We spend most of this site explaining how to get deleted files back. This article is the same knowledge pointed the other way. Everything that makes recovery possible — deletion only removing a pointer, formatting leaving the data in place — is precisely why the laptop you sold last year may still be handing over your tax returns.
What deleting and formatting actually do
Emptying the Recycle Bin marks space as available. The data stays until something overwrites it.
A quick format replaces the file system’s index. The files can remain on the disk without appearing in the file system, which is why a quick-formatted drive may still yield recoverable folders and filenames until new data overwrites them.
Which means: if your disposal plan was “I formatted it”, your plan was to hand over your data to anyone willing to spend twenty minutes and nothing at all, since the tools that do this are free.
Different drives, different methods
Spinning hard drives. A single full-disk overwrite pass is sufficient. The old advice about needing thirty-five passes comes from research into 1990s drive densities and does not apply to modern disks. One pass of zeroes or random data is enough; more is theatre and wears the drive.
SSDs and NVMe. Overwriting is the wrong tool. Wear levelling means the controller writes your overwrite to different physical cells than the ones holding the old data, leaving originals in over-provisioned space you cannot address. The correct method is the drive’s own secure erase or sanitize command, which instructs the controller to wipe every cell including the reserve. Manufacturer utilities from Samsung, Crucial, WD and others expose this.
Self-encrypting drives. If the drive encrypts at hardware level, a crypto erase destroys the encryption key and renders every block meaningless instantly. This is how a modern iPhone or Mac erases in seconds rather than hours.
Memory cards and USB sticks. These have the crudest controllers and the least reliable erase support. For anything genuinely sensitive on a cheap USB stick, physical destruction is a legitimate and inexpensive answer.
Encrypt first, and this gets much easier
The most practical advice in this article: turn on full-disk encryption when you set a machine up, not when you sell it.
If a drive has been encrypted from day one with BitLocker or FileVault, then wiping it is a matter of destroying the key. Any residual data is ciphertext without a key, which is not data. It also protects you against the laptop being stolen next month, which is a likelier event than you selling it.
Encrypting a drive that already contains data helps less than people assume, because it does not encrypt the free space where deleted material lives. Encryption from the start is the version that works.
Tools
Built-in options handle most cases. Windows offers format /P:1 for a single overwrite pass, and macOS Disk Utility has secure erase options for non-SSD media. Manufacturer utilities are the right route for SSD secure erase.
Most personal devices can be erased with the operating system or the drive manufacturer’s secure-erase utility. Businesses that require a formal erasure certificate should use a product and procedure approved by their IT or privacy policy. UrRecover does not currently have a confirmed affiliate relationship for a dedicated erasure product, so this guide does not recommend one commercially.
For a private sale of an old laptop, the free built-in tools are genuinely sufficient. Do not let anyone tell you a home user needs certified erasure software to sell a five-year-old machine.
Verify, because verification is the whole point
This is the step everyone skips, and it is the only one that proves anything.
After wiping, run a recovery scan against the drive yourself. PhotoRec is free, while EaseUS Data Recovery Wizard and MiniTool Power Data Recovery provide tracked scan options. You only need to determine whether personal files remain discoverable; recover any sample to a different drive if verification is necessary.
It takes twenty minutes and it converts an assumption into a fact.
Do not forget
- Sign out of and deauthorise accounts before wiping — iCloud, Microsoft, Adobe, password managers. Activation Lock on a Mac makes the machine useless to the buyer if you skip this.
- Printers, routers and smart TVs hold credentials and scanned documents. Factory reset them too.
- Old phones in a drawer are the most commonly overlooked item in the house.
- Removing a drive and keeping it is always an option. Drives are cheap; a machine sells fine without one.
If you are selling something this week: encrypt-from-new next time, use secure erase for SSDs and a single overwrite pass for spinning disks, then scan it yourself to prove it worked.
Tools for verifying a wipe
These are paid-product links from active UrRecover affiliate relationships. Use the free scan or preview first where available, compare what each tool actually finds, and do not buy if the files you need are not visible.
- EaseUS Data Recovery Wizard — Use the scan and preview to check whether deleted files remain visible.
- MiniTool Power Data Recovery — A second Windows scan can help confirm the result.
- O&O DiskRecovery — A tracked Windows recovery scanner you can use as an additional check.
Recovery results depend on the device, the failure and whether new data has overwritten the missing files. Save recovered files to a different drive. For physical damage, unusual noises or an unstable RAID, stop and consult a professional recovery laboratory.
Erasing properly, and having proof
A quick format is not an erase, and a buyer with recovery software can demonstrate that. O&O SafeErase overwrites to recognised standards and produces a certificate afterwards, which is the part people forget they need.