Remote wipe
Also known as: remote wipe, remote erase, selective wipe, device wipe
Remote wipe is the ability to erase data on a device from a distance, used when a phone or laptop is lost or stolen, or when an employee leaves.
Through device management, a business can wipe the entire device or just the company data, ensuring sensitive information doesn't end up in the wrong hands.
Remote wipe, explained at three levels
At home
Remote wipe means erasing a device's data from afar. If a work phone or laptop is lost or stolen, the business can remotely delete the sensitive information on it, so whoever finds it can't get to your company's data.
At work
For a business, remote wipe is a safety net for lost or stolen devices and for offboarding. Through device management, IT can erase company data remotely -- either the whole device or just the work portion -- keeping sensitive information out of the wrong hands.
At home
Remote wipe is a feature of device management (MDM). A full wipe erases everything and factory-resets the device; a selective wipe removes only company data and accounts, leaving personal content intact -- important for personal devices used for work. It requires the device to be enrolled beforehand.
At work
Remote wipe depends on prior enrollment in MDM, so it must be set up before a device goes missing. For BYOD, selective wipe protects company data without erasing employees' personal photos or apps. It's a key control for both device loss and clean offboarding of departing staff.
At home
Wipe effectiveness depends on the device being reachable (online) to receive the command, and on encryption -- wiping the encryption key instantly renders data unrecoverable. Some platforms queue the wipe to execute when the device next connects, and management consoles log wipe status for verification.
At work
Enterprise remote wipe is part of endpoint management with encryption (crypto-erase), selective vs. full wipe options, and audit logging. It integrates with offboarding workflows and conditional access. Limitations -- offline devices, timing, and platform differences -- mean it complements, rather than replaces, encryption and access controls as layered protection.
Real-world examples
At home
When Marcus's laptop was stolen from his car, it held client files -- but it was encrypted and enrolled in management. He triggered a remote wipe; the next time the laptop connected to the internet, its data was erased, and the encryption meant nothing was recoverable in the meantime.
At work
Nadia's firm uses remote wipe as standard for offboarding. When staff leave, IT selectively wipes company data and accounts from their devices -- including personal phones under BYOD -- removing firm data cleanly while leaving employees' personal content untouched, with the action logged for compliance.
Common confusions
- You can remote wipe any lost device — Remote wipe requires the device to have been enrolled in management beforehand and to be reachable online. It must be set up before the device is lost, not after.
- Remote wipe always erases personal data too — Selective wipe removes only company data and accounts, leaving personal content intact -- essential for BYOD. Full wipe is reserved for company-owned devices or serious cases.
- If I wipe a stolen device, the data was safe the whole time — A thief could access data before the wipe reaches an offline device. Encryption is the essential companion control, making data unreadable regardless of when the wipe lands.
For analysts
Remote wipe only works if devices are enrolled and encrypted before they go missing -- set this up proactively. Combined with encryption (which protects data until the wipe lands), it turns a lost device from a breach into a manageable event, and cleans company data off departing staff's devices.
History & origin
As mobile devices carried more sensitive business data, the risk of loss or theft grew serious. Remote wipe capabilities were built into mobile management platforms so IT could erase data on a missing device before it could be accessed. Selective wipe -- removing only company data and leaving personal content -- later became important for BYOD, balancing security with employee privacy.