Question How to delete a file securely on an ssd?

Status
Not open for further replies.

MichaelKnight

Distinguished
Nov 15, 2014
88
0
18,540
How can I permanently delete a file on an ssd, without any recovery option?

I tried bitlocker encryption. But I then used recuva and was able to recover some files deleted after encryption, while using my local windows account. Another problem is, I am able to close bitlocker and decrypt the ssd without the need of any key.

So if someone learns my Windows account's password(for example, a pc repairman) can easily close the bitlocker and access my possibly sensitive deleted files., using a recovery software., without in need of a key to decrypt.

I think I am missing something, but I am not sure what it is. In this way it seems like using bitlocker only works good if the pc(or ssd) is stolen by someone who doesn't know my windows account password.

Is it true or is there a better way to permanently delete a file on an ssd?
 
Last edited:
After more testing, I have the impression that if I delete a file and then delete it from the recycle bin, wait for a few minutes then run recuva, recuva is not able to find the deleted file.But if I delete Microsoft Edge's history, it is able to see the deleted history files...
 
After more testing, I have the impression that if I delete a file and then delete it from the recycle bin, wait for a few minutes then run recuva, recuva is not able to find the deleted file.But if I delete Microsoft Edge's history, it is able to see the deleted history files...
If you only 'delete' and it is still in the recycle bin, then yes, it can probably be recovered.

Shift-Delete bypasses the Recycle Bin, and actually deletes it.
Far less chance of any recovery.
 
  • Like
Reactions: MichaelKnight
Last edited:
  • Like
Reactions: MichaelKnight
Thanks for your answers.

USAFRet wrote:​

After more testing, I have the impression that if I delete a file and then delete it from the recycle bin, wait for a few minutes then run recuva, recuva is not able to find the deleted file.But if I delete Microsoft Edge's history, it is able to see the deleted history files...
If you only 'delete' and it is still in the recycle bin, then yes, it can probably be recovered.

Shift-Delete bypasses the Recycle Bin, and actually deletes it.
Far less chance of any recovery.
I will try it but seems like the main problem is, , for example, if I delete Microsoft Edge history,cookies etc. using Microsoft Edge's menu, the files it deletes are recoverable using Recuva.(though I didn't test it using InPrivate window, when that window is closed Windows automatically deletes files it stored, if I know right and I haven't tested with Recuva).



Just an FYI on that page lists CCleaner. I used to love that program than when we got to windows 10 the old windows 7 ver needed an new version to work on 10/11. Window now flags it as a virus and the first time I tried to use on windows 10 it hosed the OS. Use at your own risk
Are you sure that those type of "wipe using overwrite" apps work on ssds as good as harddrives? I've read many articles and forum posts which claim that overwriting a file doesn't work on ssds.Though still some apps claim that they can wipe files on ssds using that method.
 
I tested opening an InPrivate window, visiting some webpages, then closing the browser.Then I run Recuva and it was unable to find the files deleted by closing Edge's InPrivate window, which is nice.
 
I decided to give CCleaner a chance.After downloading I run it, set it to clean using 3 pass, cleaned the Edge and Edge Cromium history,cookies etc., run the Recuva to check the result, unfortunately same result.Again Recuva could be able to see the deleted files.
 
Have you tried Privazer? It's more effective than CCleaner.
https://privazer.com/en/
https://www.thewindowsclub.com/privazer-review-download

CCleaner was infected with malware back in 2017 and again in 2019.
https://www.bleepingcomputer.com/ho...dent-what-you-need-to-know-and-how-to-remove/
https://techjury.net/reviews/is-ccleaner-safe/

I always install Windows (XP to 10) with a local account, so I've fewer concerns about Microsoft Account password hacks. I even managed to install Windows 11 with a local account instead of a Microsoft Account on a brand new laptop.
 
Last edited:
  • Like
Reactions: MichaelKnight
I decided to give CCleaner a chance.After downloading I run it, set it to clean using 3 pass, cleaned the Edge and Edge Cromium history,cookies etc., run the Recuva to check the result, unfortunately same result.Again Recuva could be able to see the deleted files.
Try actually recovering the files.

I found this blurb on Microsoft's SDelete page:
The reason that SDelete does not securely delete file names when cleaning disk free space is that deleting them would require direct manipulation of directory structures. Directory structures can have freespace containing deleted file names, but the free directory space is not available for allocation to other files. Hence, SDelete has no way of allocating this free space so that it can securely overwrite it.
This leads me to believe that file names are not touched in the file system's bookkeeping. Recuva could be looking at this first and seeing if there's a discrepancy between what's accessible and what the records are showing. And then it tries to recover the data based on those records.

I mean, if Microsoft can't touch its own file system's bookkeeping, I'm under the impression every other secure erase app can't either.
 
  • Like
Reactions: MichaelKnight
Thanks for your answers.

USAFRet wrote:​

If you only 'delete' and it is still in the recycle bin, then yes, it can probably be recovered.

Shift-Delete bypasses the Recycle Bin, and actually deletes it.
Far less chance of any recovery.
Using shift + delete to delete a file, seems like making it wiped faster.If I use just delete key instead, it puts it into recycle bin, another delete,from the recycle bin then it goes but I can still see the file using Recuva.Though in a few minutes, it is gone from the Recuva too.


Just an FYI on that page lists CCleaner. I used to love that program than when we got to windows 10 the old windows 7 ver needed an new version to work on 10/11. Windows now flags it as a virus and the first time I tried to use on windows 10 it hosed the OS. Use at your own risk
My antivirus found an adware with CCleaner during installation, I chose "clean" and it cleaned the adware.Currently it seems like CCleaner is working fine.

After testing many times more, I come to the conclusion(for now) that, CCleaner cleans much better than using Microsoft Edge's cleaning button to clean history,cookies... etc. Recuva is able to just find one or two deleted files in this way while using Microsoft Edge's own cleaning, I am able to see a lot more files using Recuva.Though most of those files seem gone after some time.(but not always, I still see a few files from two days ago.)

Although on some webpages I have read that overwriting a file is not effective on ssds, it looks it is benefical.





Misgar wrote:
I may try it.






Another way is to use Powershell's Remove-Item cmdlet.​

FYI:​

Remove-Item

Remove-Item details

You can customize the cmdlet with very little extra effort.​

Powershell is Microsoft, free.​

I am not able to see it mentions something like "safe delete" but I may try using it.


So, at least for now, I decided to delete sensitive files using shift+delete( or a file shredder) and while cleaning the internet history,cookies. etc., to use CCleaner.Also I will continue using InPrivate window too.
 
Last edited:
Status
Not open for further replies.