--- title: "Complete Guide to Wiping Personal Data and Windows Hello Biometrics Before Selling a Computer" url: "https://binary.ph/2026/10/29/complete-guide-to-wiping-personal-data-and-windows-hello-biometrics-before-selling-a-computer/" author: "BinaryPH" published: "2026-10-28T20:12:28+00:00" modified: "2026-10-28T20:12:28+00:00" tags: ["Main"] --- # Complete Guide to Wiping Personal Data and Windows Hello Biometrics Before Selling a Computer When preparing to sell, donate, or retire a computer running Windows 10 or Windows 11, simply deleting user files or emptying the Recycle Bin is insufficient. Personal information, cached credentials, and biometric data can remain accessible to technical users with recovery tools. To prevent unauthorized access and safeguard privacy, computer owners must systematically remove Windows Hello credentials, clear stored tokens, and perform a full factory reset accompanied by a comprehensive drive cleaning cycle. ## Essential Preparations Prior to System Erasure Before initiating credential removal or drive wiping procedures, complete several mandatory administrative tasks to ensure a smooth transition and complete account protection: - **Back Up Critical Data:** Save all necessary personal files, photos, and documents to an external hard drive or secure cloud storage service. Once the drive cleaning process begins, data recovery becomes virtually impossible. - **Sign Out of All Accounts:** Log out of Microsoft accounts, cloud storage platforms, internet browsers, and third-party software applications holding active licenses. - **Unlink the Device Online:** Access the Microsoft account management portal on another device to officially remove the retired PC from the list of trusted hardware. - **Manage Encryption Settings:** Verify the status of BitLocker drive encryption. While modern Windows reset routines handle encrypted volumes automatically, understanding encryption state prevents unexpected locks during pre-wipe steps. ## Manual Removal of Windows Hello Biometrics and PINs Removing biometric templates and sign-in options manually before triggering a factory reset adds an essential layer of defense, ensuring user tokens are unlinked immediately. ### Removing the Windows Hello PIN Navigate to **Settings**, select **Accounts**, and click on **Sign-in options**. Locate the **PIN (Windows Hello)** entry and click the **Remove** button. If the option appears grayed out, toggle off the setting that restricts sign-in exclusively to Windows Hello for Microsoft accounts on the device. Confirm the removal by entering the Microsoft account password when prompted. ### Deleting Facial Recognition and Fingerprint Data Under the same **Sign-in options** menu, expand **Facial recognition (Windows Hello)** or **Fingerprint recognition (Windows Hello)** and select **Remove**. This action deletes the stored template data from the operating system database, effectively revoking biometric authorization for the local profile. ## Clearing Credential Manager and the Trusted Platform Module Windows stores web passwords and desktop app credentials inside Credential Manager, while encryption keys and hardware-level biometric keys often reside inside the Trusted Platform Module (TPM). To clear software credentials, search for **Credential Manager** in the Windows search bar, navigate through both Web Credentials and Windows Credentials, and remove saved entries manually. For hardware-bound keys, clearing the TPM via the system BIOS/UEFI firmware menu or the Windows Security interface ensures that embedded hardware tokens are completely reset. System administrators should exercise caution when resetting the TPM, as doing so invalidates active BitLocker volumes immediately. ## Executing a Secure Factory Reset with Drive Cleaning A factory reset with full drive sanitization overwrites disk sectors to prevent forensic file recovery. A standard reset merely marks disk space as available without destroying underlying data. ### Steps for Windows 11 Open **Settings**, navigate to **System**, and select **Recovery**. Choose **Reset PC** under the Reset this PC section. Select **Remove everything**. Next, choose between a Cloud download or Local reinstall. On the Additional settings screen, click **Change settings** and switch the **Clean data?** option to **Yes**. Confirm the settings and proceed with the reset. ### Steps for Windows 10 Open **Settings**, go to **Update & Security**, and select **Recovery**. Under Reset this PC, click **Get started**. Choose **Remove everything**, then select **Change settings**. Turn on the option to **Remove files and clean the drive**. This ensures Windows overwrites existing sectors rather than performing a simple deletion. ## Special Considerations for Solid State Drives Unlike traditional magnetic hard disk drives (HDDs), modern Solid State Drives (SSDs) utilize wear-leveling algorithms that make traditional multi-pass overwriting less effective. To achieve maximum security on an SSD, rely on full-disk encryption prior to wiping, or utilize the drive manufacturer’s native Secure Erase tool within the motherboard BIOS setup before performing the clean Windows reinstallation. > Clearing all personal sign-in options, resetting the hardware security module, and executing an overwritten drive reset guarantees that sensitive identity profiles remain fully protected when relinquishing ownership of a computer.