iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
The best disk-wiping method depends on the storage media and the evidence you need. For a retiring magnetic hard disk drive (HDD), a bootable eraser such as DBAN can be practical for personal use. For an SSD or NVMe drive, use the manufacturer- or platform-aware secure-erase, sanitize, or cryptographic-erase workflow instead of repeated overwrites. For files or deleted-data remnants on a working Windows installation, Microsoft SDelete is the appropriate category. A business that needs signed certificates and repeatable audit records needs an enterprise erasure platform, not a free personal utility.
Those distinctions matter because a tool can report a successful operation while leaving remapped sectors, hidden areas, encryption keys, or inaccessible flash blocks outside the operation it performed. The guide below separates each job and gives a safe procedure for completing it.
Choose the method before choosing the software
“Securely erase a computer” can mean several different jobs. Decide which one you have before downloading anything:
| Job | Typical media | Appropriate approach | What to expect |
|---|---|---|---|
| Retire or reuse an entire magnetic drive | Traditional HDD | Boot a current HDD-focused eraser such as DBAN from a USB flash drive | Useful for personal, non-regulated disposal, but no certificate and incomplete coverage of some hidden or remapped areas |
| Remove selected files or previously deleted data while Windows remains usable | Logical volumes on Windows | Microsoft SDelete with the switch that matches the task | Works from the running operating system; it is not a universal whole-drive sanitizer |
| Prepare a supported Mac for sale or transfer | Apple silicon or Intel with a T2 Security Chip | Apple Erase Assistant | Platform-aware removal of user data and activation state; follow the Mac’s supported workflow |
| Erase an SSD or NVMe drive | SATA SSD, PCIe NVMe SSD | Drive-aware sanitize, secure erase, or cryptographic erase | Use the drive controller or platform security features; operating-system overwrite passes are not a reliable substitute |
| Process many devices or prove erasure to an auditor | Mixed HDD, SSD, NVMe and enterprise media | Enterprise drive-erasure software with verification and signed reporting | Automation, broader interface support and an auditable record; licensing and pricing must be confirmed with the supplier |
NIST defines media sanitization as “a process that renders access to target data on the media infeasible for a given level of effort.” Its current publication record is NIST Special Publication 800-88 Revision 2 (2025), which covers media types, sanitization methods, secure erase and cryptographic erase. There is no universal number of overwrite passes that makes every SSD, hidden area or enterprise workflow secure.
#1 Best Overall
- USB-C 2-in-1 storage OTG: The Lexar JumpDrive Dual Drive D40E features USB Type-A and Type-C connectors in a slim, portable form factor for easy device compatibility
- Transfer speeds up to 100MB/s: Based on internal testing, performance may vary depending upon the host device, interface, and usage conditions. 1MB=1,000,000 bytes
- Plug and Play: Widely compatible with USB Type-C smartphones, tablets, laptops, Macs, and traditional Type-A devices, no software installation required. The 360° swivel design allows for easy switching between connectors without the hassle of losing a cap
- Durable & Compact: The Lexar D40E USB memory stick features a metal enclosure, withstands temperatures from 0° to 50° C (32°F to 122°F), and is lightweight at 26g with dimensions of 70.4 x 16.9 x 11.7mm
- Security & Warranty: Securely protects files using an advanced security software solution with 256-bit AES encryption. Backed by a Lexar 3-year limited warranty
Why HDD and SSD erasure are different
Magnetic HDDs
An HDD stores bits in predictable magnetic locations. A full-device overwrite can therefore address the sectors exposed through the drive’s normal block interface. A bootable utility is useful when the installed operating system itself is the target, because the operating system is not running from the disk being erased.
SSDs and NVMe drives
Flash storage writes through a controller and a translation layer. Wear leveling, garbage collection, over-provisioned blocks and bad-block replacement mean that an operating-system overwrite can miss physical locations that once held data. Repeating the overwrite also adds wear without proving that those locations were sanitized. Use a controller-level sanitize or secure-erase operation, or cryptographic erase when the device’s encryption design and key-management state support it.
Apple explicitly states that secure-erase options are unavailable in Disk Utility when the device is an SSD. That is why a Disk Utility overwrite setting should not be presented as an SSD solution. A successful format or ordinary erase may remove the file-system map while leaving recoverable data unless a device-aware sanitization process has also occurred.
Prepare safely before erasing anything
- Back up and test the backup. Copy documents, browser data, password-manager vaults, encryption keys and any licensed application data to a separate, verified location. A wipe is destructive and normally irreversible.
- Record the exact target. Note the computer model, drive capacity, serial number and connection type. In a multi-drive desktop, disconnect drives that are not being retired. Capacity alone is not a safe identifier.
- Decide whether you need the operating system afterward. A whole-drive wipe removes the recovery partition and boot loader. Have installation media, recovery credentials and any required network access ready before starting.
- Connect reliable power. Use AC power on a laptop and avoid a process that can be interrupted by sleep, a loose cable or a depleted battery.
- Protect encryption and account recovery information. For Windows, save the BitLocker recovery key before changing partitions. On a Mac, sign out of services as appropriate and make sure you know the administrator credentials needed to set up the machine again.
- Create the boot media if the tool requires it. A bootable USB flash drive carries the wiping environment; the USB itself does not erase a disk. Use a trusted image, write it with a verified imaging utility and label the device so it cannot be confused with a backup drive.
- Check the target one more time immediately before confirmation. Read the model, size and serial shown by the tool. A wrong selection can destroy the only copy of your data in seconds.
DBAN: a practical HDD-only option for personal use
DBAN is free software supplied by Blancco for personal data erasure. Its current documentation describes it as “HDD only, not SSDs,” and warns that it cannot guarantee complete sanitization, cannot provide a certificate of erasure, lacks hardware and customer support, and does not receive regular software updates. Treat it as a limited tool for a spare or retired magnetic disk, not as a general answer for modern flash storage or regulated disposal.
DBAN is bootable: it runs from a USB or disk and starts independently of the installed operating system. That makes it suitable for a drive containing the system you want to remove.
Rank #2
- High-speed USB 3.0 performance of up to 150MB/s(1) [(1) Write to drive up to 15x faster than standard USB 2.0 drives (4MB/s); varies by drive capacity. Up to 150MB/s read speed. USB 3.0 port required. Based on internal testing; performance may be lower depending on host device, usage conditions, and other factors; 1MB=1,000,000 bytes]
- Transfer a full-length movie in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.0 host device. Results may vary based on host device, file attributes and other factors]
- Transfer to drive up to 15 times faster than standard USB 2.0 drives(1)
- Sleek, durable metal casing
- Easy-to-use password protection for your private files(3) [(3)Password protection uses 128-bit AES encryption and is supported by Windows 7, Windows 8, Windows 10, and Mac OS X v10.9 plus; Software download required for Mac, visit the SanDisk SecureAccess support page]
How to wipe an HDD with DBAN
- On another working computer, obtain the current DBAN image from a trusted source and write it to a bootable USB flash drive. Do not place the image on the drive you intend to erase.
- Shut down the computer being retired, connect the USB drive and open the firmware boot menu. The key varies by manufacturer; common choices include a function key or a dedicated boot-menu button shown briefly at power-on.
- Boot the DBAN environment and wait for its disk list. If the target does not appear, stop rather than selecting a different disk; a firmware storage-mode setting, cable or controller may be the cause.
- Identify the target by model and capacity, then select only that HDD. Disconnect or disable other disks if possible.
- Choose the available wipe method and start the operation. Do not treat a larger pass count as a universal guarantee: the documentation does not promise complete sanitization for every drive.
- Keep the computer powered until DBAN reports completion or an error. Record the date, device identity and result for your own chain of custody.
- After completion, remove the USB and either install an operating system for reuse or leave the disk unallocated for recycling.
DBAN’s coverage limits
DBAN’s help documentation says most methods do not wipe remapped sectors and that DBAN does not wipe the Host Protected Area (HPA). Those are drive-managed or hidden regions that may not be exposed as ordinary user-addressable sectors. The tool also has no certificate or signed report that an auditor can independently verify. If those limitations are unacceptable, use a drive-aware enterprise workflow or destroy the media under an approved policy.
Microsoft SDelete for files and free space on a live Windows system
SDelete is a Microsoft Sysinternals command-line utility for securely deleting files and directories and cleaning unallocated space on logical disks. It can also accept physical disk numbers in its syntax, but that does not turn every invocation into a complete, device-aware sanitizer. It is the right category when Windows must stay usable while you remove selected data or remnants of previously deleted files.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Understand the switches
-pspecifies the number of overwrite passes for the selected operation.-ccleans free space on a volume.-zzeroes free space on a volume, which can reduce the amount of residual free-space data without claiming a full-media sanitization certificate.
Microsoft cautions that SDelete cleans file data but not file names located in free disk space. File-system metadata, snapshots, application caches, cloud copies and backups can also retain information outside the file content you target.
Delete a specific file or directory
- Open an elevated Command Prompt or PowerShell window. Use an administrator account only when the target requires it.
- Run SDelete with the target path and, where needed, a pass count. A representative form is
sdelete -p 2 C:UsersNameDocumentsold-file.docx. Replace the path with the exact item you intend to remove. - Review the confirmation and wait for the command to finish. Do not assume that a file with the same name in a backup or synchronized folder has been removed.
Clean unallocated space on a volume
- Close applications that may create new temporary files and identify the volume letter, such as
C:. - Run
sdelete -c C:to clean free space, or usesdelete -z C:when zeroing free space is the appropriate objective. - Allow the process to complete. A nearly full volume can take substantially longer because the utility must create and remove temporary data.
Do not use these examples as a blanket recommendation for securely retiring an SSD or NVMe drive. Flash translation layers can retain old physical pages beyond the logical volume that SDelete can see. For a whole-device retirement, use the drive’s sanitize or secure-erase mechanism instead.
Mac: Erase Assistant versus Disk Utility
Use Erase Assistant for a supported Mac being transferred
Apple directs owners of Macs with Apple silicon or Intel Macs with a T2 Security Chip that are being sold, traded in or given away to Erase Assistant. On supported macOS versions, open System Settings, choose General, select Transfer or Reset, and choose Erase All Content and Settings. The assistant guides you through administrator authentication, account sign-out and removal of user data before returning the Mac to its setup state. Labels vary slightly by macOS release, so use the option explicitly named “Erase All Content and Settings” when it is present.
Rank #3
- What You Get - 2 pack 64GB genuine USB 2.0 flash drives, 12-month warranty and lifetime friendly customer service
- Great for All Ages and Purposes – the thumb drives are suitable for storing digital data for school, business or daily usage. Apply to data storage of music, photos, movies and other files
- Easy to Use - Plug and play USB memory stick, no need to install any software. Support Windows 7 / 8 / 10 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, compatible with USB 2.0 and 1.1 ports
- Convenient Design - 360°metal swivel cap with matt surface and ring designed zip drive can protect USB connector, avoid to leave your fingerprint and easily attach to your key chain to avoid from losing and for easy carrying
- Brand Yourself - Brand the flash drive with your company's name and provide company's overview, policies, etc. to the newly joined employees or your customers
If that option is unavailable, the Mac may not have the required Apple silicon or T2 hardware, or its macOS version may not support the assistant. In that case, follow Apple’s recovery and Disk Utility procedure for the specific model, then reinstall macOS.
Recommended Free Tools
What Disk Utility can and cannot do
Disk Utility can erase a volume or storage device and is the normal Recovery-environment tool for a startup disk on Macs that do not use Erase Assistant. An erase removes the selected file-system structures and data exposed through that operation. However, Apple says: “With a solid-state drive (SSD), secure erase options are not available in Disk Utility.” Do not interpret the absence of a secure-erase control as a reason to perform repeated overwrites; select a platform- or device-aware sanitization process instead.
SSD and NVMe sanitization: use the device’s security features
For an SSD or NVMe drive, first identify the exact model and interface, then consult its supported sanitize or secure-erase procedure. Depending on the device, the operation may be exposed in firmware setup, a vendor maintenance environment, a storage-management utility or an enterprise erasure platform. The command must address the controller, not merely a mounted file system.
Secure erase and sanitize
A controller-level secure erase or sanitize operation instructs the drive to clear its addressable media according to the interface standard and the manufacturer’s implementation. The supported modes and completion reporting differ by model. Never interrupt power during the operation, and do not assume that a command accepted by one model is valid for another.
Cryptographic erase
Cryptographic erase destroys the encryption key that protects the data, making the encrypted contents infeasible to recover when the implementation and key lifecycle meet the required assurance level. It is not simply deleting a user password. Confirm that the drive was encrypted before the key was discarded, that backup keys are handled, and that the resulting event is recorded.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #4
- GOOD VALUE PACKAGE - 1 Pack 32GB Memory Stick USB 2.0 Flash Drives with great cost performance and high quality.
- BIG CAPACITY - The available capacity: 29.10GB-29.8GB, You can save the data of movies, music, photos, designs, programs, manuals, handouts in a high speed.Good performance in digital data storing, transferring and sharing with families, friends, workmates, clients and machines.
- EASY TO USE & PLUG AND WORK - Support windows 7 / 8 / 10 / Vista / XP / 2000 / ME / NT Linux and Mac OS, Compatible with USB2.0 and below.
- TWISTTURN DESIGN & EASY CARRY - The metal clip rotates 360° round the ABS plastic body which with rubber oil skin feeling finish. The capless design can avoid lossing of cap, and providing efficient protection to the USB port.
- WARRANTY & SUPPORT - SIMMAX logo is laser printed on the USB connector surface, our products are of good quality and we promise that any problem about the product within one year since you buy.
When physical destruction is the better control
If a drive is damaged, cannot expose its sanitize function, or contains data subject to a policy that demands destruction rather than reuse, use an approved physical-destruction process. Sanitization and destruction are different controls; document which one your policy requires.
Enterprise erasure and certificates
Organizations handling many devices, regulated records or customer-owned assets need more than a progress bar. They need target identification, repeatable procedures, verification results, operator and timestamp data, and a report that can be retained with the asset record.
Blancco Drive Eraser is the cited enterprise example. Its product information describes secure HDD and complex SSD erasure, support for ATA, eMMC, NVDIMM, NVMe, SATA, SCSI, SAS, Fibre Channel and USB interfaces, process automation, and digitally signed XML, PDF and CSV reports. It also lists named certifications or approvals. Those capabilities address mixed hardware and audit trails that personal utilities do not.
| Capability | Personal utilities | Enterprise erasure platform |
|---|---|---|
| Whole-device HDD wiping | Often available, with media-specific limits | Available with controlled workflows |
| SSD/NVMe controller-aware methods | Not consistently available | Designed for broad device and interface coverage |
| Verification and exception handling | Basic completion message or log | Structured verification, automation and failure records |
| Certificate or signed report | DBAN and SDelete do not provide one; Apple workflows do not create an independent erasure certificate | Digitally signed XML, PDF and CSV reports are described for Blancco Drive Eraser |
| Support and updates | Varies; DBAN warns that it lacks regular updates and support | Commercial support and licensing terms depend on the supplier |
Pricing, licensing and partner-program terms for enterprise products were not established in the cited product information. Obtain current terms directly from the supplier before budgeting or making a compliance claim.
Verification: what a completion message proves
A completion message proves that the selected software finished the operation it knows how to perform. It does not automatically prove that every physical location, remapped sector, hidden partition, snapshot or cloud copy is gone. Match verification to the media and the risk:
Best Value
- 【16GB Flash Drive】USB flash drives with 16GB capacity, meet your needs of daily use on work, school, home and travelling for photos, music, videos, files storage and transfer. IMEASON thumb drives can be used to store different files, easy to data backup.
- 【Metal Swivel Cap Design】USB thumb drive is metal swivel cover provides extra protection for the usb thumbdrive connector, no usb drive cap to lose; keychain design makes it easier to carry without worrying lose it.
- 【Wide Compatibility】USB drive supports Windows 7/8/10/11 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, also Supports USB 2.0 and 1.1 ports. USB Stick support TV, desktop, notebook computer, car, audio and other device. The USB Memory Stick is your great data storage and transfer companion with traveling and working.
- 【Easy to use】usb memory stick is plug and play without any software installation. Just simply plug the Flashdrive into the port of your USB-compatible devices such as computer, laptop to start data storage or transmission.
- 【What You Get】16 GB USB Flash Drive Thumb Drive, The default format of the usb storage flash drive is FAT32.
- Personal HDD reuse: record the drive identity, method, start and finish times, and any errors. Understand that DBAN’s own documentation excludes remapped sectors and the HPA from some coverage.
- Live Windows cleanup: retain the SDelete command, target path or volume and exit result. Check other copies such as backups, synchronization folders and restore points separately.
- Modern Mac transfer: use Erase Assistant where supported and complete the setup screen that confirms the previous account was removed. For other Macs, follow the model-specific Recovery procedure.
- Business or regulated disposal: require a report that identifies the device, method, verification result, operator and time, preferably with a digital signature and an exception workflow.
Common failures and how to recover
The computer boots the old operating system instead of the USB
Re-enter the firmware boot menu, choose the USB entry rather than the internal drive, and check that the image was written as bootable media. If the USB is not listed, try another port or recreate it from a verified image. Do not start erasure until the correct environment is running.
The target drive is missing
Stop and investigate the connection, storage-controller mode and firmware visibility. A missing disk is not permission to select a similarly sized disk. For NVMe devices, confirm that the tool supports the installed controller and that the drive is not hidden behind a hardware RAID layer.
The wipe stops with an error
Record the exact message and device identity. Check power, cables and drive health, then retry only after confirming that the method is appropriate for that media. A repeated failure on a drive that cannot expose a trustworthy sanitize result is a reason to use an enterprise tool or approved physical destruction, not to claim success.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →The drive is still asking for the old account
On a Mac, activation and account state are separate from deleting files. Use Erase Assistant on supported hardware and remove the Mac from the relevant account before transfer. On Windows, confirm that the old user profile, device-management enrollment and encryption-recovery records have been handled according to your organization’s process.
Quick Recap
Reinstalling an operating system after a whole-drive wipe
- Confirm the erasure record identifies the intended drive and reports completion without an unresolved error.
- Boot from official Windows or macOS installation or recovery media, not from the old internal disk.
- Create a new partition layout only after checking that no required data remains. A fresh layout is not a replacement for the sanitization step.
- Install updates, firmware and drivers, then create the new owner or hand the computer over at the initial setup screen.
- For a business asset, attach the erasure report and new asset status to the inventory record.
Which option is best for your situation?
- One retiring magnetic HDD, personal use: DBAN from a bootable USB is the simplest fit if you accept its no-certificate status and its limits around remapped sectors and the HPA.
- Files or deleted remnants on a working Windows PC: SDelete is appropriate when you need a command-line operation against files, directories or free space without shutting down Windows.
- A supported Apple silicon or T2 Mac being sold: use Erase Assistant, not a Disk Utility secure-erase setting that is unavailable for SSDs.
- Any SSD or NVMe whole-drive retirement: use a device-aware secure-erase, sanitize or cryptographic-erase workflow and verify its result.
- Multiple devices, customer data or compliance evidence: use enterprise drive-erasure software with hardware coverage, verification and signed reports; a free personal tool cannot supply that audit trail.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
