When you sell your phone, is your data secure from thieves? [Overwrite/Encrypt]

Question

Level 1

22 points

When you sell your phone, is your data secure from thieves? [Overwrite/Encrypt]

As the title says. I have always wondered is the data really secure once its "deleted" ?. The odds of someone going through the trouble of going through your phone or anything to recover any personal data, like banking, credit cards etc. etc. May be rare, but who doesn't like to feel secure?. I am posting this to help those who wish to keep their phone secure no matter what hands it may get into.

I've researched for many hours and seen claims of a fresh install not being enough. I think that is tru

I personally (Recommend):
-Put a long, extremely complex password on my device (making the encryption of the files that much better) that i plan on selling or donating.
-Connect your phone via the 8-pin lighting cable that Apple provides.
-Open up iTunes and make sure its updated to the most current software. If your unsure what version it will normally ask you to update once you open. For those who don't have iTunes latest software can download here: https://www.apple.com/itunes/download/

-Put the phone in DFU or Recovery mode. Can be shown here: http://www.any-data-recovery.com/tips/iphone/enter-exit-iphone-dfu-mode-recovery -mode-safe-mode.html
-Finally once your phone enters which ever mode you choose, it will come up as a pop up asking you to update or restore (https://support.apple.com/library/content/dam/edam/applecare/images/en_US/mac_ap ps/itunes/itunes-recovery-mode-iphone.png)
-Wait a few minutes to let the process complete and your phone should be restored with a fresh install of iOS.
-You are now done, and your files that you have on your device have been encrypted and now overwritten.
I did my best to make this as detailed and helpful as possible for all those security conscience people out there, or just people who wish to have their personal data a lot safer.
Thanks for the view. Have a good rest of your day.
-Roman

iPhone 6s Plus, iOS 10.2, null

Posted on Feb 3, 2017 4:53 PM

Reply

Answer 1

Feb 3, 2017 10:22 PM in response to CameAsARoman

Follow the instructions in this article:

What to do before selling or giving away your iPhone, iPad, or iPod touch - Apple Support

Common misconception that people think to keep their device secure before selling:
-Installing a fresh install of iOS onto the device...
-Think no one will have the tools to retrieve my data...
-Deleting everything is a permanent fix..
-No one will target me...

-------------------------------------------------------------------------------- ------------------------------------------------------------------------

++Your current data can still be recovered irregardless of a fresh install if not encrypted and overwritten(steps below)

++They have recovery software all over the place to retrieve things as simple as photos and text messages from your phone

++Deleting it puts it on the storage until it is overwritten, thus still being able to recover unless new data is written over it

++Thievery can happen when you least expect it.

-------------------------------------------------------------------------------- ------------------------------------------------------------------------

This was suppost to be in the final post but it will not let me edit it and post so ill post here.

All data on your phone is encrypted. The FBI had to pay on the order of million dollars to get anything off an older, less secure version of iOS. So, your "misconceptions" are in fact, all true.

Reply

Answer 2

CameAsARoman Author

Level 1

22 points

Feb 3, 2017 5:21 PM in response to CameAsARoman

It keeps saying that i am not allowed to create or update this content so ill post this here...

-------------------------------------------------------------------------------- ------------------------------------------------------------------------

Common misconception that people think to keep their device secure before selling:
-Installing a fresh install of iOS onto the device...
-Think no one will have the tools to retrieve my data...
-Deleting everything is a permanent fix..
-No one will target me...

-------------------------------------------------------------------------------- ------------------------------------------------------------------------

++Your current data can still be recovered irregardless of a fresh install if not encrypted and overwritten(steps below)

++They have recovery software all over the place to retrieve things as simple as photos and text messages from your phone

++Deleting it puts it on the storage until it is overwritten, thus still being able to recover unless new data is written over it

++Thievery can happen when you least expect it.

-------------------------------------------------------------------------------- ------------------------------------------------------------------------

This was suppost to be in the final post but it will not let me edit it and post so ill post here.

Reply

Answer 3

CameAsARoman Author

Level 1

22 points

Feb 3, 2017 5:48 PM in response to IdrisSeabright

Yep. I followed that case update after update as i heard it and read about it lol. I'm glad Apple never gave in. That is why i came up with my own method. My issue at first was "why can't i do a fresh install while my phone was encrypted with a password?" because it would tell you to unlock it and stuff in order to proceed with connection to iTunes. Thats why i came up with this workaround.

Reply

Answer 4

CameAsARoman Author

Level 1

22 points

Feb 3, 2017 5:54 PM in response to IdrisSeabright

Its a simple procedure. I got it from my same concept of donating/selling of old computer HDD's. Encrypt with Veracrypt then use DBAN to clean the whole drive, and ta-da. To bad they don't have a DBAN for iPhones or a program like CCleaner that has built in overwrite methods.

Reply

Answer 5

Feb 3, 2017 6:12 PM in response to CameAsARoman

You clearly don't understand how iOS encryption works. All content is encrypted by the hardware, using a combination key of the hardware ID, your passcode and your Apple ID, and the key is stored in a secure enclave. When you use Reset to Erase All Content and Settings the encryption key is destroyed. There is no known way to recover the contents without that key.

As you do not have access to the file system in iOS there is no way you can use any other "disk" encryption method.

Reply

Answer 6

Feb 4, 2017 2:02 PM in response to CameAsARoman

Thanks! helped me. Easy to follow steps.

On a side note, im not sure why your getting any hate. Your simply trying to help people. Your method is for more privacy conscience people such as myself. Just ignore them. There will always be people who try to bring you down. Keep it up man and very good thinking by the way!

PS: boxing gloves :,)😁

Reply

Answer 7

CameAsARoman Author

Level 1

22 points

Feb 4, 2017 2:15 PM in response to Samsungishorrible

Hahaha Thanks! It is a process that requires people not to be lazy and do a little work, but in the end you'll be secure. I'm not worrying about these guys lol. Dealt with people like that all my life. However i do want the good laugh. People like that will reply to just about anything you send and won't stop till they get the last word in.

Reply

Answer 8

LACAllen

Level 8

43,584 points

Feb 4, 2017 3:15 PM in response to CameAsARoman

I am confused.

The long password you advocate will not make for "better" encryption. Encrypted is encrypted and is not enhanced by a more complex password. Plus, all content, including any traces of "your" data is completely removed by the iTunes restore.

If your point is that merely "erasing all content and settings" is not as secure as restoring with iTunes, so be it.

I don't believe it is, but there is no harm to being cautious. I believe the only downside to using iTunes is the length of time that may take over a simple "erase all content and settings".

What are the sources for your thought that a fresh install may not be enough?

Reply

Answer 9

Feb 4, 2017 2:33 PM in response to CameAsARoman

Definitely gave me a good laugh lol. I got help, A good laugh, and a good talk all in the same place! Have a good one!

Reply