Updated January 12, 2026 — Factory resetting a phone is easy; doing it safely is not. With mobile security in the headlines today — from proposed new smartphone security rules in India to fresh warnings around password-reset scams — wiping your device without preparation can mean lost photos, broken two‑factor authentication, banking lockouts, and lingering account links you didn’t expect.
Here’s what to do before you hit “Erase all data,” plus why the security news cycle on January 12 makes this checklist especially timely. ( Reuters)
Why factory resets are trending again in January 2026
A factory reset used to be a simple “last resort” for a buggy phone. In 2026, it’s also a security and privacy decision — because your phone is the key to your photos, payments, and identity.
Three stories driving today’s urgency:
- Smartphone security regulation is in the spotlight. Reuters reports that India is considering wide‑ranging mobile security requirements — from restrictions on background access to camera/mic/location, to malware scanning, log retention, anti‑rollback protection, and more — prompting pushback from major manufacturers. ( Reuters)
Separately, India’s government has pushed back on the “source code demand” narrative, saying it’s engaged in ongoing consultations about mobile security best practices. ( The Register) - Password reset chaos is back on everyone’s radar. Instagram says it fixed an issue that allowed an “external party” to trigger password reset emails and claimed there was no breach — while security reporting and chatter continues around alleged exposed user details and the phishing risk created by confusion. ( The Verge)
- A practical reminder from Android media: Android Authority’s latest factory reset checklist highlights how many people lose data or lock themselves out because they forget the “small” stuff — like audio files, authenticator apps, and banking device approvals — before wiping a phone. ( Android Authority)
If you’re upgrading phones, troubleshooting a weird issue, or preparing a device for resale or donation, those headlines boil down to one point: resetting safely now means thinking beyond photos and contacts.
The factory reset checklist: what to do before wiping your phone
Below is a step‑by‑step pre‑reset plan built around the most common “I wish I’d done that first” mistakes — including several that Android Authority specifically flagged this week. ( Android Authority)
1) Back up photos and videos — and don’t assume everything is in the cloud
Most people remember to check Google Photos — but that’s not always enough.
What to verify:
- Your photos/videos are actually synced (not just sitting locally).
- You’ve checked non‑camera folders (for example, screenshots, downloads, messaging app media, and any folders you turned off for backup).
- You’ve looked for any media stored in apps that don’t automatically push everything to your cloud library. ( Android Authority)
Tip: If you want certainty, export your most important albums to a computer or secondary cloud account before you wipe.
2) Search your phone for “forgotten files”: audio recordings, downloads, documents
This is a big one — and it’s why factory resets still surprise people.
Commonly missed items:
- Voice recorder files (work notes, interviews, quick memos)
- PDFs, documents, and attachments in your Downloads folder
- Audio or document files stored by messaging apps (which may sync inconsistently) ( Android Authority)
If you only do one “deep clean” check, make it this: open your Files app and browse Downloads, Documents, and any app‑created folders you recognize.
3) Move two‑factor authentication and passkeys before you lock yourself out
If you use an authenticator app, your phone isn’t just a device — it’s a literal keyring.
Before reset:
- Transfer your authenticator accounts to your new phone (or export/backup them where the app supports it).
- Don’t forget app-based authenticators beyond the obvious ones (some users get caught by gaming or niche apps that store 2FA inside the app). ( Android Authority)
Why this matters today: The Instagram password-reset email incident is a perfect example of how attackers thrive on confusion — and why two‑factor authentication is still one of the best safety nets when passwords get targeted. ( The Verge)
4) Unlink banking, trading, and “device approval” apps first
Many financial apps treat your phone as a trusted device. If you wipe without de-authorizing properly, you can trigger:
- login friction
- “new device” blocks
- extra verification steps that may require the old phone ( Android Authority)
What to do:
- Look for settings like Trusted devices, Security, Devices, or Authorized logins inside each banking/trading app.
- If your bank supports it, explicitly remove the old phone from the trusted list before the reset.
5) Remove your Google account before factory reset to avoid “ghost devices”
This is the step that even experienced Android users miss — and Android Authority has been especially vocal about it.
The problem:
- A factory reset can wipe the phone itself, but the device may still linger in parts of your Google account (showing up as a “ghost” in device lists, Play Store install targets, and tracking dashboards). ( Android Authority)
The fix:
- Remove your Google account(s) from the phone first, then run the factory reset. Android Authority reports this is the more reliable way to fully dissociate the device from Google services. ( Android Authority)
This step also intersects with Android’s built‑in “device protection” (often discussed as Factory Reset Protection / activation lock): Google explains that removing your Google account is the way to turn off device protection on the device. ( Google Help)
6) Export data from “local-only” apps (the apps that don’t sync unless you tell them to)
Not everything lives in Google backup.
Apps most likely to bite you:
- privacy-focused tools that store data locally by design
- niche trackers or subscription managers
- apps that only sync if you pay or enable sync manually ( Android Authority)
Before reset:
- Look inside each app for Export, Backup, Sync, or Cloud options.
- Save exports somewhere off-device (computer, external drive, or a cloud folder you can access later).
7) Know the credentials you’ll need after reset — or you can lock yourself out
Google’s official Android guidance is clear: after a reset, you may need to prove it’s really your device.
Before you wipe:
- Make sure you know the Google Account username and password on the phone.
- Make sure you know your screen lock PIN/pattern/password. ( Google Help)
Google also warns: if you recently reset your Google Account password, wait 24 hours before factory resetting the phone. ( Google Help)
And if device protection is active, Google says you should expect to verify ownership during or after the reset — especially if you reset via Recovery Mode buttons or do a remote wipe. ( Google Help)
8) Back up properly — including any wallet/transit card data (Android 15+)
A factory reset uninstalls apps and removes their local data. Google recommends ensuring your data is backed up to your Google Account first. ( Google Help)
One newer detail: Google notes that wallet apps can back up transit cards with funds, and on Android 15+ you may get a reminder before you proceed (depending on your wallet provider). ( Google Help)
9) Charge and connect: don’t let your phone die mid‑reset
This is the unglamorous step that prevents headaches.
Google advises:
- Charge your phone to at least 70%
- Ensure you’ll have Wi‑Fi or mobile data available after reset for sign-in
- A factory reset can take up to an hour ( Google Help)
10) If you’re wiping the phone to troubleshoot, consider whether reset is truly necessary
Google explicitly recommends trying other troubleshooting steps before doing a factory reset if you’re only resetting to fix an issue. ( Google Help)
If you do proceed, consider doing your backups first, then:
- update to the latest available security/OS patches
- test performance for a day
- reset only if the issue persists
(And speaking of patches: Google’s January 2026 Android Security Bulletin says devices with security patch level 2026‑01‑05 or later address the listed vulnerabilities and encourages users to update where possible. ( Android Open Source Project))
Quick FAQ: factory reset questions people search for
Does a factory reset delete everything?
A factory reset erases data on the phone and uninstalls apps; data stored in your Google Account can be restored, but local app data typically won’t be unless it was backed up. ( Google Help)
Why do I need my Google password after reset?
Google explains that after a reset you may need to enter security info (screen lock and/or Google account credentials) to verify ownership — especially for protected devices. ( Google Help)
What’s the safest way to wipe a phone before selling it?
At minimum:
- Back up your data
- Transfer 2FA/authenticator access
- Remove your Google account from the phone
- Then factory reset
This reduces the risk of lingering account associations (“ghost devices”) and aligns with Google’s device-protection model. ( Android Authority)
Bottom line on January 12, 2026
Today’s mobile security headlines — proposed new rules aimed at tightening smartphone security, and another reminder of how quickly password-reset confusion turns into phishing risk — underline the same lesson: a phone reset is a security event, not just a settings toggle. ( Reuters)
If you follow the checklist above, you’ll dramatically lower the risk of:
- losing important files you forgot existed
- getting locked out of accounts because 2FA stayed on the old phone
- leaving behind “ghost” device links in Google services
- triggering unnecessary banking/security headaches
