Before a security wipe (factory reset after malware or account takeover), back up photos, messages you still need, 2FA backup codes, and app lists—then reset from Settings → System → Reset, not from a stranger’s remote-support tool. Prefer cloud backups you control plus a quick local copy of irreplaceable files. This how-to is pre-wipe backup—not Private DNS, not Find My Device setup alone, and not the wipe steps for a phone you no longer hold.

1. What to capture before erase

  1. Photos/videos: Google Photos backup completed, or copy to a computer/SD card.
  2. 2FA: Export or write backup codes for authenticator apps; note hardware-key serials.
  3. SMS/call logs if your OEM or a trusted app still supports export (many do not—screenshot critical OTPs threads only if needed for fraud reports).
  4. WhatsApp/Signal: Use each app’s official chat backup flow before reset.
  5. Offline files: Downloads, documents, VPN profiles you still trust.
  6. App list: Screenshot Play Store library or note paid apps.
  7. SIM / eSIM: Know how to re-download eSIM from the carrier after wipe.
  8. Work profile: Ask IT before wiping a managed device.

Remote helpers who ask you to install AnyDesk before a “free malware cleanup” often steal banking sessions. Backup yourself, wipe yourself, then restore—no gift-card “verification.”

2. Backup vs wipe goals

GoalDo thisAvoid
Keep memoriesPhotos + documents off-deviceSkipping backup “to save time”
Remove malwareFactory reset after backupRestoring a full rogue APK backup image from unknown USB
Account safetyNew passwords + device review post-wipeReusing the same password the stealer already has

3. Steps: backup then security wipe

  1. Charge the phone above 50%. Connect to trusted Wi-Fi.
  2. Open Settings → Google → Backup (or System → Backup) and run backup; wait until it shows success.
  3. Confirm Google Photos and any OEM cloud backup finished.
  4. Copy irreplaceable folders to a PC or encrypted drive.
  5. Sign out of banking apps after you no longer need in-app access for dispute screenshots.
  6. Uninstall malware first if Android still allows—then proceed to wipe if infection persists.
  7. Settings → System → Reset options → Erase all data (factory reset). Confirm.
  8. After setup wizard, restore from the Google backup you created; reinstall apps from Play only.
  9. Change Google and important passwords from a clean browser if the wipe followed compromise.
  10. Re-enable Play Protect, screen lock, and Find My Device.

4. If malware blocked Settings

  1. Try Safe Mode (OEM power-menu variants differ) and uninstall the bad app, then backup and wipe.
  2. If the UI is locked, use android.com/find erase from another device when Find My Device was already on—accept that local-only files may be gone.
  3. Scan PCs that exchanged files with Norton or Bitdefender (TotalAV, McAfee, Avast on-site).

FAQ

Will Google Backup restore SMS?

Depends on Android version and OEM. Do not assume texts return—save fraud evidence first.

Is a full Titanium-style root backup safe after malware?

Risky. Prefer cloud app data + media, then clean Play reinstalls.

Should I wipe before or after changing the Google password?

If you still control a clean device, change the password first, then wipe the infected phone. If the phone is your only factor, use backup codes carefully.

Does this replace Advanced Protection?

No. Backup/wipe is incident response; APP is long-term hardening.

Avoiding how to back up an Android phone before a security wipe does not require paid antivirus. Careful habits and official support paths are a valid buy-nothing stack. If you want multi-device paid protection later, use only these on-site paid links: TotalAV (paid link), Norton (paid link), Bitdefender (paid link), McAfee (paid link), Avast (paid link).