How to Securely Wipe an SSD or Hard Drive Before Selling It
Emptying the recycle bin, deleting partitions, even a full format — none of these reliably destroy data. Recovery software can pull files back from a “formatted” drive in minutes. Before you sell, donate, or recycle a computer, here's how to actually erase it.
Why deleting and formatting aren't enough
Deleting a file removes the index entry, not the data; a quick format rewrites the file table and little else. On hard drives, overwrite tools work but are slow. On SSDs there's a deeper problem: wear-leveling means the drive constantly remaps which physical cells your data lives in, so a software tool that “overwrites everything” can never prove it touched every cell — including the spare area you can't see.
What actually works on an SSD
Use the drive's own built-in erase commands, which reset every cell at the controller level:
- ATA Secure Erase for SATA drives — issued by wipe utilities or `hdparm` on Linux; the controller wipes everything, spare area included, usually in minutes.
- NVMe Format with Secure Erase (or Sanitize) for NVMe drives — via the maker's tool or `nvme-cli`.
- Crypto erase for self-encrypting and BitLocker/FileVault-encrypted drives — destroying the encryption key renders all data unreadable instantly.
- Manufacturer dashboards (Samsung Magician, WD/SanDisk Dashboard, Crucial Storage Executive) wrap these commands in a guided UI.
What about hard drives and the “DoD 7-pass wipe”?
For spinning hard drives, a single full overwrite pass is sufficient on any drive made this century — the multi-pass “DoD” ritual is obsolete, and NIST SP 800-88 (the standard IT departments actually follow) says exactly that. For drives that held genuinely sensitive data, or drives that no longer respond reliably, physical destruction is the only certain method.
The bootable-eraser workflow
The practical problem with all of the above: you can't fully erase the disk Windows is currently running from, and secure-erase commands are often “frozen” by the OS. The clean solution is a bootable eraser USB — boot the machine from the stick, the OS never mounts, and the tool can issue proper secure-erase commands to every internal drive, then print a verification report. That's exactly what our data-eraser USB does, using the same certified wiping engine IT refurbishers rely on.
Before-you-sell checklist
Wiping the disk is the big one, but complete the set:
- Sign out and deauthorize accounts that limit device counts (iTunes, Adobe).
- Unlink the machine from Microsoft/Google/Apple account device lists.
- If BitLocker or FileVault was on, the wipe also acts as a crypto erase — but wipe anyway.
- Afterwards, boot once from install media to confirm the disk shows as empty/uninitialized.
Frequently asked questions
Does a factory reset securely erase my data?
Windows' “Reset this PC” with the “clean the drive” option is reasonable for casual resale of an encrypted drive, but it's not a verified erase. For anything sensitive, use a proper secure-erase tool and keep the verification report.
How long does a secure erase take?
ATA Secure Erase and NVMe Format on an SSD usually finish in seconds to a few minutes, because the controller resets cells rather than writing to each one. A single overwrite pass on a large hard drive can take many hours.
Can files really be recovered from a formatted drive?
Yes. A quick format only rebuilds the file table; off-the-shelf recovery tools routinely restore photos and documents from formatted drives. That's the whole reason verified erasure standards exist.