Securely Erase Hard Disk: Full Guide

Securely erasing your hard disk ensures that deleted files cannot be recovered, protecting sensitive data from identity theft or unauthorized access. This guide covers methods for both HDDs and SSDs, including built-in tools and third-party software, and explains what to do before you start.

What You’ll Need

Backup of any data you want to keep (external drive, cloud storage)
For SSDs: the manufacturer’s secure erase utility (often downloadable from their website) or a tool like Parted Magic
For HDDs: a tool like DBAN (Darik’s Boot and Nuke) or the built-in Windows “Reset this PC” feature
For macOS: built-in Disk Utility or Terminal
For Linux: built-in dd or shred commands
A USB drive (at least 4GB) if you need to boot from a live CD/USB

Step-by-Step

Back up important files. Copy anything you need to an external drive or cloud service. Double-check that the backup is readable before proceeding.
Choose your method based on drive type. For SSDs, use the ATA Secure Erase command (via manufacturer utility or Parted Magic) to reset all cells. For HDDs, you can use a full overwrite with zeros or random data, or the built-in reset feature.
For Windows 10/11: Go to Settings > Update & Security > Recovery > Reset this PC. Choose “Remove everything” and then “Change settings” to enable “Clean the drive?” (this may take several hours). If you need a more thorough wipe, use a third-party tool like DBAN.
For macOS: Restart your Mac and hold Command+R to enter Recovery Mode. Open Disk Utility, select your startup disk, click “Erase,” choose a format (APFS or Mac OS Extended), and click “Security Options.” Drag the slider to “Most Secure” for multiple overwrites, then click Erase.
For Linux: Use the shred command: sudo shred -vfz /dev/sdX (replace sdX with your drive identifier). The -z flag adds a final overwrite with zeros. Alternatively, use dd if=/dev/urandom of=/dev/sdX bs=1M for random data (slower).
For SSDs specifically: Download the manufacturer’s secure erase tool (e.g., Samsung Magician, Intel SSD Toolbox) or use Parted Magic. Boot from the USB, run the tool, and select “Secure Erase.” This triggers the drive’s built-in command to wipe all data instantly and safely.
Verify the erase. After wiping, try to recover data with a free tool like Recuva (Windows) or PhotoRec (cross-platform). If nothing is found, the erase was successful.
Reinstall the OS or dispose of the drive. If you’re keeping the drive, install your operating system fresh. If disposing, physically destroy the drive (drill through the platters or use a professional shredding service) for maximum security.

Common Mistakes

Not backing up first. Skipping this step leads to permanent data loss.
Using quick format. A quick format only removes the file system pointers, leaving data recoverable.
Using the wrong method for SSDs. Overwriting an SSD with zeros can cause unnecessary wear and may not work due to wear leveling; use ATA Secure Erase instead.
Interrupting the process. Unplugging the drive or losing power during a wipe can leave it in an inconsistent state.
Forgetting to erase external drives. If you’re selling a computer, remember to wipe any external or secondary drives too.

Tips

For HDDs, a single pass with zeros is sufficient for most purposes, but if you’re dealing with highly sensitive data, use multiple passes (e.g., 3 or 7) or random data.
For SSDs, always use the ATA Secure Erase command rather than overwriting. It’s faster and doesn’t wear the drive.
If you’re selling or donating a computer, remove the hard drive entirely and keep it, or physically destroy it if the data is extremely sensitive.
Use a live boot USB (like DBAN or Parted Magic) to wipe a drive that isn’t your main OS drive, as this avoids any OS locking issues.
Check if your drive has a hardware encryption feature (like BitLocker on Windows). If it does, you can simply delete the encryption key to make data inaccessible.

Troubleshooting

Erase process is stuck or frozen. Wait at least 30 minutes before assuming it’s stuck. If it’s still frozen, restart the computer and try again. For HDDs, check the SATA cable connection.
Drive not recognized after erase. This is normal if you’ve wiped the partition table. Reinitialize the disk using Disk Management (Windows) or Disk Utility (macOS) before reinstalling.
Secure Erase fails on SSD. Some older SSDs may not support ATA Secure Erase. Try updating the firmware, or use the manufacturer’s tool. If that fails, you may need to use a full overwrite (though less ideal).
DBAN won’t boot from USB. Ensure the USB is properly created (use Rufus or similar) and that your BIOS is set to boot from USB. Try a different USB port (USB 2.0 often works better).
Reset this PC takes too long. The “Clean the drive” option can take several hours on large drives. If you’re in a hurry, you can skip it, but data may be recoverable.

Frequently Asked Questions

Q: Is one pass of zeros enough to make data unrecoverable?
A: For modern HDDs, yes. The NSA used to recommend three passes, but current drives are dense enough that a single pass is generally sufficient. For SSDs, use Secure Erase instead.

Q: Can I securely erase just one file?
A: Yes, you can use tools like Eraser (Windows) or shred (Linux) to overwrite a specific file. However, on SSDs, wear leveling makes this less reliable; consider full-disk encryption instead.

Q: Does factory reset erase everything?
A: On phones and some computers, a factory reset may not securely erase data. On Windows, the “Reset this PC” with “Clean the drive” option does. On Android, enable “Factory reset” and then “Erase all data” (some devices have a “Secure erase” option).

Q: What’s the difference between wiping and formatting?
A: Formatting only creates a new file system, leaving the old data in place (recoverable). Wiping overwrites the actual data with zeros or random bits, making it unrecoverable.

Q: How long does a secure erase take?
A: For a 1TB HDD, a single pass with zeros can take 2-4 hours. For SSDs, Secure Erase takes seconds to minutes. The time varies based on drive speed and method.

Q: Can I securely erase a drive without booting into an OS?
A: Yes. Use a bootable USB with DBAN, Parted Magic, or a Linux live CD. This is often the most reliable method because the OS isn’t using the drive.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.

More cards in this drawer

The whole Numbers and Powers drawer →