Destroy sensitive information

مُحدَّث في25 March 2024

الفهرس

…يجري تحميل الفهرس…

    A phone or computer uses its memory like someone who works very hard to save paper: it writes in pencil, and piles up the files you tell it to delete (like temporary files or the files you remove from your device's Trash, or Recycle Bin). When it needs more space, it erases writing from paper in the "deleted" pile, and writes on that part of the paper again to add new files.

    So when you drag a file to the Trash and then empty the dustbin, your phone or computer does not really delete that file. What happens is more like removing labels from a filing cabinet, but leaving the documents in it. When you "delete" a file you are only telling your phone or computer that it can use the space where the deleted file was saved for something else. Until your device saves another file in that space, the original file can still be seen by someone who has access to your device, and the right tools.

    The tools we recommend in this chapter do more than just delete the file by erasing the words. They scribble over the top of every word with random nonsense several times so no trace of the original file is left behind. Security experts agree that "wiping" your phone's or computer's unused space in this way is effective enough to keep an intruder from reading your erased files.

    There is a big exception to this. In all phones, in newer computers and in external storage devices, there is a risk that solid-state drives, or SSDs, as well as USB sticks and SD cards will not fully erase their contents because of a technique called "wear leveling." Learn more about the challenges of erasing SSDs in the Surveillance Self-Defense guide on deleting data securely. To make it harder to recover what you have erased from an SSD drive it is crucial to encrypt these drives as soon as possible, particularly if you are going to dispose of them. It is also important to encrypt drives before you re-use them.

    Secure deletion tools will not erase files you have not deleted or specifically decided to wipe. Still, be careful with software like this. If it is your first time using these tools, carefully follow the steps detailed in this chapter in order to erase files safely and effectively. There are a few ways to wipe sensitive data from your devices. You can wipe the contents of your trash, the "empty" space on the drive, or the entire drive.

    Clean traces of your work off your device

    Set a regular schedule to wipe your device's unused memory securely. This will ensure that sensitive files do not remain on your devices, hard drives, USB sticks, removable memory cards (SD cards) from cameras, mobile phones or portable music players, and any other device where you store sensitive information.

    Android

    • Use CCleaner for Android to remove temporary and hidden files, like application cache, browser history, clipboard content and old call logs.

      To run CCleaner for Android for the first time, see their guide.

    • After deleting temporary and hidden files with CCleaner for Android, use Extirpater to wipe free space in your device.

      Note that Extirpater is not available in the Google Play store. Install F-Droid's APK first and install Extirpater through it. Use this app with care as it can permanently damage the memory of your device if you run it too often.

    iOS

    Linux and Windows

    macOS

    Learn why we recommend this

    We recommend cleaning traces of your work to remove the history of your activity on a device, combat malware and help your device work better. These files are hard to find and remove safely. In the next few paragraphs, we will tell you more about these files.

    Your web browser saves text, images, cookies, account information, the history of websites you have visited and personal data used to complete online forms. Our section on Firefox can tell you more about this data and how to delete it more often.

    Your device and the apps on it also save temporary versions of files you are working on. This way, if a computer or phone crashes or there is a power outage, you don't lose all the work you have done. If you wipe the file you were working on, you remove the current version, but your device continues to store older temporary files in ways that are hard to find and remove without special tools. Apps and devices also save all sorts of other shortcuts to make our lives easier, including what you copy to the clipboard.

    Wipe a whole device

    Before you proceed to wiping an entire device, create an encrypted backup of your important files, as discussed in our guide Backup and recover from information loss.

    When you are sure you have backed up all important data, you can follow the instructions in this section.

    All devices

    Mobile devices

    Android

    iOS

    Computers

    • It is not possible for a device to thoroughly erase itself. You will need to start your computer from an external drive to do this.
    • If you need to wipe an HDD hard drive, consider using ShredOS. This may take some time, and you will need to download ShredOS, write it to an empty USB stick and then run it from the USB device.
      • Note that while ShredOS can be used to wipe SSDs, these drives work in a way that makes it impossible for this tool to reliably wipe them completely. This is why it's always best to fully encrypt SSDs with a strong password in order to make them impossible to read for anyone who doesn't have the decryption password.
    • Once you have wiped the entire disk, consider re-installing the operating system. Be sure to set up full-disk encryption.
    • Unfortunately, on newer computers that use an SSD, it is harder to guarantee that a drive is fully erased. However, you can take the steps described for each operating system in the following sections.
      • Encrypting your entire SSD with a strong password will also make the data impossible to read without your permission.

    macOS

    • To erase your macOS computer and reset it to factory settings, follow the steps in the official documentation.
    • On macOS computers with SSD drives, secure erase options are not available in Disk Utility. To protect the data stored in your SSD, enable full-disk encryption on the drive you want to erase. This ensures the contents of your hard drive look like random nonsense to anyone who does not have your device password.
    • On older Mac computers that have Intel chips, you can erase your hard drive securely using Disk Utility or Erase Assistant.

    Windows

    • Extract the internal disk of your computer. For instructions on how to do this, search for "remove hard drive" and the brand and model of your computer on iFixit.
    • Put the drive you removed into an external USB "drive enclosure."
    • Plug the hard disk you want to erase into a computer with Eraser installed.
    • Delete everything on the drive you have extracted.
    • Then use Eraser to wipe all of the drive's unallocated space. You might need to let this procedure run overnight, as it can be quite slow.
    Learn why we recommend this

    When you wipe an entire hard drive, you will need to run your computer's operating system off a different drive because a program like Eraser cannot thoroughly erase the device that is running it. This will require physically removing from your computer the drive you want to erase and essentially turning it into an external hard drive.

    Before you sell, give away or dispose of an old computer or phone

    • If possible, when you are selling or giving away an old computer, do not give the new owner the hard drive; but if you must, be sure you have fully wiped it using the instructions in Wipe a whole device.
    • If you are selling, giving away or disposing of a mobile device or an external storage device, wipe it fully using the instructions in Wipe a whole device.
    • Remove USB drives, SD cards, SIM cards, dongles and other small devices that may be inserted or plugged into your device.
    • If you are disposing of an old hard drive, consider destroying it physically as well as wiping it. You can do this by hammering nails through the drive, or with a drill. Do not burn or pour acid on a drive, and do not put it in the microwave. Physically destroying data storage is always the safest option.
    • You can also keep a wiped drive that is in good condition to re-use it yourself, in a new device or as an external hard drive.
    • Use the following instructions as an additional checklist when taking the steps we have listed in the section on securely erasing your device.

    Android

    iOS

    Linux

    macOS

    Windows

    Learn why we recommend this

    The process of wiping a drive may take quite some time. When you are giving a computer to someone else, it may be difficult to negotiate not giving them the hard drive. But when you are selling or otherwise disposing of a device, it is worth taking these precautions to ensure you are not accidentally giving away your sensitive files to someone else.