I once helped a friend move, and we tossed an old printer and router into a recycling bin without a second thought. A week later, I started wondering: what personal data stays on a printer or router after you toss it?
That question turned into a rabbit hole. Printers and routers both contain non-volatile memory that survives factory resets in some cases. They hold network credentials, browsing logs, contact lists, and in some printers, full copies of recent documents.
This guide walks through every category of data these devices keep, the real security risks involved, and the exact steps to wipe both a printer and a router before recycling, selling, or tossing them in 2026.
Table of Contents
What Personal Data Lives on Your Printer?
Yes, modern printers store personal information. Network printers, all-in-ones, and anything with Wi-Fi or scan-to-email keeps more data than most people realize.
The reason is simple: these are now embedded computers. They run firmware, store configuration files, and often contain flash memory or a hard drive that retains data even when powered off.
Network Logs and Configuration Data
Your printer remembers the network it joined. It stores the SSID, Wi-Fi password, IP address, subnet mask, gateway, and DNS settings. Anyone with physical access can read this data directly off the flash chip.
If you used the printer in an office, it likely cached credentials for the corporate VPN or 802.1X authentication server. That includes username hashes and certificates.
Address Books, Scan Histories, and Cached Documents
Multi-function printers store address books for scan-to-email and fax. These often include names, email addresses, phone numbers, and sometimes customer or client lists.
Scan histories are another surprise. Many office printers keep thumbnails or full scans of recent jobs in flash memory for reprint or audit purposes.
High-end laser printers have actual hard drives. Those drives can hold copies of every document the printer ever processed. In 2026, forensic recovery tools can pull months of cached print jobs from these drives.
Authentication Credentials and Wi-Fi Passwords
Your printer holds the Wi-Fi password in plaintext or weakly encrypted form. It also remembers any admin passwords used to access its web interface.
If you enabled secure printing with a PIN, that PIN may be stored alongside the user account it belongs to. Attackers who crack one account often find the credential pattern that unlocks others.
Email, SMTP, and Cloud Service Logins
Scan-to-email requires SMTP credentials. These get saved in the printer’s memory so it can send mail without your computer being on. The same applies to cloud scan destinations like Google Drive, OneDrive, or Dropbox.
Reddit users in r/sysadmin report that corporate printers often store full email account logins. That includes OAuth tokens that remain valid long after the printer is gone.
Print Queue and Fax Logs
The print queue holds recent jobs. Even after you cancel a job, the file often lingers in spool memory until the printer restarts.
Fax machines and fax-enabled printers log incoming and outgoing numbers. Combined with timestamps, this creates a detailed record of who you communicated with and when.
What Personal Data Lives on Your Router
Yes, routers hold personal data, and often more than you expect. Every router keeps logs, configuration files, credentials, and a record of the devices that connected through it.
Routers run Linux or a similar embedded OS. That OS lives in non-volatile memory (NVRAM) and flash storage, both of which retain data without power.
Browsing History and DNS Query Logs
Routers log DNS queries by default in many firmware builds. That means a record of every website every device on your network tried to reach.
Some routers also store URL logs, packet headers, or full connection logs for parental controls and security features. These logs stay in flash until you clear them.
If you used VPN passthrough or DNS-based filtering, those service credentials may sit in plain config files.
MAC Addresses and IP Address Assignments
Your router’s DHCP table records every device that ever connected. Each entry includes the MAC address, hostname, and assigned IP. This list alone reveals what phones, laptops, smart TVs, and IoT gadgets you own.
MAC addresses can fingerprint your hardware even when you change networks. A stranger reading your old router can build a profile of your household.
ISP Credentials and VPN Keys
Most routers store your ISP login in the WAN configuration. On PPPoE connections, this is a username and password that grants network access. On cable modems, the MAC address and certs used for provisioning live in flash.
If you configured a VPN client on the router, the private keys are saved there too. Pre-shared keys for IPsec and OpenVPN credentials are gold for any attacker.
Firewall Logs and Connected Device Profiles
Firewall and security logs record blocked connections, intrusion attempts, and port scans. These logs show what attackers targeted your network and when.
Parental control profiles, guest networks, and QoS rules store device-specific data. They also hold usernames and passwords for any remote management service you enabled.
Wi-Fi Passwords and Admin Panel Access
The router holds your Wi-Fi password and every password you typed into its admin panel. WPA2-PSK keys, RADIUS secrets, and admin passwords all sit in config files.
Remote management passwords are the worst. If you set up cloud access through the vendor app, those tokens are still valid when the router changes hands.
Why This Data Matters: Real Security Risks
This data matters because it has been weaponized in real breaches. Discarded network gear is a known attack vector for both home users and enterprises.
The ESET Research Study
ESET researchers purchased 18 used routers from secondhand marketplaces. They found that only 5 had been properly wiped. The remaining 13 still contained sensitive data.
That data included corporate application logins, network credentials, encryption keys, and VPN configuration. Some routers belonged to businesses. Some belonged to home users who thought a factory reset was enough.
The 72% failure rate is striking. It tells us most people skip proper data sanitization before disposal.
Identity Theft and Account Takeover
A discarded printer can leak scan-to-email credentials. An attacker who recovers those credentials can send phishing emails that look like they came from you. They reach your entire contact list.
Router credentials enable network impersonation. An attacker who knows your old SSID and Wi-Fi password can stand up a fake access point with the same name. Devices that auto-connect will hand over their traffic.
Corporate Espionage and Compliance Failures
For businesses, the stakes are higher. Corporate routers hold VPN keys that grant access to internal networks. A recovered key becomes a foothold for ransomware reconnaissance or full network compromise.
HIPAA, GDPR, and PCI-DSS frameworks require secure disposal of devices that handle regulated data. Tossing a printer or router in the trash can trigger compliance violations and fines.
How to Wipe a Printer and Router Before Disposal?
Proper data sanitization requires more than a factory reset. You need to clear the storage, not just the configuration. Here is the exact process for both devices.
How to Wipe a Printer: Step-by-Step
Step 1: Print or save anything you need first. After a wipe, you cannot recover queued jobs or stored settings.
Step 2: Remove any external storage. Some printers have USB ports or memory card slots. Pull any drives you inserted.
Step 3: Access the printer’s web interface. Type its IP address into a browser. Log in with admin credentials.
Step 4: Clear the address book. Look under Settings, Contacts, or Address Book. Delete every entry.
Step 5: Clear scan-to-email and cloud accounts. Under Email or Cloud settings, remove all linked accounts.
Step 6: Run the disk wipe function. Most office printers have a “Disk Wipe” or “Secure Erase” option in the security menu. Run it.
Step 7: Perform a factory reset. Restore the printer to factory defaults through the menu. This clears the NVRAM config.
Step 8: Power down and unplug for 60 seconds. Some residual charge can keep volatile memory alive briefly.
Brand-Specific Reset Guidance
HP printers: Hold the power button while pressing Cancel twice. Then access the Embedded Web Server and run Secure Erase from the Security tab.
Epson printers: Press the home button, go to Setup, then Restore Default Settings. Select “All” to wipe network and user data.
Canon printers: Go to Setup, Device Settings, then Reset Settings. Choose “Reset all” to clear network credentials and contacts.
Brother printers: Press Settings, then All Settings, then Machine Info, then Reset Menu. Choose “Factory Reset” for full sanitization.
How to Wipe a Router: Step-by-Step
Step 1: Back up your settings if you want to reuse the router’s configuration elsewhere. Save the backup file somewhere safe.
Step 2: Log into the admin panel. Open a browser and go to 192.168.0.1 or 192.168.1.1. Use admin credentials.
Step 3: Disable remote management. Turn off any cloud access or remote admin features before wiping.
Step 4: Perform a factory reset through the admin panel. Look under Administration, Management, or System. Choose Factory Defaults.
Step 5: Hard reset the router. With the router powered on, hold the recessed reset button on the back for 10 to 30 seconds. The router will reboot to defaults.
Step 6: Clear logs manually. Before resetting, navigate to System Logs and delete them. Some routers keep logs in a separate partition.
Step 7: Verify the wipe. After reset, log in with default credentials. Check that the Wi-Fi name has reverted to factory default and no old SSIDs are listed.
Brand-Specific Reset Guidance
Netgear routers: Visit routerlogin.net. Go to Advanced, Administration, then Backup Settings. Choose “Erase” to wipe configuration.
TP-Link routers: Go to 192.168.0.1. Navigate to System Tools, then Factory Defaults. Click Restore.
Asus routers: Visit router.asus.com. Go to Administration, then Restore/Save/Upload Setting. Click Initialize.
Disposal Best Practices for Maximum Security
Factory reset alone is not enough for high-risk devices. Use these best practices when the data on the device is sensitive.
When Factory Reset Is Not Enough
Factory reset clears configuration but may not erase flash storage completely. On devices with hard drives, the data often persists in unallocated space.
For sensitive environments, use a secure erase tool. Tools like DBAN or manufacturer-specific disk wipe utilities overwrite storage multiple times, making recovery nearly impossible.
Physical Destruction Methods
Drill through hard drives. Four holes through the platter area destroys most data recovery attempts.
For printers with embedded storage, locate the flash chip or hard drive. Smash it with a hammer or degauss it with a strong magnet.
Circuit boards on routers can be shredded by a heavy-duty paper shredder. Some e-waste centers will do this for you.
Certified E-Waste Recyclers
Look for recyclers certified under R2 (Responsible Recycling) or e-Stewards. These standards require documented data sanitization.
Ask the recycler for a certificate of destruction. Reputable services provide paperwork proving your device was wiped or destroyed before recycling.
Avoid uncertified recyclers who promise convenience without documentation. The ESET study showed that even professional disposal sometimes fails.
Frequently Asked Questions
Is there personal information stored on a printer?
Yes. Modern printers store Wi-Fi passwords, network configuration, address books, scan histories, SMTP credentials, and in some models full document copies on internal hard drives.
Do printers keep a history of what you print?
Yes. Print queues retain recent jobs in spool memory. Office printers with hard drives often cache full copies of printed documents for reprint or audit purposes.
How long do routers store browsing history?
Routers store browsing history until you clear it or run a factory reset. Many models keep DNS query logs and connection records indefinitely in flash memory.
Do routers store MAC addresses?
Yes. The DHCP table on every router records the MAC address, hostname, and IP of every device that ever connected to the network.
How to wipe a router before selling?
Log into the admin panel, clear logs, then perform a factory reset through the menu. Press and hold the recessed reset button for 10 to 30 seconds as a second confirmation.
Does factory reset clear router history?
A factory reset clears most configuration data, but some routers retain logs in separate partitions. For sensitive data, run a secure erase tool or physically destroy the flash chip.
Final Thoughts on Data Sanitization
The question of what personal data stays on a printer or router after you toss it has a clear answer: more than you think. Both devices retain network credentials, configuration data, and records of activity that survive casual disposal.
Take 15 minutes before you recycle, sell, or donate either device. Clear logs, remove accounts, run a factory reset, and for sensitive setups, physically destroy the storage.
I learned this the hard way when I almost recycled that old printer without a second thought. You do not have to. A proper data sanitization process takes less time than recovering from identity theft.