How to dispose of old computers

Step One: Inventory

Knowing how to dispose of old computers starts before anything is unplugged. A retired desktop is not just plastic and metal. Its drive holds customer records, employee files, saved credentials, and financial data that stay recoverable long after the machine is powered off. Deleting files or running a factory reset removes the index that points to that data, not the data itself. Done carelessly, disposal is how a routine refresh becomes a data breach.

Record the serial number, model, and condition of every computer before it leaves your control. Note which ones power on, which have damaged drives, and which are still enrolled in device management or locked to a user account. Confirm that files, licenses, and account access have moved to the replacement or to central storage. An export from your asset management system is usually the fastest route.

If you are still deciding whether to sell, redeploy, donate, or recycle, start with what to do with old computers, which covers that wider question. This guide assumes the decision is made and covers how to carry it out.

Step Two: Decide Wipe or Destroy

Every drive needs one of two outcomes, and the inventory tells you which. A drive that works can be wiped. The standard to follow is NIST SP 800-88, and its Purge level is the one that matters for computers leaving your control. In plain words, Purge means the data cannot be recovered even with laboratory tools, using methods such as the drive's built-in sanitize command or a cryptographic erase that destroys the encryption key. A drive that is damaged, failed, or cannot be wiped by software should be physically destroyed instead.

Wiping keeps the computer whole, which keeps its resale value. Destruction ends it. For most fleets, the answer is to wipe everything that works and destroy only what cannot be wiped.

Step Three: Sanitize and Record

Wiping a fleet yourself is slow and produces no third-party documentation, which is why most organizations have their ITAD partner sanitize the drives at intake. You do not need to wipe devices before pickup. At IT Revalue, the ITAD division of PN California, functional testing, grading, and NIST SP 800-88 wiping are done in-house at the Bellflower, California facility, and each device gets its own erasure record tied to its serial number. Drives that cannot be wiped are physically destroyed through certified downstream partners, and that destruction is recorded against the serial number too.

What you do need to do first is clear the locks. Unenroll each device from your MDM, Apple Business Manager, Google Admin, or Windows domain, and clear Apple Activation Lock, Chromebook Google accounts, and BitLocker where they apply. A locked computer cannot be resold or redeployed, and it is valued as non-functional.

Pro Tip: Treat every drive as live until you hold a record for it. "We're pretty sure those were wiped" is not a sentence you want to say to an auditor.

Step Four: Route the Hardware

Once the data is handled, each machine goes to its best outcome. Computers that power on and still have market demand are tested, graded, and resold, or redeployed inside your organization. Machines that cannot be resold whole may still hold components worth recovering, such as GPUs, RAM, CPUs, and drives. Whatever is left goes to material recovery through certified downstream recycling partners, where metals and plastics are separated and returned to use. Nothing goes to landfill, and several states ban electronics from landfills outright.

Where there is resale value, you can take a buyback offer, or use ITAD as a service, where the equipment is processed and remarketed on your behalf on a commission basis instead of being bought. Either way, logistics costs are deducted from the payout rather than invoiced, and payment is Net 30 from completion of processing.

Step Five: File the Paperwork

Close the process with records you can produce later. The two that matter most are the certificate of data destruction, which lists each serial number, the method applied, and the processing date, and the chain-of-custody document, which shows who held each device from the moment it left your building to its final outcome. Add your reconciled inventory and the disposition report showing each serial number's final outcome.

Privacy rules such as HIPAA for health data, GLBA for financial data, and FERPA for student records expect protected information to be made unrecoverable at disposal, and they expect proof. Retention periods vary by industry, so confirm them with your compliance team. IT Revalue processes under R2v3 (responsible recycling and data security) and RIOS, which is what lets the documentation stand up to scrutiny.

How to Dispose of Old Computers in a Business

For a business, the procedure is the same, with three additions. First, approvals: decide who signs off on retiring each asset, often IT and finance together, and who is authorized to release equipment on collection day. Second, scheduling: request the offer and set the collection date when the replacement hardware is ordered, so retired machines do not sit in a closet losing value and holding data. Third, scale. A single machine, or a small batch from a remote office, can ship with a prepaid label. A pallet or more is better handled with packing materials and freight arranged for you, and white glove packing is available when your team does not have the time. Multi-site retirements can run under one engagement and one chain-of-custody record. When the inventory is ready, book a collection.

Frequently Asked Questions

How do I safely dispose of old computers?

Inventory each machine by serial number, then wipe working drives to NIST SP 800-88 Purge or physically destroy drives that cannot be wiped. Send working computers to resale or reuse and the rest to material recovery, never landfill. Keep the certificate of data destruction and the chain-of-custody document as proof.

Is a factory reset enough before disposing of a computer?

No. A factory reset or reformat removes the pointers to the data, not the data itself, and recovery tools can often retrieve files afterward. A drive is only safe to release once it has been sanitized to a recognized standard, with an erasure record, or physically destroyed.

Do we need to wipe computers before they are collected?

No. Wiping is done in-house after collection, with an erasure record for each serial number. Before pickup, back up anything still needed, unenroll devices from management, and clear account locks such as Activation Lock and BitLocker.

Every step comes back to one rule: the data leaves before the hardware does, and there is a record of both. When you have a fleet to retire, request a quote and IT Revalue will handle data destruction, logistics, and documentation from your building to final disposition.