I gave away an old laptop with its hard drive still installed. Both that laptop and my current one use the same Microsoft account and OneDrive, so I'm worried the new owner could access my account, synced files, or anything stored locally. What steps should I take to disconnect the old device and protect my data?
4 Answers
If possible, contact the recipient and ask them to erase the drive or reset the laptop to factory settings. For future handoffs, sign out of accounts, remove the device from account settings, securely wipe the drive, and use full-disk encryption so old files can’t be recovered.
The account settings should have options to remove the old computer and sign out everywhere. If the laptop doesn’t appear in the device list, changing the password and signing out all sessions is still the important part. Make sure your recovery email and phone number are up to date too.
Keep in mind that changing your password mainly protects online access. OneDrive may have downloaded copies of files onto the old hard drive, and those could still be readable if the drive wasn’t encrypted and the computer didn’t require a password. The person who received it may be able to view local files without signing in to OneDrive.
Change your Microsoft account password immediately, then enable two-factor authentication if it isn’t already turned on. Also use the account’s security settings to sign out of all active sessions and remove the old laptop from your registered devices. You’ll need to sign back in on your own devices afterward.

What should I do if the old laptop isn’t shown in my device list?