Secure Erase / Wipe : Definition and Methods

Secure Erase / Wipe - and the Basic Methods​

A secure erase or more commonly referred to as a wipe is a way to over-write all existing data on a Hard Disk Drive (HDD) / Solid State Drive (SSD) with at least one set of binary zeroes ( 0 ) or ones ( 1 ) so the data cannot be retrieved.

Contrary to popular belief, doing a full format with Windows 7 only over-writes the old disk format configuration data (the MBR) with the new and checks for sector errors, then marks the remaining space to be over-written as needed, it does not over-write (remove) any other data at all, it's all still there including code from previous Operating Systems and all of the old personal data.

It is also very useful before starting the Windows installation process to correct for disk format errors of many kinds, to include over-writing the Linux / Grub boot loader, that is known to cause serious issues when installing Windows to a HDD / SSD that has had Grub as a loader in the past; also to correct installation errors when clean installing Windows 7 to a space that originally contained Windows XP.

A wipe is very effective to 'remove' any previous malware infections and start fresh.

   Warning

All the methods outlined in this guide have the capability to over-write any and all data on an entire HDD / SSD so be completely sure you are using the correct method on the correct drive.

These first 2 methods below, to include the clean and the clean all command(s) will only do the entire HDD / SSD they will not do a single partition on a HDD / SSD, they will do the whole drive.

   Note

The HDD / SSD partition structure can be viewed in Windows disk management by typing diskmgmt.msc into the Windows start menu search box; it is always better to be safe than sorry, so if you have any doubts, make back-ups of anything you would not want to lose permanently, to external media before you start any of these procedures.

Method One

This is very useful while using Windows to do a wipe of a HDD / SSD that does not have the Windows partition on it as it will not allow a "System" partition to be done; if you just need to over-write the Master Boot Record or "disk format configuration data" use the clean command listed at #6, if you need to over-write the entire HDD / SSD use the clean all command listed at #7 in this tutorial.
Disk - Clean and Clean All with Diskpart Command


Method Two

If you need to do a secure erase / wipe to a HDD / SSD before you start a Windows installation, see Step One and then to use the command-line to create the partition(s) to do the installation to, see Step Two #2 or #3 of this tutorial.

Have a look here to view additional important information on this entire process.
SSD / HDD : Optimize for Windows Reinstallation


Method Three

This is similar to what is commonly known as a file shredder, making it no longer necessary to use third-party software to do a secure delete (secure erase) of files or any other data you need to over-write so they can't be recovered from your system without your knowledge.

This does not simply delete data it's pointed at, it completely over-writes it.
Permanently Delete - Add to Context Menu
If you are an adventurous sort and would like to use the command line instead, type sdelete in an elevated command window to secure delete files or data of any type you may need to wipe / over-write.


Method Four

If you don't want to wipe the entire HDD / SSD, you can do a partition-specific wipe of any single partition using the Partition Wizard free software, have a look at Option Two in the tutorial at this link below to get some ideas.
Partition Wizard : Use the Bootable CD
Enjoy!

Related Tutorials

---

• http://www.sevenforums.com/tutorials/55728-file-delete-command-prompt.html
• http://www.sevenforums.com/tutorials/91629-windows-explorer-add-remove-delete-button.html
• http://www.sevenforums.com/tutorials/55721-folder-delete-command-prompt.html
• http://www.sevenforums.com/tutorials/12205-recycle-bin-permanently-delete-items-automatically.html

 

[Golden]

Quality! I'm happy to see that METHOD 3 correctly states that a secure erase can be achieved easily without the need for 3rd party applications, or algorithms such as DoD or Gutmann etc.

Nicely done Sir!

 

[Bare Foot Kid]

Quality! I'm happy to see that METHOD 3 correctly states that a secure erase can be achieved easily without the need for 3rd party applications, or algorithms such as DoD or Gutmann etc.

Nicely done Sir!

Thank you sir, I appreciate the kind words!

 

[seavixen32]

Thanks for a very useful addition to our arsenal of tools in the fight against the nasties in cyberland - my list of bookmarks gets ever bigger.

 

[Bare Foot Kid]

Thank you Andrew, I'm pleased it's finding a use.

 

[Arc]

Great work, Ted A perfect chapter of the textbook

 

[Bare Foot Kid]

Thank you friend Archan!

 

[Joan Archer]

Another brilliant Tutorial Ted, well done, there's no better place than here to see a wealth of brilliantly written gems that help us all make the most of our systems.

 

[Bare Foot Kid]

Thank you for the kind words Miss Joan!

 

[danwat1234]

Actually, full format may wipe the data?

I've heard on the web that in Windows Vista and newer, a full format actually does wipe all data on the volume, not just the file system records. It doesn't just do a read surface scan?
Can anyone confirm?

 

[Golden]

I've heard on the web that in Windows Vista and newer, a full format actually does wipe all data on the volume, not just the file system records. It doesn't just do a read surface scan?
Can anyone confirm?

No, that information is incorrect. If that was the case, tools such as DISKPART CLEAN ALL etc. etc. would not exist.

 

[soewhaty]

Hi guys. I can't seem to find a forum post that I really need. Could anyone point me towards the thread explaining how to do a Secure Delete on a whole drive during (or I should say) right before doing a clean installation of Win7? I remember seeing a tutorial thread on that by Brink or some of the other big names around here, but can't seem to find it now. I think it was done via CMD and Diskpart while the user is in the OS installation environment of Win7. 10x in advance!

EDIT:
LOL - my bad. I think I found it myself! Must be this - SSD / HDD : Optimize for Windows Reinstallation If there are any other such tutorial threads please do mention them.

 

[Layback Bear]

Is this what you are looking for?

By Brink:

Disk - Clean and Clean All with Diskpart Command

 

[soewhaty]

Is this what you are looking for?

By Brink:

Disk - Clean and Clean All with Diskpart Command

Thank you, friend! That is a nice one as well, but I think I was looking particularly for the one I actually found - SSD / HDD : Optimize for Windows Reinstallation
10x for your input though

Basically needed to know how to do a secure delete just before I do a clean OS install! That's all. If there are any other tutorials than the one I mentioned, then by all means everybody is welcome to mention them though I do think the one I found (by Bare Foot Kid) is indeed extensive and thorough enough

 

[Layback Bear]

If Bare Foot Kid's tutorial meets your need, by all means use it.

My understanding was you were looking for options, so I posted one option.

 

[soewhaty]

If Bare Foot Kid's tutorial meets your need, by all means use it.

My understanding was you were looking for options, so I posted one option.

Thank you, sir! Appreciated!

 

[joe7dust]

No, that information is incorrect. If that was the case, tools such as DISKPART CLEAN ALL etc. etc. would not exist.

Can you explain this a little better? I have been told that files may be recovered easily after quick format, yet after full format you cannot. I am not talking about some NSA theory that has really only practical application in research and forensics. (if you are worried about it in that case you should probably melt the drive down anyway)


In real world terms using sub $5k data recovery equipment and software, what exactly does clean all do that prevents recovery where full format would not be secure?

 

[soewhaty]

I have been told that files may be recovered easily after quick format, yet after full format you cannot.

...

In real world terms using sub $5k data recovery equipment and software, what exactly does clean all do that prevents recovery where full format would not be secure?

I've read that even after full format files can still be recovered. CCleaner for example offers 1,3,7, and 35 passes ... the idea being that the more passes the less likely it is to recover the data. But that means (by no means) that data is fully irrecoverable.

As to your 2nd statement - yes, I too want to know what clean all does to prevent recovery. Running the clean all command one time equates to just 1 pass. So if you wanna do it the CCleaner way then you have to run the command 35 times if you want 35 passes. I'm not saying that's necessary (and it'll take forever [CCleaner should be faster in that regard]) but for the sake of knowing I too am curious.

 

[joe7dust]

I've read that even after full format files can still be recovered. CCleaner for example offers 1,3,7, and 35 passes ... the idea being that the more passes the less likely it is to recover the data. But that means (by no means) that data is fully irrecoverable.

As to your 2nd statement - yes, I too want to know what clean all does to prevent recovery. Running the clean all command one time equates to just 1 pass. So if you wanna do it the CCleaner way then you have to run the command 35 times if you want 35 passes. I'm not saying that's necessary (and it'll take forever [CCleaner should be faster in that regard]) but for the sake of knowing I too am curious.

I'm pretty sure the technique required to do that recovery is more theory than anything. I have not seen any consumer/prosumer level data recovery software that even mentions magnetic leftovers. (when a drive has been filled with zeros, there can be traces of the previous bit values at the surface level of the drive but it is my understanding that this requires very special equipment and microscopic analysis not just popping it on a SATA connector and running some windows software)

 

[file3456]

If you have a platter drive you want to use DBAN. If you have a SSD you want to use secure erase in Parted Magic. Never use DBAN with a SSD. Writes help destroy SSDs. Although, SSDs have been made better, but you just don't want thousands upon thousands of writes on a SSD.

As to Ccleaner's wipe methods, they suck. I used it once and then ran some recovery software and was still able to recover the data.

If you want to be absolutely sure, and it's a platter drive, you can encrypt the drive with Truecrypt or Veracrypt first. The run DBAN. With flash-based storage like SSDs encryption is a little different since the data may still be stored on other cells and thus encryption may be redundant. If you ever chose to use whole disk encryption with a SSD it is best to install the OS, then immediately encrypt the drive with Truecrypt or Veracrypt. But with Truecrypt you need to learn and understand about Evil maid.