How to Securely Erase and Reset a MacBook with a T2 Security Chip
In this article, we have explained how to wipe a MacBook equipped with an Apple T2 Security Chip safely and effectively. Intel-based MacBook models released between 2018 and 2020 include this chip to provide advanced security features such as hardware encryption, secure boot, and encrypted storage. However, these security technologies also affect how the devices internal drive can be erased, making traditional multi-pass overwriting methods unsuitable. Whether you are planning to sell, exchange, donate, or give away your MacBook, this guide will walk you through the available erasure methods to remove your personal data and prepare the device for its next owner.
Understanding the Architecture of Apple’s T2 Security Chip
Before erasing your MacBook’s internal storage, it is helpful to understand how the Apple T2 Security Chip manages data protection. This chip is included in several Intel-based MacBook models, including:
- MacBook Pro (13-inch, 2020, with four Thunderbolt 3 ports)
- MacBook Pro (13-inch, 2019 and 2020)
- MacBook Pro (15-inch and 16-inch, 2018–2019)
- MacBook Air (Retina, 13-inch, 2018–2020)
The T2 Security Chip combines several security functions, including storage encryption and Secure Enclave technology. It manages the encryption of data stored on the internal SSD, using hardware-based encryption keys to protect information.
This security architecture also changes how data erasure works. Unlike traditional hard drives, encrypted SSDs do not necessarily require repeated overwriting to make previously stored information inaccessible. Removing the relevant encryption keys can make the encrypted data unreadable.
For this reason, conventional multi-pass wiping methods, such as DoD 5220.22-M or Gutmann 35-pass overwriting, are generally unsuitable for T2-equipped MacBooks. Disk Utility may not display these secure overwrite options because the internal storage uses hardware encryption.
Understanding this difference is important before choosing an erasure method, as the appropriate approach for a T2-equipped MacBook differs from that used with older storage devices.
Step 1: Complete the Essential Preparations Before Wiping Your MacBook
Before erasing your MacBook, take a few precautions to protect your important files and disconnect the device from your personal accounts. Completing these preparations will help prevent data loss and make the handover process easier.
Follow these steps before proceeding:
1. Back Up Your Important Data
Save your important documents, photos, videos, and other files using Time Machine, an external hard drive, or a trusted cloud storage service. Verify that your backup is accessible before erasing the device.
2. Sign Out of Your Apple Account
- Open System Settings or System Preferences.
- Select your Apple Account or Apple ID.
- Navigate to the Overview section.
- Click Sign Out and follow the onscreen instructions.
- Turn off Find My Mac if prompted.
3. Sign Out of iMessage and FaceTime
Open the Messages application and navigate to Messages > Settings > iMessage. Select Sign Out to disconnect your account. Similarly, open FaceTime settings and sign out.
4. Disconnect Bluetooth Accessories
If you plan to use your Bluetooth accessories with another computer, disconnect or unpair devices such as wireless keyboards, headphones, and mice.
5. Reset NVRAM (If Necessary)
For Intel-based MacBooks, you can reset NVRAM by shutting down the device, turning it on, and immediately holding Option + Command (⌘) + P + R for approximately 20 seconds.
This step is optional and is not required for securely erasing a T2-equipped MacBook.
Method 1: Erase All Content and Settings (macOS Monterey or Later)
If your MacBook has a T2 Security Chip and runs macOS Monterey or a newer compatible version, you can use Apple’s built-in Erase All Content and Settings feature. This utility simplifies the factory reset process by removing personal information, installed applications, and system settings without requiring you to manually format the internal SSD.
Steps to Erase Your MacBook
- Click the Apple menu in the top-left corner of your screen.
- Open System Preferences on macOS Monterey or System Settings on newer versions.
- For macOS Monterey, open System Preferences and select Erase All Content and Settings from the menu bar.
- For macOS Ventura and later, navigate to General > Transfer or Reset > Erase All Content and Settings.
- Enter your administrator password when prompted.
- Review the information displayed by Erase Assistant, including the accounts, settings, and data scheduled for removal.
- Click Continue and provide your Apple Account password if requested.
- Confirm the final action to begin erasing your MacBook.
Once the process finishes, your MacBook will restart and display the initial setup screen. The built-in erasure process removes the relevant encryption keys and personal data, making the previous encrypted information inaccessible.
If you are transferring ownership, leave the Mac at the setup screen rather than configuring it again.
Method 2: Manually Erase Your MacBook Through macOS Recovery
If your T2-equipped MacBook runs an older macOS version, such as Big Sur, or you cannot access the regular desktop, you may need to use macOS Recovery to erase the internal storage.
Follow These Instructions
Step 1. Shut Down Your MacBook
Save any available work and completely turn off your MacBook before starting the recovery process.
Step 2. Enter macOS Recovery
Turn on your MacBook and immediately press and hold Option (⌥) + Command (⌘) + R until the spinning globe appears. This starts Internet Recovery.
Step 3. Connect to the Internet
Select your Wi-Fi network and enter the required password if prompted. Wait for the macOS Utilities window to appear.
Step 4. Open Disk Utility
Select Disk Utility from the macOS Utilities window and click Continue.
Step 5. Display All Storage Devices
From the Disk Utility menu bar, select View > Show All Devices. This allows you to see the internal storage device and its associated volumes.
Step 6. Select the Internal SSD
Choose the appropriate internal storage device or Macintosh HD volume from the sidebar. Be careful not to select an external backup drive accidentally.
Step 7. Erase the Mac Storage
Click the Erase button and configure the available options as appropriate:
- Name: Macintosh HD
- Format: APFS
- Scheme: GUID Partition Map (when erasing the physical device and the option is available)
If Disk Utility displays an Erase Volume Group option, use it when appropriate to remove the related macOS volumes together.
Step 8. Reinstall macOS
After completing the erasure, close Disk Utility and select Reinstall macOS if you want to prepare the MacBook for a fresh installation.
Follow the onscreen instructions to complete the installation. If you are handing over the MacBook, leave it at the initial setup screen.
Note: Recovery and Disk Utility options can vary depending on the macOS version and storage configuration. For T2-equipped Macs, follow Apple’s recommended erasure procedure rather than relying on conventional multi-pass overwriting.
Wipe a MacBook Using an Alternative Data Erasure Solution
Although Apple’s built-in erasure methods are suitable for preparing a T2-equipped MacBook for resale or transfer, some organizations may have additional data sanitization requirements. For example, businesses handling confidential information may need documented erasure procedures for external storage devices or secondary drives.
Traditional multi-pass wiping standards, such as DoD 5220.22-M and NATO, are not directly applicable to the encrypted internal SSD in a T2-equipped MacBook. The encryption-based erasure process is the appropriate approach for that storage.
For compatible external drives and other supported storage devices, users looking for additional data-wiping options can consider CubexSoft Data Wipe Software for Mac & Windows. Before using any third-party utility, verify that it supports your particular storage device and erasure requirements.
Step-by-Step Guide to Using the Data Wiping Tool
If you want to remove selected files or folders from a supported storage device, CubexSoft Data Eraser Software for Mac & Windows provides a straightforward interface. Follow these steps to perform the erasure process.
- Download the software from the official CubexSoft website and install it on your Mac. Once the installation is complete, open the application.
- Choose the Add File(s) or Add Folder(s) option to browse your Mac and select the data you want to erase. You can add individual files or entire folders according to your requirements.
- Choose an available data-wiping algorithm based on your requirements. If the application provides filtering options, configure them to identify the specific data you want to remove. Review your selections before clicking the Wipe button.
Once the wiping operation begins, use the Live Data Erasure Report to monitor its progress. After completion, review the available report to check the operation status and maintain a record of the erasure.
Note: Use third-party overwriting tools only with supported storage devices and volumes. Do not use multi-pass overwriting as a substitute for Apple’s recommended erasure procedure on a T2-encrypted internal SSD.
Final Thoughts
In this article, we explained different ways to wipe a MacBook equipped with an Apple T2 Security Chip safely and effectively. Since these MacBooks use hardware-based encryption, the traditional multi-pass overwriting approach is not suitable for their built-in SSDs. You can use Apple’s Erase All Content and Settings feature or macOS Recovery to remove personal information and prepare your device for a fresh start. For additional data-wiping requirements involving supported external drives or secondary storage devices, CubexSoft Data Erasure Software for Mac & Windows can be another option. Before selling, donating, or transferring your MacBook, always ensure that your important files are backed up and your personal information has been properly removed.
