U.S. recycling resources and links to current platform instructions. A business should also follow its retention, legal-hold, asset-management and information-security requirements before erasing or releasing equipment.
Inventory and back up before erasing anything
List the computer and every storage device that will leave with it. A desktop may have both an SSD and a secondary hard drive. Check card readers, USB ports and optical drives for forgotten media. Include external drives in the plan only if you intend to transfer them.
Make a backup of the files you need, then restore a sample to a different location and open it. Include local email archives, project libraries, browser exports where appropriate, application settings and files outside the usual Documents folder. A cloud-sync icon is not evidence that every local file has been backed up.
Record the software and recovery information needed on the replacement computer. Keep recovery keys and passwords in your secure credential system, not in a disposal spreadsheet. Disconnect backup media before beginning an erase process so it cannot be selected by mistake.
For an organization, identify the person authorized to release the asset and the party responsible for sanitization. A staff member's departure or a broken screen does not override a requirement to retain records. Where necessary, have the administrator remove device-management enrollment and organizational activation restrictions through the approved process.
Assess usefulness rather than applying an age cutoff
A five-year-old computer is not automatically waste, and a newer computer is not automatically suitable for donation. Check its condition, operating-system support, intended applications, repair cost and the recipient's requirements. Describe defects honestly. A charity may have no use for equipment it cannot maintain.
Swipe the table sideways, or focus it and use the arrow keys.
| Situation | Possible route | Resolve before release |
|---|---|---|
| Working, supportable computer | Reuse, resale or an accepted donation. | Sanitization, account release, accessories and clear ownership transfer. |
| Repairable equipment | Repair or a refurbisher that accepts its condition. | Cost, parts availability and who handles the storage media. |
| Failed or unsuitable storage | Qualified sanitization or destruction service; reuse the rest if practical. | Media identification, custody and evidence of the chosen treatment. |
| End-of-life equipment | A suitable electronics collection or recycling program. | Acceptance rules, fees, battery condition and data-service scope. |
The EPA's certified electronics recycler guidance identifies the R2 and e-Stewards programs and links to their directories. Check the actual facility, current certification and services offered. A recycler's logo on a website is not a substitute for agreeing how your particular drives will be handled.
Choose a process appropriate to the device and the information
Deleting files or removing a user account is not the same as sanitizing a storage device. In NIST SP 800-88 Revision 2, the sanitization decision depends on the information, the media and the intended disposition. The current revision replaces Revision 1; an old wiping checklist may no longer be the appropriate reference.
NIST distinguishes clear, purge and destroy. These describe different sanitization outcomes and levels of resistance to recovery. They are not three interchangeable buttons. A purge process can preserve reuse; destruction is appropriate when required or when a suitable reusable outcome cannot be established.
For an SSD, ordinary writes through the operating system may not reach all physical storage managed internally by the device. Repeating a generic hard-drive overwrite routine is therefore not a universal SSD solution. Select a supported device- or platform-specific procedure, check its applicability and completion, and retain the result.
Cryptographic erase can be appropriate under the required conditions, but it depends on how encryption and keys were managed. Changing a login password, or turning encryption on immediately before disposal, does not by itself demonstrate that all prior sensitive data has been sanitized. NIST's full media-sanitization guidance covers these conditions and the need to verify and validate the outcome.
Consumer reset and organizational sanitization have different requirements
For a personal Windows PC, follow Microsoft's Reset your PC instructions and review the removal and drive-cleaning choices carefully. Microsoft explicitly says its consumer data-erasure functionality does not meet government and industry data-erasure standards. Do not describe a consumer reset as evidence of organizational compliance.
For a Mac, use Apple's instructions before selling, giving away or recycling a Mac. The procedure depends on the hardware and macOS version. Supported machines can use Erase All Content and Settings; other machines require the applicable sign-out, erase and reinstall sequence. Complete account and activation-lock release as directed so the next owner can set up the machine.
If a device cannot start, “it is broken” is not evidence that its data is inaccessible. Retain control of it until a qualified service can perform and document an appropriate treatment. Do not puncture, burn or casually smash electronics as a home sanitization method.
Tell the collection service about battery problems
The EPA's lithium-ion battery guidance says these batteries and products containing them do not belong in household trash or municipal recycling bins. Use an appropriate collection program and follow its preparation instructions.
If a battery is swollen, damaged or unusually hot, stop using and charging the device and contact the manufacturer or an appropriate collection service for handling directions. Do not pry out an embedded battery or mail a damaged battery without specific acceptance and shipping instructions. The recipient needs to know its condition before collection.
Verify the outcome and keep a useful record
Before release, confirm that each listed drive has a recorded disposition, the chosen process completed, the result was reviewed, and any account or management restrictions were handled. A welcome screen can confirm a setup state; it does not prove a particular sanitization standard was met.
Download the computer retirement record (TXT). It includes equipment and media identifiers, authorization, backup checks, method and tool details, verification, recipient and transfer date. It is a record template, not a certificate that makes an unverified process compliant.
Keep the transfer receipt and any service certificate with the asset record. For the replacement computer's backup plan, see Portable Storage and Network Attached Storage. The Computer Hardware category has more upgrade and storage topics.