Are permanently deleted files really gone?

The short answer

No, deleted files are not always permanently erased when you empty the Recycle Bin or Trash. When you delete a file, the operating system simply marks the space occupied by the file as available for use. The actual data remains on the hard drive until it is overwritten by new data. For this reason, deleted files can often be recovered using data recovery software as long as they have not been overwritten.

How deleting files works

When you delete a file, either by hitting delete or emptying the Recycle Bin/Trash, the operating system does not immediately remove the file’s data from your hard drive. Instead, it simply marks the space occupied by the file as being available for use. The file appears to be deleted, but the data remains on the hard drive.

This is done for efficiency reasons. If the operating system actually erased the data right when you deleted a file, it would take a lot more time to execute deletions and use up more computing resources. Marking the space as available is faster. The actual removal of data happens later when another file needs to use that space on the hard drive and overwrites the existing data.

So until the deleted file’s data clusters on the hard drive are overwritten by new data, the original data remains and the file can be recovered.

When can deleted files be recovered?

In general, the sooner you attempt to recover a deleted file, the more likely the recovery will be successful. This is because there is less chance of the file being overwritten by new data.

Here are some key factors that determine recoverability:

How much new data has been written

The more new files that have been created and saved to your hard drive after deletion, the higher the chance that deleted file data has been overwritten with new data. Heavy computer usage after deleting files decreases recoverability.

File size

Larger files take up more disk space, so they are less likely to have been overwritten, compared to smaller files. A 5GB video file has a better chance of recovery compared to a 5MB document.

Drive capacity

A drive that is nearly full has less free space for new data to overwrite deleted file space. Conversely, a relatively empty drive increases the chance that deleted file data will be overwritten, since there is plenty of free space for new data.

File system

Different file systems handle deletions differently. For example, the NTFS file system used by Windows is more likely to have recoverable deleted files compared to Linux EXT file systems. This is due to how space is allocated and managed.

Data overwriting myths and facts

There are some common misconceptions around when deleted files are overwritten. Here are some myths and facts:

Myth: Emptying the Recycle Bin/Trash immediately overwrites deleted files

Fact: As explained above, emptying the Recycle Bin or Trash simply marks the files’ disk space as available for future use. The deleted data remains until overwritten by new data.

Myth: Rebooting the computer overwrites deleted files

Fact: A reboot simply reloads the operating system into memory. It does not cause any overwriting of deleted files on the hard drive.

Myth: Once deleted, files are overwritten within hours or days

Fact: Overwriting depends entirely on computer usage and free space. On a lightly used drive with ample free space, deleted files may avoid overwriting for months.

Myth: Just using the computer normally will quickly overwrite all deleted files

Fact: Normal computer usage may not overwrite deleted files as quickly as you’d expect. For example, web browsing and office work tend to create small temporary files that do not take up significant drive space. Anti-virus scans can also skip over free space containing deleted data.

Secure file deletion

If you want to make sure a file is completely erased and unrecoverable, you need to use a secure deletion method. This overwrites the file’s data before deletion to prevent recovery. Here are some options:

Use secure delete software

Special software like Eraser for Windows, or Secure Delete for Mac, can overwrite data multiple times to ensure complete erasure. This also applies to free space where deleted files resided.

Use built-in secure delete commands

Some operating systems have secure deletion commands built in, like Sdelete in Windows or shred in Linux. These work by overwriting data with multiple passes of random data.

Physically destroy the hard drive

For total assurance that a file is unrecoverable, physical destruction of the hard drive is the most secure option. Methods include disk degaussing, which demagnetizes the drive, or disk shredding, which breaks it into small fragments. But this results in complete loss of all data on the drive.

Recovering deleted files

If you need to recover deleted files that were not securely erased, data recovery software is the best option. Here are some things to know:

Don’t save new data to the drive

After accidental deletion, avoid storing any new files on the drive, as this overwrites deleted data. Install recovery software on another drive instead.

Specialized data recovery firms

For difficult cases, a professional data recovery service can attempt to reconstruct heavily overwritten files in a sterile cleanroom environment. This costs hundreds to thousands of dollars.

Results vary

The amount and integrity of recovered data depends on how much it was overwritten and drive conditions. Often only partial files can be retrieved.

Recover deleted data from backups

For reliable recovery, having a backup copy of your deleted files is the best insurance. Cloud backup services like iDrive retain 30+ previous versions of files.

Recovery Software Price
TestDisk Free
Recuva Free
EaseUS $50-70
Stellar $80
Disk Drill $90

Preventing accidental file deletion

To avoid inadvertently deleting important files permanently, here are some tips:

Backup regularly

Back up your files to an external drive or cloud storage. This provides a copy if you delete the original.

Disable Recycle Bin deletion

In Windows, disable the option to permanently delete files when you empty the Recycle Bin, under Recycle Bin properties.

Extra Recycle Bin confirmation

Enable the setting in Windows to prompt for confirmation before deleting Recycle Bin files.

Undelete protection

Some third party tools can protect against accidental deletion by allowing easy undeletion of files.

Versioning in cloud backup

With a cloud backup service that offers versioning, you can restore older copies of accidentally deleted files.

Conclusion

While it may seem like deleting a file removes it permanently, in reality deleted data remains on the drive and can often be recovered intact until it is overwritten. The likelihood of recovery depends on the amount of new data written after deletion. To ensure irrecoverable deletion, specialized disk wiping software or physical destruction methods should be used. Otherwise, being prepared with regular backups is the best way to protect against accidental permanent data loss. With proper precautions, deleted files don’t have to be gone forever.