How can I securely format a solid-state drive?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}
When selling / throwing away / giving away HDDs I always use DBAN to do a DoD wipe first.
Is this still a valid thing to do on an SSD?
Will it have an adverse effect on the SSD's lifespan?
ssd format secure-erase dban
add a comment |
When selling / throwing away / giving away HDDs I always use DBAN to do a DoD wipe first.
Is this still a valid thing to do on an SSD?
Will it have an adverse effect on the SSD's lifespan?
ssd format secure-erase dban
Also see Reliably Erasing Data From Flash-Based Solid State Drives by Wei, Grupp, Spada, and Swanson.
– jww
Oct 6 '18 at 10:31
add a comment |
When selling / throwing away / giving away HDDs I always use DBAN to do a DoD wipe first.
Is this still a valid thing to do on an SSD?
Will it have an adverse effect on the SSD's lifespan?
ssd format secure-erase dban
When selling / throwing away / giving away HDDs I always use DBAN to do a DoD wipe first.
Is this still a valid thing to do on an SSD?
Will it have an adverse effect on the SSD's lifespan?
ssd format secure-erase dban
ssd format secure-erase dban
edited Jun 20 '13 at 17:47
Breakthrough
31.7k993141
31.7k993141
asked Jan 27 '10 at 23:14
ShevekShevek
14.3k54075
14.3k54075
Also see Reliably Erasing Data From Flash-Based Solid State Drives by Wei, Grupp, Spada, and Swanson.
– jww
Oct 6 '18 at 10:31
add a comment |
Also see Reliably Erasing Data From Flash-Based Solid State Drives by Wei, Grupp, Spada, and Swanson.
– jww
Oct 6 '18 at 10:31
Also see Reliably Erasing Data From Flash-Based Solid State Drives by Wei, Grupp, Spada, and Swanson.
– jww
Oct 6 '18 at 10:31
Also see Reliably Erasing Data From Flash-Based Solid State Drives by Wei, Grupp, Spada, and Swanson.
– jww
Oct 6 '18 at 10:31
add a comment |
3 Answers
3
active
oldest
votes
A DoD wipe with DBAN would be unnecessary ...
SSD Security: Erase Solid State Drives Data
While it is still not common sense to securely erase data on hard drives (read: Securely Erase Files) before computers
or hard drives are sold or given away the matter becomes even more complicated where SSD – Solid State Drives – are concerned. The positive aspect of Solid State Drives is that data cannot be recovered if it is overwritten on the drive which means that only one pass would be needed to erase the data on the SSD. The bad news however is that not the operating system but the controller is specifying where the data is written on the SSD.
This in effect means that all methods of overwriting free space are not sufficient for erasing the data securely on those drives. This also means as well that it is not possible to erase specific files securely on the SSD. Users who want to delete data securely on SSDs have therefor the following options at hand:
- Encryption
- Format
- Filling the Drive
Encryption is surely the best method of ensuring that the data on a SSD is secure as it cannot be accessed without decryption. Formatting the drive on the other hand is only reasonable if no data on that drive is needed anymore. It would otherwise require extensive backup and restoration procedures. Filling the drive with data might work as well as it would overwrite anything on the drive as well.
Source
add a comment |
After the fact, but things have changed a lot in the last 10 months or so - a lot of SSD manufacturers are including (or will be soon) a secure erase function in their optional software utilities that will do the single wipe pass for you properly from a controller level. (I know Intel already has this and it works great.)
1
This. Most SSD utilities now include this function built in. It is a standard built into the ATA specification called ATA Secure Erase, and the drive utilities trigger this process on the drive.
– music2myear
Feb 25 '16 at 18:26
add a comment |
I agree with Molly minus the encryption. Encryption is a good way to protect data, but it doesn't erase it.
If you want to erase the whole SSD, DBAN on a single pass would work. I would set it to pseudorandom so if anyone looked it would look like it could be encrypted.
If you want to only wipe a file, using a conventional wipe program (one for a hard drive) would only make it save from undelete tools. I don't know of any data carving tools that are SSD/flash wear leveling aware, but I'm sure if they aren't out there, they will be. The most effective way to wipe a file from a SSD/flash is to fill all the free space.
All that said, I don't know if all the spare cells in the flash would be overwritten. (Most flash have spare cell just like hard drive have spare sectors.)
Also, strictly speaking, overwriting (no matter the passes done) is no longer authorized by the DoD to sanitization hard drives. Also, many software say DoD wipe but do the 3-pass and not the 7-pass. In addition, I hear from many people talking about hard drive magnetics and the best wipe is a multipass random pattern. They say having a known pattern would make reconstruction easier.
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f101465%2fhow-can-i-securely-format-a-solid-state-drive%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
3 Answers
3
active
oldest
votes
3 Answers
3
active
oldest
votes
active
oldest
votes
active
oldest
votes
A DoD wipe with DBAN would be unnecessary ...
SSD Security: Erase Solid State Drives Data
While it is still not common sense to securely erase data on hard drives (read: Securely Erase Files) before computers
or hard drives are sold or given away the matter becomes even more complicated where SSD – Solid State Drives – are concerned. The positive aspect of Solid State Drives is that data cannot be recovered if it is overwritten on the drive which means that only one pass would be needed to erase the data on the SSD. The bad news however is that not the operating system but the controller is specifying where the data is written on the SSD.
This in effect means that all methods of overwriting free space are not sufficient for erasing the data securely on those drives. This also means as well that it is not possible to erase specific files securely on the SSD. Users who want to delete data securely on SSDs have therefor the following options at hand:
- Encryption
- Format
- Filling the Drive
Encryption is surely the best method of ensuring that the data on a SSD is secure as it cannot be accessed without decryption. Formatting the drive on the other hand is only reasonable if no data on that drive is needed anymore. It would otherwise require extensive backup and restoration procedures. Filling the drive with data might work as well as it would overwrite anything on the drive as well.
Source
add a comment |
A DoD wipe with DBAN would be unnecessary ...
SSD Security: Erase Solid State Drives Data
While it is still not common sense to securely erase data on hard drives (read: Securely Erase Files) before computers
or hard drives are sold or given away the matter becomes even more complicated where SSD – Solid State Drives – are concerned. The positive aspect of Solid State Drives is that data cannot be recovered if it is overwritten on the drive which means that only one pass would be needed to erase the data on the SSD. The bad news however is that not the operating system but the controller is specifying where the data is written on the SSD.
This in effect means that all methods of overwriting free space are not sufficient for erasing the data securely on those drives. This also means as well that it is not possible to erase specific files securely on the SSD. Users who want to delete data securely on SSDs have therefor the following options at hand:
- Encryption
- Format
- Filling the Drive
Encryption is surely the best method of ensuring that the data on a SSD is secure as it cannot be accessed without decryption. Formatting the drive on the other hand is only reasonable if no data on that drive is needed anymore. It would otherwise require extensive backup and restoration procedures. Filling the drive with data might work as well as it would overwrite anything on the drive as well.
Source
add a comment |
A DoD wipe with DBAN would be unnecessary ...
SSD Security: Erase Solid State Drives Data
While it is still not common sense to securely erase data on hard drives (read: Securely Erase Files) before computers
or hard drives are sold or given away the matter becomes even more complicated where SSD – Solid State Drives – are concerned. The positive aspect of Solid State Drives is that data cannot be recovered if it is overwritten on the drive which means that only one pass would be needed to erase the data on the SSD. The bad news however is that not the operating system but the controller is specifying where the data is written on the SSD.
This in effect means that all methods of overwriting free space are not sufficient for erasing the data securely on those drives. This also means as well that it is not possible to erase specific files securely on the SSD. Users who want to delete data securely on SSDs have therefor the following options at hand:
- Encryption
- Format
- Filling the Drive
Encryption is surely the best method of ensuring that the data on a SSD is secure as it cannot be accessed without decryption. Formatting the drive on the other hand is only reasonable if no data on that drive is needed anymore. It would otherwise require extensive backup and restoration procedures. Filling the drive with data might work as well as it would overwrite anything on the drive as well.
Source
A DoD wipe with DBAN would be unnecessary ...
SSD Security: Erase Solid State Drives Data
While it is still not common sense to securely erase data on hard drives (read: Securely Erase Files) before computers
or hard drives are sold or given away the matter becomes even more complicated where SSD – Solid State Drives – are concerned. The positive aspect of Solid State Drives is that data cannot be recovered if it is overwritten on the drive which means that only one pass would be needed to erase the data on the SSD. The bad news however is that not the operating system but the controller is specifying where the data is written on the SSD.
This in effect means that all methods of overwriting free space are not sufficient for erasing the data securely on those drives. This also means as well that it is not possible to erase specific files securely on the SSD. Users who want to delete data securely on SSDs have therefor the following options at hand:
- Encryption
- Format
- Filling the Drive
Encryption is surely the best method of ensuring that the data on a SSD is secure as it cannot be accessed without decryption. Formatting the drive on the other hand is only reasonable if no data on that drive is needed anymore. It would otherwise require extensive backup and restoration procedures. Filling the drive with data might work as well as it would overwrite anything on the drive as well.
Source
edited Mar 8 at 3:37
JakeGould
32.8k10100142
32.8k10100142
answered Jan 27 '10 at 23:18
Molly7244
add a comment |
add a comment |
After the fact, but things have changed a lot in the last 10 months or so - a lot of SSD manufacturers are including (or will be soon) a secure erase function in their optional software utilities that will do the single wipe pass for you properly from a controller level. (I know Intel already has this and it works great.)
1
This. Most SSD utilities now include this function built in. It is a standard built into the ATA specification called ATA Secure Erase, and the drive utilities trigger this process on the drive.
– music2myear
Feb 25 '16 at 18:26
add a comment |
After the fact, but things have changed a lot in the last 10 months or so - a lot of SSD manufacturers are including (or will be soon) a secure erase function in their optional software utilities that will do the single wipe pass for you properly from a controller level. (I know Intel already has this and it works great.)
1
This. Most SSD utilities now include this function built in. It is a standard built into the ATA specification called ATA Secure Erase, and the drive utilities trigger this process on the drive.
– music2myear
Feb 25 '16 at 18:26
add a comment |
After the fact, but things have changed a lot in the last 10 months or so - a lot of SSD manufacturers are including (or will be soon) a secure erase function in their optional software utilities that will do the single wipe pass for you properly from a controller level. (I know Intel already has this and it works great.)
After the fact, but things have changed a lot in the last 10 months or so - a lot of SSD manufacturers are including (or will be soon) a secure erase function in their optional software utilities that will do the single wipe pass for you properly from a controller level. (I know Intel already has this and it works great.)
answered Oct 21 '10 at 19:38
ShinraiShinrai
17.6k34272
17.6k34272
1
This. Most SSD utilities now include this function built in. It is a standard built into the ATA specification called ATA Secure Erase, and the drive utilities trigger this process on the drive.
– music2myear
Feb 25 '16 at 18:26
add a comment |
1
This. Most SSD utilities now include this function built in. It is a standard built into the ATA specification called ATA Secure Erase, and the drive utilities trigger this process on the drive.
– music2myear
Feb 25 '16 at 18:26
1
1
This. Most SSD utilities now include this function built in. It is a standard built into the ATA specification called ATA Secure Erase, and the drive utilities trigger this process on the drive.
– music2myear
Feb 25 '16 at 18:26
This. Most SSD utilities now include this function built in. It is a standard built into the ATA specification called ATA Secure Erase, and the drive utilities trigger this process on the drive.
– music2myear
Feb 25 '16 at 18:26
add a comment |
I agree with Molly minus the encryption. Encryption is a good way to protect data, but it doesn't erase it.
If you want to erase the whole SSD, DBAN on a single pass would work. I would set it to pseudorandom so if anyone looked it would look like it could be encrypted.
If you want to only wipe a file, using a conventional wipe program (one for a hard drive) would only make it save from undelete tools. I don't know of any data carving tools that are SSD/flash wear leveling aware, but I'm sure if they aren't out there, they will be. The most effective way to wipe a file from a SSD/flash is to fill all the free space.
All that said, I don't know if all the spare cells in the flash would be overwritten. (Most flash have spare cell just like hard drive have spare sectors.)
Also, strictly speaking, overwriting (no matter the passes done) is no longer authorized by the DoD to sanitization hard drives. Also, many software say DoD wipe but do the 3-pass and not the 7-pass. In addition, I hear from many people talking about hard drive magnetics and the best wipe is a multipass random pattern. They say having a known pattern would make reconstruction easier.
add a comment |
I agree with Molly minus the encryption. Encryption is a good way to protect data, but it doesn't erase it.
If you want to erase the whole SSD, DBAN on a single pass would work. I would set it to pseudorandom so if anyone looked it would look like it could be encrypted.
If you want to only wipe a file, using a conventional wipe program (one for a hard drive) would only make it save from undelete tools. I don't know of any data carving tools that are SSD/flash wear leveling aware, but I'm sure if they aren't out there, they will be. The most effective way to wipe a file from a SSD/flash is to fill all the free space.
All that said, I don't know if all the spare cells in the flash would be overwritten. (Most flash have spare cell just like hard drive have spare sectors.)
Also, strictly speaking, overwriting (no matter the passes done) is no longer authorized by the DoD to sanitization hard drives. Also, many software say DoD wipe but do the 3-pass and not the 7-pass. In addition, I hear from many people talking about hard drive magnetics and the best wipe is a multipass random pattern. They say having a known pattern would make reconstruction easier.
add a comment |
I agree with Molly minus the encryption. Encryption is a good way to protect data, but it doesn't erase it.
If you want to erase the whole SSD, DBAN on a single pass would work. I would set it to pseudorandom so if anyone looked it would look like it could be encrypted.
If you want to only wipe a file, using a conventional wipe program (one for a hard drive) would only make it save from undelete tools. I don't know of any data carving tools that are SSD/flash wear leveling aware, but I'm sure if they aren't out there, they will be. The most effective way to wipe a file from a SSD/flash is to fill all the free space.
All that said, I don't know if all the spare cells in the flash would be overwritten. (Most flash have spare cell just like hard drive have spare sectors.)
Also, strictly speaking, overwriting (no matter the passes done) is no longer authorized by the DoD to sanitization hard drives. Also, many software say DoD wipe but do the 3-pass and not the 7-pass. In addition, I hear from many people talking about hard drive magnetics and the best wipe is a multipass random pattern. They say having a known pattern would make reconstruction easier.
I agree with Molly minus the encryption. Encryption is a good way to protect data, but it doesn't erase it.
If you want to erase the whole SSD, DBAN on a single pass would work. I would set it to pseudorandom so if anyone looked it would look like it could be encrypted.
If you want to only wipe a file, using a conventional wipe program (one for a hard drive) would only make it save from undelete tools. I don't know of any data carving tools that are SSD/flash wear leveling aware, but I'm sure if they aren't out there, they will be. The most effective way to wipe a file from a SSD/flash is to fill all the free space.
All that said, I don't know if all the spare cells in the flash would be overwritten. (Most flash have spare cell just like hard drive have spare sectors.)
Also, strictly speaking, overwriting (no matter the passes done) is no longer authorized by the DoD to sanitization hard drives. Also, many software say DoD wipe but do the 3-pass and not the 7-pass. In addition, I hear from many people talking about hard drive magnetics and the best wipe is a multipass random pattern. They say having a known pattern would make reconstruction easier.
answered Jan 28 '10 at 4:20
Scott McClenningScott McClenning
3,4611418
3,4611418
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f101465%2fhow-can-i-securely-format-a-solid-state-drive%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Also see Reliably Erasing Data From Flash-Based Solid State Drives by Wei, Grupp, Spada, and Swanson.
– jww
Oct 6 '18 at 10:31