Why is only deleting to the trash or performing a standard reset risky?

Only management information is erased and the actual data remains, so it can be read with recovery software. Residual magnetism on HDDs and spare areas on SSDs are also factors. Erasure by overwriting or built-in commands is required before transfer.

How do erasure methods differ between HDDs and SSDs?

HDDs are effectively handled by full overwriting as the standard method. For SSDs, however, overwriting alone is insufficient because the controller distributes write locations. Built-in functions such as Secure Erase and cryptographic erase are appropriate.

What free tools should be used for reliable erasure?

The Windows built-in reset with data cleaning is the baseline. For HDDs, adding diskpart clean all is effective, and for SSDs, built-in erasure with manufacturer management software is effective. A Linux boot USB with nwipe also suits processing multiple devices.

What should be done if information leakage is suspected after a sale?

First change account passwords and check remote device deactivation. Organize transfer and erasure records, and contact the recipient and the collection operator. If damage is spreading, consult a specialist help desk or law enforcement agency.

Gadgets

Complete Data Wipe Before Selling Used PCs Explained, Free Tools Compared

Covers steps to erase leftover data with crypto erase and overwriting, HDD vs. SSD differences, and a comparison of free tools.

October 9, 2026 7 min read Reviewed & edited by the SINGULISM Editorial Team

Used PCData ErasureData Leak PreventionHDDSSD

Complete Data Wipe Before Selling Used PCs Explained, Free Tools Compared — Photo by Glen Carrie on Unsplash

Why Simple Deletion or Reset Is Not Enough

Deleting files to the trash or performing a standard reset may only erase the management information for storage locations. The actual data remains on the storage device and can be read with commercially available recovery software. In particular, HDDs retain data through residual magnetism, while SSDs retain data in spare areas and relocated blocks due to wear leveling. The Information-technology Promotion Agency, Japan (IPA) also calls for reliable erasure before transfer in its security alert (https://www.ipa.go.jp/security/security-alert/). When selling or disposing of a device, precautions must assume a third party will gain ownership.

Preparations Before Selling

Before starting work, copy any data you need to keep to external storage or cloud storage. After copying, verify that the copies open correctly and record whether they are encrypted. Next, unlink user information associated with the device. This includes removing the device from your Microsoft account (https://account.microsoft.com/), signing out of your Apple ID, and disabling the Find My feature. Checking the status of encryption features is also essential. If Windows BitLocker or macOS FileVault is enabled, store the recovery key separately before proceeding with erasure. Check peripheral devices as well. Forgetting to remove SD cards, USB receivers, and external storage devices is a common oversight in the field.

Different Erasure Methods for HDDs and SSDs

For HDDs, overwriting is the standard method. One or more full overwrites with zeros or random data makes recovery of old data extremely difficult. The U.S. National Institute of Standards and Technology media sanitization guidelines (https://www.nist.gov/) describe when to use overwriting versus physical destruction. SSDs are different. Because the internal controller distributes write locations, overwriting from the OS alone may not erase the entire drive. For SSDs, erasure using built-in device commands is effective. These include Secure Erase for SATA SSDs, Format NVM for NVMe SSDs, and cryptographic erase (Crypto Erase). Cryptographic erase disables decryption by destroying the encryption key. It completes in a short time and places little load on the device.

How to Fully Erase a Windows PC

1. Reset from the Recovery Environment

Open Recovery from Settings and choose Reset this PC. Select the option to remove all files and to clean the data. Details are available in the official Microsoft guide (https://support.microsoft.com/ja-jp/windows/). Processing time varies by capacity and method, and a 500GB HDD may take several hours.

2. Additional Erasure by Overwriting

If you have handled a large amount of sensitive information, add an overwrite step after the reset. One method is to launch diskpart on a terminal with administrator privileges and run clean all. This command writes zeros to the entire drive, and power interruption during the process must be avoided. Another method is to overwrite free space, for example with cipher /w:C.

3. Using Built-in Commands on SSD-Equipped PCs

Use the manufacturer’s management software to run Secure Erase or cryptographic erase. Examples include Samsung Magician, Western Digital Dashboard, and Crucial Storage Executive. Another method is to run nvme format –ses=2 from a USB-booted Linux environment. Before execution, double-check the device number and capacity to avoid selecting the wrong drive.

How to Fully Erase a Mac

The procedure differs for Apple Silicon models and Intel models. Model-specific steps are shown in the official Apple guide (https://support.apple.com/ja-jp/HT201065). On Apple Silicon models, use Erase All Content and Settings in System Settings. Combined with FileVault encryption, this completes erasure in a short time by discarding the key. On Intel models, start Disk Utility from macOS Recovery. Select the startup disk, erase it as APFS, and then reinstall macOS. In either case, sign out of your Apple ID and unpair peripherals before starting. If an Activation Lock display remains, the next owner will be prevented from activating the device.

Comparison of Free Tools

Windows built-in reset and data cleaning
There is no cost, and you only need to follow the on-screen guide.
The drawback is that the level of assurance on HDDs depends on the condition of the device.
It suits personal devices for everyday use when you want to finish quickly.
diskpart clean all / cipher
No additional installation is needed, and it can overwrite free space.
The drawback is that it does not guarantee coverage of spare areas on SSDs.
It is best positioned as an additional measure for HDD-equipped devices.
Manufacturer SSD management software
It supports built-in commands and enables erasure suited to SSD characteristics.
The drawback is that tools differ by manufacturer and cannot be used for other makers’ drives.
It is the first choice for SSD-equipped devices.
Linux boot USB with shred / nwipe
It can fully overwrite drives regardless of device type and can keep logs.
The drawback is that creating the boot media and specifying devices requires familiarity.
It suits batch processing at small offices handling multiple devices.
DBAN (Darik’s Boot and Nuke)
It has a proven record for batch overwriting of HDDs.
The drawback is limited compatibility with newer NVMe devices and UEFI boot environments.
It is safest to limit its use to disposal of older HDD-equipped devices.

Verification and Proof After Erasure

After erasure, keep the device stopped at the OS setup screen. A state ready for initial setup by the recipient is the appropriate endpoint. If possible, check the device list from a separate OS boot medium and inspect for any remaining old user names or old domains. For business use or outsourced disposal, work records must be created. Log the work date and time, target device serial number, erasure method, tool name, and operator. The Ministry of Internal Affairs and Communications information on preventing information leaks (https://www.soumu.go.jp/) also highlights the importance of preserving records. Records should be attached to the transfer agreement and kept by both parties.

Notes on Physical Destruction and Using

Collection Services For failed devices where overwriting or built-in commands cannot be used, physical destruction is an option. HDDs require puncturing or bending the platters, while SSDs require crushing the memory chips on the circuit board. For municipal collection boxes, manufacturer take-back, or pickup by certified operators, confirm in advance whether a certificate of destruction is issued. For mail-in collection, keep the tracking number and handover records in case of loss during transport. Paid destruction and free collection differ in whether destruction can be witnessed and in the scope of recycling. Do not choose by cost alone; compare based on certificate issuance and process control.

Editorial Opinion

The evaluation criteria are seen as three points: SSD support of the erasure method, working time, and verifiability. Rather than simply counting overwrite passes, support for cryptographic erase and built-in device commands should be emphasized. Tools that leave work records likely make it easier to meet accountability at transfer. The on-site pitfalls are seen as overlooking recovery partitions and external storage devices. Failure to unlink Microsoft accounts or Apple IDs is evaluated as a factor that prevents reuse. Confirming where BitLocker and FileVault recovery keys are stored is also described as an essential task. The future direction is seen as standardization of cryptographic erase. As SSD capacities grow, full overwriting will take longer, so reliance on logical erasure is evaluated to increase. Electronic issuance of erasure certificates by service providers is also said to likely become widespread.

References

Frequently Asked Questions

Why is only deleting to the trash or performing a standard reset risky?: Only management information is erased and the actual data remains, so it can be read with recovery software. Residual magnetism on HDDs and spare areas on SSDs are also factors. Erasure by overwriting or built-in commands is required before transfer.
How do erasure methods differ between HDDs and SSDs?: HDDs are effectively handled by full overwriting as the standard method. For SSDs, however, overwriting alone is insufficient because the controller distributes write locations. Built-in functions such as Secure Erase and cryptographic erase are appropriate.
What free tools should be used for reliable erasure?: The Windows built-in reset with data cleaning is the baseline. For HDDs, adding diskpart clean all is effective, and for SSDs, built-in erasure with manufacturer management software is effective. A Linux boot USB with nwipe also suits processing multiple devices.
What should be done if information leakage is suspected after a sale?: First change account passwords and check remote device deactivation. Organize transfer and erasure records, and contact the recipient and the collection operator. If damage is spreading, consult a specialist help desk or law enforcement agency.

Source: Singulism

Written by SINGULISM Editorial Team

Edited & reviewed by Kenichiro Yamamoto

If you find any factual errors or inaccuracies, we will promptly publish a correction. Please contact us via the contact form to request a correction.