Buying ex-corporate laptops on eBay: the BIOS lock a wipe won't clear

The password isn't on the drive, so wiping the drive doesn't touch it

Most of the cheap business laptops on eBay came out of a company. A ThinkPad T-series, a Dell Latitude, an HP EliteBook: these are fleet machines, bought by the hundred, leased for three or four years and then sold off in bulk to refurbishers who list them individually. The reason they're good value is the same reason they carry a risk nothing else on eBay carries. They were configured by an IT department that had no expectation the machine would ever leave the company, and some of that configuration doesn't come off.

The thing that bites is a password on the BIOS. That's the small piece of software built into the machine itself, separate from Windows, that runs the moment you press the power button and controls how the computer starts up. An IT department can lock it with what Lenovo calls a supervisor password, and that password sits in a chip on the motherboard, not on the storage drive, so every instinct you have about a used computer fails here. Reinstalling Windows doesn't clear it. Formatting the drive doesn't clear it. Replacing the drive entirely doesn't clear it, because the password was never on the drive you replaced. Pulling the coin cell battery, which clears a BIOS password on plenty of consumer desktops, doesn't clear it either on a machine built this way.

Lenovo says so in its own user guide, in the section on forgotten passwords:

If you forget your supervisor password, there is no service procedure to remove the password. You have to contact a Lenovo authorized service provider to have the system board replaced. A fee will be charged for parts and service.

Replacing the system board on a laptop you paid $75 for is not a repair anyone performs. A locked machine is a machine with a permanently frozen BIOS, and the honest way to read that Lenovo paragraph is that the manufacturer considers the problem unsolvable by any means short of new hardware.

Four passwords, and only one of them is the expensive one

The phrase "BIOS locked" gets used in listings for four different conditions with four different outcomes, and a seller using it loosely may not know which one they have. On a ThinkPad they separate cleanly:

• Power-on password. Blocks the machine from booting at all. If a supervisor password was also set and is known, the supervisor password removes it from inside the BIOS menu. If no supervisor password exists, a Lenovo authorized service provider can remove it. Recoverable, at a cost.
• System management password. Controls a subset of BIOS settings. Same recovery path as the power-on password, and same answer: the supervisor password clears it, or a service provider does.
• NVMe or hard disk password. Locks the storage drive itself. Lenovo states plainly that it cannot reset this password or recover the data, and the remedy is replacing the drive, at your cost. Annoying but survivable, because a drive is a cheap part and on many models a user-replaceable one.
• Supervisor password. No service procedure exists. System board replacement is the only documented answer. This is the expensive one, and it's the one that survives everything you'd normally do to a secondhand computer.

A listing that says "BIOS password, sold for parts" is being honest with you. A listing that says nothing at all is the one to think about, because the seller may have never pressed F1 to find out.

The reassuring words in a listing don't rule this out

Here's what makes a locked laptop different from most secondhand risks: the machine works. A ThinkPad with a supervisor password set will power on, run through its splash screen, boot into Windows and sit at a desktop looking exactly like a machine nobody ever locked. Every phrase a careful buyer looks for is still true.

"Tested, powers on, boots to desktop" is compatible with a locked BIOS. So is "fully functional". So is a photograph of the machine running. A seller who bought a pallet of ex-lease machines, powered each one on to confirm it works, and listed it in good faith has done a reasonable check that cannot detect this problem, because the check never enters the BIOS menu. The condition field a seller picked doesn't help either, since a locked machine genuinely is used and fully operational by eBay's definition of the word.

What does help, before you buy:

• Ask the seller to press F1 at the logo screen and tell you what happens. A clean machine opens the BIOS menu. A locked one asks for a password. This is a ten second check and the answer is unambiguous, which makes a vague reply informative in itself.
• Ask for a photo of the BIOS main page, which shows the machine's own reporting of its model, serial and asset information. A seller who can produce one has been inside the menu, which is the thing you're actually asking about.
• Look for an asset tag string or a company logo on the boot splash. Corporate deployment tools write these into the BIOS, and their presence tells you the machine left a managed fleet without being reset by whoever decommissioned it.
• Treat "no OS" and "no operating system installed" as neutral rather than as a tell. Refurbishers wipe drives as routine practice for data protection, and a wiped drive says nothing either way about the BIOS.
• Search the seller's other listings for the same model. Somebody selling nine identical T480s got them from one source, which means whatever was true of the batch is probably true of yours.

None of these is proof. A seller can answer confidently and be wrong. They move a blind purchase closer to an informed one, which is the most any pre-purchase check does on eBay. The general listing red flags still apply on top of these.

What buyer protection covers, and the clock you're actually racing

eBay's Money Back Guarantee covers an item that doesn't match its listing, a category eBay calls not as described. An undisclosed BIOS lock is a strong version of that claim, because a machine whose BIOS is permanently inaccessible is materially different from a working laptop, whatever the seller believed when they listed it. The guarantee in full runs 30 calendar days from delivery, or the seller's own stated return window if that's longer.

The problem is the shape of the discovery. You don't hit a supervisor password on day one, because nothing you do on day one requires the BIOS menu. You hit it the first time you want to change the boot order, enable virtualization, turn secure boot off to install Linux, add a second drive, or reset a machine that started misbehaving. For a laptop bought as a spare or a project, that moment can land four months after delivery, well outside every window you had.

So do the check yourself, in the first week, before you've done anything else with it. Restart, press F1 or F2 at the logo, and see whether the menu opens or asks you for a password. That single test converts a problem you'd find in month four into a return you can still file. It's the highest-value ten seconds you'll spend on a used laptop, and almost nobody spends them.

Where FindersKeepers fits, and what it can't tell you

FindersKeepers compares a listing's asking price against similar active listings on eBay US, and needs at least five comparable listings before it labels anything. A HOT DEAL means 20 percent or more below the average of that set, a Good Price is 10 to 20 percent below, and it's a plain average of asking prices, never sold prices, because we hold no sold-price data. The general limits of a price check without sold data apply here as written.

Business laptops make that limitation unusually sharp. Search a model number and you get a page of near-identical machines: same chassis, same generation, photographed against the same grey backdrop by the same kind of refurbisher. A price comparison sees a tight cluster of asking prices and one listing well below it, and reports exactly that. What it cannot see is the reason. In this category, the cheapest listing on the page is sometimes cheapest because the seller is clearing stock, and sometimes cheapest because the seller knows the BIOS is locked and priced accordingly without saying so.

A deal score can tell you a listing sits well under the rest of the page. It can't tell you why, and in a category where the defect is invisible in every photograph and compatible with every reassuring phrase, why is doing most of the work.

What a saved search does well here is coverage. Good configurations of a specific model list and sell within hours, and checking eBay once in the evening misses whatever appeared and went in between. We re-run every saved search once an hour and email what's new, eBay US only, free, with no account fee and no eBay login needed to set one up or to search without an account at all.

Use the score to find the listing worth a closer look. Use the F1 key to decide whether it's the machine it claims to be.