Independent testing. We may earn a commission when you buy through links on this site. Learn more

How To Tell Whether a Recovery Actually Worked

Recovery software reports success far more readily than it delivers it. Here is how to verify what you got back before you delete the source.

Recovery worked deserves a clear, practical explanation. Verify data recovery deserves a clear, practical explanation. The scan finished, the software said it recovered 14,382 files, and there is a folder full of them on your desktop. That number is not a result. It is a count of things the tool wrote to disk, and a meaningful share of them may be truncated, mis-typed or full of zeroes. Verification is the step almost everyone skips, and it is the step that decides whether you actually got your data back.

The short answer. Open a sample of every file type before you delete anything from the source. Check file sizes for suspicious zeroes, open the largest and the oldest files, and confirm that anything with a container format — video, databases, archives — plays or opens to the end rather than just starting.

Recovery worked: Verify data recovery: The checks that catch most problems

  • Sort by size and look at the bottom. A pile of 0 KB files means the directory entries survived and the data did not.
  • Open the largest file you recovered. Large files are the most fragmented and therefore the most likely to be stitched together wrongly.
  • Play video all the way to the end, not just the first few seconds. A truncated MP4 often opens and plays the opening perfectly.
  • Test archives. Zip and 7z both have a Test function that verifies every entry against its checksum in seconds.
  • Open documents, do not just look at thumbnails. Thumbnails are cached previews and can render for a file that no longer opens.

Why files come back broken

Recovery software finds files two ways. If the filesystem records survived, it reads where the file lived and reassembles it accurately, filename included. If they did not, it falls back to signature scanning — recognising a JPEG or a PDF by its header bytes and reading forward until it finds the next one. Signature scanning cannot know about fragmentation, so a file split across the disk comes back as its first fragment plus whatever happened to sit after it.

This is why recovered files with generic names like file0001.jpg are much less trustworthy than ones that came back with their original names and folder paths. The name tells you which method found it.

Set up a simple verification pass

File typeFast checkWhat failure looks like
JPEG / HEICOpen in a viewer, full sizeGrey band across the lower half
MP4 / MOVSkip to the last 10 secondsRefuses to seek, or ends early
PDFOpen, jump to the final pagePage count wrong, or will not open
DOCX / XLSXOpen in Office or LibreOffice"Unreadable content" prompt
ZIP / 7ZBuilt-in Test archiveCRC failure on specific entries
Raw photo (CR3, NEF, ARW)Open in the editor, not ExplorerPreview renders, raw data will not load
Databases (SQLite, PST)Open with the owning applicationIntegrity check fails
Ten minutes of sampling saves finding out in six months.

Do not delete the source yet

Keep the original drive untouched until verification is complete and the recovered data has been backed up somewhere else. If the first pass produced broken files, a second pass with different settings — or different software — often does better, but only if the source is still in the state it was in. Reformatting the source because the recovery “worked” is a mistake people make once.

If a lot came back broken

Broken results usually mean either the scan fell back to signature mode, or something had already overwritten parts of the data. Neither is fixed by running the same scan again. What sometimes helps is a different tool, because signature libraries and fragmentation heuristics genuinely differ between products — a file one tool truncates, another reconstructs.

When the first attempt came back broken

EaseUS Data Recovery Wizard previews actual file contents inside the scan results, before recovery, so you can check whether a file is intact without spending an hour writing out thousands of broken ones first. That preview step is the difference between a second attempt and a second wasted attempt.

Then back it up properly

Recovered data is data you have already nearly lost once. The moment it is verified, put it somewhere with a second copy — a different physical drive at minimum, ideally one of those copies off-site or in cloud storage. The recovery is not finished when the files are on your desktop. It is finished when losing that desktop would not matter.

Written by BV

BV founded UrRecover after losing a memory card full of wedding photos and discovering that most "best data recovery software" rankings were ordered by commission rate rather than results. He now buys the licences, breaks the drives, and publishes what actually got the files back.

Independent recovery guidanceReview safe first steps before choosing software
Read safety guide