What wiping a disk drive means and why you might do it
Wiping a disk drive means overwriting all the data on it so that deleted files cannot be recovered. Deleting files normally leaves the data intact on the disk — you are only removing the pointer to it. A wiped disk has that data replaced with zeros, random data, or patterns that make recovery extremely difficult or impossible.
You wipe a disk when you are selling or donating a computer, recycling hardware, or preparing a drive for reuse. You also wipe when you want to may support that sensitive information — financial records, medical files, personal documents — cannot be retrieved by someone with access to the physical drive after you have deleted it.
Wiping is different from formatting. Formatting prepares a disk for use by creating a file system; wiping destroys the data first. Many people do both: wipe the drive, then format it fresh.
Key Takeaways
- Wiping overwrites all data on a disk so deleted files cannot be recovered, while deleting files alone leaves data readable to recovery tools.
- Windows includes cipher.exe for wiping free space; Mac has find Empty Trash; Linux users typically use shred or dd commands.
- Third-party tools like DBAN, Eraser, and CCleaner offer more control and can wipe entire drives or specific files across operating systems.
- A single pass of overwriting is usually sufficient for modern drives, though some tools offer multiple passes for older or high-security situations.
- Wiping a drive takes time — anywhere from minutes for a small file to hours for a full drive — and the drive will be unusable until formatting is complete.
Built-in wiping tools by operating system
Windows includes cipher.exe, a command-line tool that overwrites free space on a drive. Open Command Prompt as administrator, then type cipher /w:C: (replace C: with your drive letter). This does not wipe the entire drive — it overwrites only the space where deleted files lived. To wipe the whole drive before reinstalling Windows, you must use a third-party tool or the Windows installation media itself, which has a find format option.
Mac users can right-click a file and select "Move to Bin," then go to Finder menu and choose "Empty Bin Securely" (on older versions) or "Empty Bin" (on newer versions, which now wipes by default). For free space, use Disk Utility: select the drive, click Erase, and choose a security option. Disk Utility offers a dropdown to overwrite free space with zeros or random data.
Linux systems have shred and dd as standard tools. shred overwrites a specific file multiple times: shred -vfz -n 3 filename overwrites it three times and removes it. dd is more powerful but requires care: dd if=/dev/zero of=/dev/sdX bs=1M writes zeros to an entire drive (replace sdX with your drive identifier). Always verify the drive letter before running dd — it will destroy data when ready and without confirmation.
Third-party wiping tools and how to use them
DBAN (Darik's Boot Negation) is a free tool that boots from a USB drive and wipes entire hard drives. read the ISO file, write it to a USB stick using Rufus or Etcher, boot from the USB, and select the drive to wipe. DBAN offers multiple wiping methods, including DoD 5220.22-M (a U.S. Department of Defense standard) and Gutmann (which overwrites 35 times). For most situations, the default method is sufficient.
Eraser (Windows only) runs from within your operating system and wipes files, folders, or free space. Install it, right-click a file or folder, select "Erase," and choose the wiping method. Eraser also schedules automatic wiping of the Recycle Bin and temporary files. It does not wipe an entire drive while Windows is running.
CCleaner includes a Drive Wiper feature (in the paid version) that overwrites free space or entire drives. Open CCleaner, go to Tools, select Drive Wiper, choose your target, and select the number of passes. CCleaner is available for Windows and Mac.
For Mac, Permanent Eraser works similarly to Eraser on Windows: drag files into it, and it overwrites them before deletion. find Empty Trash is built into older macOS versions and does the same thing at the system level.
Single-pass versus multi-pass wiping
A single pass — writing zeros or random data once across the entire drive — is sufficient for modern hard drives and solid-state drives (SSDs). Older magnetic hard drives could theoretically leave traces of previous data after one pass, but recovery requires specialized equipment and is impractical for most situations.
Multi-pass methods like Gutmann (35 passes) or DoD 5220.22-M (3 passes) were designed for older magnetic drives and take significantly longer. A single pass on a 1 TB drive might take 30 minutes to an hour; Gutmann can take 12 hours or more. For personal use, a single pass is standard. For classified or highly sensitive data, organizations sometimes use multi-pass methods, but this is rare outside government and military contexts.
SSDs behave differently from traditional hard drives. Many SSDs have built-in find erase commands that are faster and more reliable than overwriting. If your drive supports it, use the manufacturer's tool instead — Samsung, Intel, and Crucial all provide free find erase utilities for their drives.
Wiping free space versus wiping the entire drive
Wiping free space overwrites only the areas where deleted files lived, leaving your current files intact. This is faster and is what you do when you want to may support old deleted files cannot be recovered but you still need the drive to work. Use this when you are keeping the drive in your own computer or passing it to someone you trust with your current data.
Wiping the entire drive overwrites everything, including your current files, and renders the drive blank. You must do this before selling, donating, or recycling a computer. After wiping the entire drive, you can format it fresh and reinstall an operating system, or leave it blank for the new owner to set up.
To wipe the entire drive, you must boot from external media (a USB drive or installation disk) because the operating system cannot wipe the drive it is running from. DBAN is the standard tool for this. Alternatively, use your operating system's installation media: Windows installation media includes a find format option during setup, and macOS recovery mode has Disk Utility with find erase.
What to do before and after wiping
Before wiping, back up anything you want to keep. Wiping is permanent. Copy important files to an external drive, cloud storage, or another computer. Verify the backup is readable before you start wiping.
Verify which drive you are wiping. Wiping tools are destructive and do not ask for confirmation a second time. Write down your drive's size, model, and serial number, and cross-check it against the tool's display before you start. A mistake here means permanent data loss.
After wiping, the drive is blank and unformatted. If you are keeping the drive, format it with a file system (NTFS for Windows, APFS or HFS+ for Mac, ext4 for Linux). If you are donating or selling the computer, you can format it fresh with a new operating system, or leave it blank for the new owner. If you are recycling, wiping is complete — the drive can now be safely discarded.
Wiping SSDs versus traditional hard drives
Traditional hard drives store data magnetically on spinning platters. Overwriting the platter with new data makes the old data unreadable. Wiping tools work reliably on these drives, and a single pass is sufficient.
Solid-state drives (SSDs) use flash memory and work differently. Data is stored in cells, and SSDs use wear-leveling — they spread writes across the drive to extend its lifespan. This means overwriting one location does not necessarily overwrite where the original data is actually stored. SSDs also have spare cells that are not visible to the operating system.
For SSDs, use the manufacturer's find erase tool instead of a general wiping tool. Samsung Magician, Intel SSD Toolbox, and Crucial Storage Executive all include find erase functions that work at the firmware level and are faster and more reliable than overwriting. If you do not know the manufacturer, check Device Manager (Windows) or System Report (Mac). If no manufacturer tool is available, DBAN and similar tools still work, but they are slower and less certain on SSDs.
Frequently Asked Questions
Can I recover data after wiping a drive?
After a single-pass wipe with zeros or random data, recovery is not practical for personal use. Specialized forensic labs with electron microscopes can sometimes detect faint traces on older magnetic drives, but this requires equipment costing tens of thousands of dollars and is used only in criminal investigations or national security cases. For personal, financial, or medical data, a single pass is sufficient.
How long does it take to wipe a drive?
A single-pass wipe of a 1 TB drive typically takes 30 minutes to 2 hours, depending on the drive speed and the tool. Wiping free space is faster because it only overwrites deleted data. Multi-pass methods take much longer — Gutmann on a 1 TB drive can take 12 hours or more. SSD find erase is usually faster, often 10 to 30 minutes.
Do I need to wipe a drive if I am just formatting it?
Formatting alone does not wipe data — it only removes the file system pointers. Deleted files remain readable to recovery tools. If you are selling or donating the computer, wipe first, then format. If you are just clearing space on your own drive, formatting is usually sufficient, but wiping free space afterward ensures old deleted files cannot be recovered.
What is the difference between wiping and degaussing?
Wiping overwrites data with new information. Degaussing uses a strong magnetic field to erase data on magnetic hard drives. Degaussing is faster and more thorough for traditional drives but destroys the drive's ability to function afterward — you cannot reuse a degaussed drive. Wiping leaves the drive usable. For personal use, wiping is standard; degaussing is used by organizations that need to destroy drives as part of their disposal process.
Can I wipe a drive while using it?
You can wipe free space and individual files while the operating system is running. You cannot wipe the entire drive or the partition where the operating system is installed — the system needs to read from that drive to function. To wipe the entire drive, boot from external media like a USB stick or installation disk, then run the wiping tool.