How to Delete Files Securely: Safe Permanent Erasure

You’ve probably hit Shift+Delete on a sensitive file and assumed it’s gone for good. But the reality is more complicated—most deletion methods leave the actual data sitting on your drive, waiting for recovery tools to bring it back.

Files recoverable without secure deletion: 80-90% of deleted files ·
Overwrite passes recommended by NIST: 1 pass for most data ·
Year DoD introduced sanitization standard: 1996 ·
Cost of commercial file recovery tools: $30–$100

Here are key facts about secure file deletion.

What is the safest way to delete files?

Using dedicated file shredding software

• Eraser (Windows, free) — overwrites with user-selectable patterns (University of Michigan Safe Computing)
• BleachBit (Windows/Linux, free) — shreds files and wipes free space (EFF Surveillance Self-Defense)
• DBAN (bootable ISO) — wipes entire drives, supports DoD 5220.22-M (Microsoft Tech Community)

The safest software option for traditional hard drives: use a tool like Eraser or BleachBit that overwrites the file’s storage space with random data. The EFF endorses BleachBit for spinning-disk drives, noting that “secure deletion tools can overwrite file data so the deleted content is not recoverable with common tools.”

Encrypting files before deletion

• Full-disk encryption (e.g., BitLocker, FileVault) makes unencrypted data unrecoverable even if sectors remain after deletion (UC Berkeley Information Security Office)
• Individual file encryption before deletion adds an extra layer for sensitive documents

UC Berkeley recommends full-disk encryption as a “mitigation for SSD and flash-based media when secure deletion is not reliable.” If you encrypt the entire drive, even if a file’s data persists in unallocated space, the encryption renders it unreadable without the key.

Physical destruction for maximum security

• Shredding — industrial hard drive shredders break platters into fragments (UC Berkeley)
• Degaussing — strong magnetic field erases data on magnetic HDDs (does not work on SSDs)
• Incineration — destroys media completely

UC Berkeley advises: “If storage media cannot be overwritten, such as defective hard drives or optical discs, the device should be destroyed before disposal.” Physical destruction is the only method that guarantees no forensic recovery — but it’s overkill for routine file deletion.

How to securely delete a file?

Using built-in Windows cipher command

The cipher /w:folder command in Windows overwrites all free space in a folder, but does not target individual files. It writes three passes: zeros, 0xFF, then random data. This is a native, no-cost option for HDDs. (Microsoft Tech Community)

Steps to use cipher: Open Command Prompt as Administrator, type cipher /w:C:\Users\YourName\SensitiveFolder, press Enter. The operation can take hours for large drives.

Using third-party tools like Eraser or CCleaner

• Eraser — right-click integration; supports DoD 5220.22-M, Gutmann, and custom passes (University of Michigan Safe Computing)
• CCleaner — Drive Wiper tool can wipe free space or entire drive (less transparent about methods)
• BleachBit — can shred individual files or folders and schedule periodic wiping (EFF)

Secure empty trash on macOS

• macOS used to include “Secure Empty Trash” but removed it starting with macOS Sierra (2016)
• Current method: use Disk Utility to erase free space (macOS High Sierra and later) or use a third-party tool like FileShredder

University of Michigan notes that “OS X provides built-in secure deletion options through Secure Empty Trash and secure erase options in Disk Utility.” For modern macOS, the only built-in option is to encrypt the drive and then delete normally — the deleted data remains encrypted.

Mobile device secure deletion options

• iPhone/iPad: Factory reset with “Erase All Content and Settings” uses hardware encryption + overwrite — the device’s storage is encrypted, so a reset destroys the encryption key.
• Android: Factory reset from Settings > System > Reset > Erase all data. On modern Android with encryption enabled, this effectively locks the data. However, without encryption, a reset may leave recoverable data.

For mobile devices, EFF recommends encrypting the device before storing sensitive files, then using the factory reset to make the data unrecoverable.

How do you permanently delete files so they can’t be recovered?

Overwriting with random data

A single pass of random data is effective against software-based recovery on modern HDDs. UC B states: “compliant deletion options include the DoD 3-pass overwrite standard and Secure Erase.” However, NIST SP 800-88 Rev. 1 considers one pass sufficient for most data — the extra passes mainly protect against older, higher-density drives.

Why one pass works: When you overwrite a sector with new data, the magnetic state of the platter changes permanently. Forensic tools that rely on magnetic force microscopy (MFM) are not practical outside well-funded labs. EFF explains that “overwriting the file’s storage area with new data makes recovery impossible.”

Multiple-pass standards (DoD, Gutmann)

• DoD 5220.22-M: Three passes (0, 1, random). Still referenced for classified government use, but modern guidance favors one pass.
• Gutmann 35-pass: Designed for older encoding techniques (MFM, RLL). Overkill for modern drives — SecureData notes its 35-pass method “meets the requirements of the U.S. DoD Wipe Standard” but warns it’s unnecessary for contemporary hardware.

The pattern: Multiple passes are a legacy safety blanket for modern HDDs (post-2005), one random pass is sufficient against all practical recovery attacks.

Using disk-wiping utilities for entire drives

When you need to sanitize an entire drive (e.g., selling a computer), use a dedicated wiping tool.

• DBAN (Darik’s Boot and Nuke) — bootable ISO that wipes all data on the drive. Supports DoD 5220.22-M (Microsoft Tech Community)
• Secure Erase (ATA) — built into most SSDs; triggers internal low-level wipe that resets all cells. UC Berkeley calls this a “compliant deletion option” for SSDs.

How do I remove all traces of deleted files?

Wiping free space on the hard drive

When you delete a file normally, the operating system marks its clusters as available. The actual data sits in free space until new files overwrite it. Wiping free space forces overwrite of all unallocated clusters.

• Windows: cipher /w:C: or use Eraser’s “Eraser Unused Space” option
• BleachBit: “Wipe free space” under System settings (EFF)
• macOS: Disk Utility > Erase Free Space (older versions; now requires encryption)

Using eraser tools to cleanse unallocated clusters

University of Michigan recommends scheduling periodic free-space wiping. “When a file is deleted, only a small bit of information pointing to the file location is erased, while the actual file remains on disk until overwritten.” Tools like Eraser can automate this on a weekly or monthly schedule, ensuring that deleted data doesn’t accumulate.

Checking for residual data in file system metadata

Even after overwriting the file’s data clusters, residual traces can persist:

• Slack space: The unused bytes in the last sector of a cluster — can contain fragments of other files.
• MFT entries (NTFS): The Master File Table may retain the file name and metadata. Some tools can wipe the $M
• Journal entries: NTFS records file operations in the $LogFile — overwriting can leave transaction logs.

Advanced forensic recovery may exploit these. UC Berkeley recommends “where possible, entire hard disks should be sanitized instead of just deleting files and folders” to eliminate metadata traces.

The implication: For most users, wiping free space with a trusted tool is sufficient. But for compliance with strict data-protection regulations (GDPR, HIPAA), a full drive wipe or physical destruction may be required.

Are deleted files gone forever?

What happens when you click “delete”

University of Michigan explains: “When a file is deleted, only a small bit of information pointing to the file location is erased, while the actual file remains on disk until overwritten.” The file’s directory entry is removed, but the clusters holding the data are simply marked as available. EFF describes this as a “pointer deletion” — the data is still physically present.

How recovery software works

File recovery tools (e.g., Recuva, PhotoRec) scan unallocated clusters looking for file headers (signatures). They read raw sectors and rebuild files based on known patterns. With no overwrite, success rates are high — 80‑90% of deleted files can be recovered using consumer-grade tools costing $30–$100.

The Microsoft Tech Community notes that “Shift+Delete removes files without sending them to the Recycle Bin, but does not by itself guarantee irrecoverability.” The data remains in unallocated space.

Circumstances that make recovery possible

• No overwrite: Data untouched → easy recovery.
• Partial overwrite: Some clusters still hold original data.
• SSD TRIM: TRIM command may actually help deletion by physically erasing cells (if supported and enabled), but the SSD’s controller can reallocate blocks unpredictably.
• File system journal: Previous versions, shadow copies, or backup catalogs can preserve file content.

The pattern: Deleted files are never gone forever unless you take deliberate action to overwrite or encrypt. The only way to guarantee true permanent deletion is to ensure the storage medium no longer contains any recoverable representation of the data.

Four free tools, one trade-off: Eraser gives you the most control on Windows; BleachBit is cross-platform; DBAN wipes whole drives; CCleaner offers an easy all-in-one package.

How to securely delete files step by step (Windows + Eraser)

1. Download and install Eraser from the official website. Run the installer as Administrator.
2. Right-click the file or folder you want to permanently delete.
3. Select “Eraser → Erase”. A confirmation dialog appears.
4. Choose an erase method: DoD 5220.22-M (3 passes) is a good default. For non-critical files, 1-pass random suffices (University of Michigan Safe Computing).
5. Click OK. The file is overwritten and the pointer is removed. The action irreversible — SecureData warns “once confirmed, the files will be permanently deleted and cannot be recovered.”
6. ify: Use a hex editor or recovery tool to confirm the file’s sectors no longer contain recognizable data.

For scheduled wiping: In Eraser, create a new task (Add Task), choose “Unused space” or a folder, set recurrence (e.g., weekly), and select the erase method.

For anyone handling sensitive personal or corporate data, the choice is clear: use a tool like Eraser or BleachBit for traditional drives, and rely on full-disk encryption for SSDs. Without deliberate action, deleted files remain recoverable — and the cost of a breach can far outweigh the few minutes it takes to overwrite them properly.