Deleting a file removes its entry from the filesystem's index. The data itself remains on the storage until something else happens to write over that space, which may be soon or may be never.
Recovery software exploits exactly that, and it is why "I deleted it" is not the same as "it is gone" — a distinction that matters when disposing of a device or handling something sensitive.
What changed in 2026
- Encryption-based erasure became the standard method. Destroying the key replaced overwriting as the practical approach.
- Solid-state storage became universal. The techniques designed for spinning disks stopped being appropriate.
- Cloud persistence got more attention. Recognition that local deletion does nothing about synced copies.
- Built-in secure erase improved. Operating system and firmware options made proper erasure more accessible.
Why overwriting stopped working
On a spinning hard disk, overwriting a file's location with other data genuinely destroyed the original. That is what secure deletion tools did, sometimes several times over.
Solid-state drives work differently. They cannot overwrite in place — a block must be erased before rewriting — and they use wear levelling to distribute writes evenly across the drive, extending its life.
The consequence: when you overwrite a file, the drive frequently writes the new data to a different physical location and marks the old one for later erasure. The original data remains in the old location until the drive gets around to clearing it, and you have no control over when.
Drives also reserve spare capacity that is invisible to the operating system, which may hold copies you cannot address at all.
So the old approach is ineffective and actively harmful — it wears the drive for no benefit.
| Storage type |
Overwriting effective? |
| Spinning hard disk |
Yes |
| Solid-state drive |
Unreliably |
| Flash memory cards |
Unreliably |
| Encrypted device |
Unnecessary — destroy the key |
Destroy the key instead
The method that works on modern hardware, and it is elegant.
If the whole drive is encrypted, the data is unreadable without the key. Destroying the key renders everything on the drive permanently unrecoverable, instantly, regardless of where the physical bits are or which spare blocks hold copies.
This is what "erase all content" does on modern phones and what a proper secure-erase does on an encrypted drive — it does not overwrite anything; it discards the key.
That makes disposal straightforward: ensure the device is encrypted, then use the platform's erase function. Fast, complete, and it does not wear the drive.
If a device is not encrypted, enabling encryption first and then erasing achieves the same result — the drive is encrypted with a key that is then destroyed.
What this does not reach
Cloud copies. Deleting a file locally does nothing to synced copies, backups, or version history in a cloud service. Those must be deleted separately, and some services retain deleted items for a period regardless.
Backups. A file deleted from your laptop remains in every backup taken before deletion. Genuinely removing something means addressing the backups too, which is frequently impractical and worth knowing.
Other people's copies. Anything shared exists wherever it was sent.
Physical destruction remains the answer where a drive has failed and cannot be erased, or where the sensitivity justifies it. For a drive that will not power on, destruction is the only reliable option.
Common mistakes
- Assuming deleted means gone. It means dereferenced.
- Multi-pass overwriting on solid-state drives. Slow, wearing, unreliable.
- Selling a device without secure erasure. Data may be recoverable.
- Forgetting cloud and backup copies. Local deletion does not reach them.
- Emptying the trash and considering it done. Same problem.
- Not encrypting before disposal. Removes the fastest reliable method.
- Overlooking memory cards and external drives. Same issues, frequently forgotten.
FAQ
How do I dispose of a phone?
Sign out of accounts, then use the built-in erase function. On an encrypted device — which all modern phones are — that discards the key and the data is unrecoverable.
What about a drive that will not boot?
If you cannot run a secure erase, physical destruction is the reliable option. Removing the drive and destroying it is straightforward on most machines.
Do file shredder tools still work?
On spinning disks, yes. On solid-state storage, unreliably. Encryption-based erasure is the better approach on modern hardware.
How do I remove something from a cloud service?
Through the service's own deletion, including any trash or version history it maintains. Some services retain deleted content for a period, and some retain it indefinitely for their own purposes.
Where to go next
For the encryption that makes erasure work, read device encryption explained. For metadata that survives in files you share, metadata privacy explained, and for physical document disposal, shredding schedule guide.