Data Recovery

How to Recover Deleted Files: What Works and What Destroys Them

Deleted files are usually recoverable — but only if you stop writing to the disk immediately. Here is what to do in the first ten minutes, and the methods that actually work.

Good news first: on a mechanical hard drive, a "deleted" file is usually still physically present. Windows normally only removes the pointer to it and marks the space as available. The data stays until something else overwrites it.

That word — overwrite — is why timing decides everything.

1. The first ten minutes decide the outcome

Stop using the drive right now. Every file you save, every web page your browser caches, every automatic update writes to that disk and can land on top of your deleted file.
  1. Do not install recovery software on the same drive you are recovering from — the install itself overwrites data.
  2. If the deleted files were on the system drive, shut the computer down properly rather than continuing to work.
  3. If this is an external drive or a memory card, unplug it.
  4. If the files matter financially or emotionally, do not experiment at all. Recover nothing and bring the drive in — every attempt reduces the recoverable total.

2. Check the easy places first

Before running any tool, rule out the simple explanations:

  • Recycle Bin — including "Restore all items". Some deletions go straight past it, but confirm first.
  • Previous Versions — right-click the folder → Properties → Previous Versions (Windows File History or restore points).
  • OneDrive or Google Drive trash — if the file lived in a synced folder, it is very likely recoverable from the cloud for 30 days.
  • Another device — if the file was emailed or shared, it may exist elsewhere entirely.

This step alone resolves a surprising share of "my file is gone forever" cases.

3. HDD versus SSD: very different odds

Storage typeRecovery chance after deletionWhy
Mechanical HDDHigh — often 90%+ if you stop earlyOnly the file table entry is removed; the data remains
SATA SSDModerate, and falls quicklyTRIM aggressively zeroes deleted blocks
NVMe SSDLower and time-criticalTRIM runs almost immediately in the background
Memory card / USBHigh if unused since deletionSimilar to HDD, but wear-levelling spreads writes
Encrypted drive (BitLocker)Low without the keyDeleted blocks are ciphertext once the key is gone
This is why "the technician said it was unrecoverable" most often happens on NVMe drives: TRIM had already cleared the blocks during normal use. Speed of action matters more than which tool you use.

4. Recovery software that genuinely works

If you have stopped using the drive and the file matters less than the cost of professional recovery, on-demand tools can work well. The principles that separate good attempts from bad ones:

  • Install the tool on a different drive. Portable versions are ideal.
  • Recover to a different drive. Never write recovered files back onto the source disk.
  • Do a full deep scan, not a quick one, and let it finish.
  • Preview before recovering. Photographs and documents can usually be previewed, which tells you the data is intact before you spend an hour recovering.

Work in this order: quick scan, then deep scan, then file-signature ("carving") search if the file table itself is damaged.

5. Signs this is a hardware failure, not a deletion

Software recovery cannot fix a drive that is physically failing. Stop and get help if you notice:

  • Clicking, ticking, grinding or beeping from the drive
  • The drive disappears and reappears in Windows
  • The BIOS does not detect it at all
  • Power-on takes minutes and folders load extremely slowly
  • A burning smell or visible physical damage

Running recovery software on a failing drive pushes it further toward total failure. A dying drive should be imaged by a specialist first, and only then recovered. That is the difference between a data recovery job and burning a drive out by accident.

6. When only some files come back

Partial recovery is normal. Two reasons:

  1. Fragmentation. A large file stored in many scattered pieces can lose the pieces that were overwritten.
  2. Overwriting. New data landed on top of some of the old file.

For photos and videos, a signature-based scan often recovers more than a file-table scan, because it reads the content's own structure rather than relying on a damaged index. Damaged photos can sometimes be repaired afterwards by rebuilding the file header.

7. Make sure this never matters again

The 3-2-1 rule is the industry standard, and it is not complicated:

  • 3 copies of anything important
  • 2 different types of storage (for example, laptop SSD plus external drive)
  • 1 copy stored off-site or in the cloud

Then test it. A backup you have never restored from is an assumption, not a backup. Once a month, open the backup and confirm a file actually opens.

Practical minimum: an external USB drive that you plug in weekly, plus cloud sync for documents. That combination survives drive failure, theft and accidental deletion — the three most common causes of data loss.

Parts, drives and tools

Tools and parts we use and recommend for this kind of work. Prices and availability change often — check the current listing before ordering.

Affiliate disclosure: some links above are affiliate links. If you buy through them we may earn a small commission at no extra cost to you. It never changes what we recommend or what we write.

Frequently asked questions

Can I recover files deleted from the Recycle Bin?

Yes, and often at very high rates on a mechanical hard drive — provided you stop using that drive immediately. On an NVMe SSD the window can be minutes, because TRIM clears the blocks in the background.

How long do I have before deleted files are gone forever?

On an HDD, until the space is overwritten — days or weeks of light use. On an SSD, possibly minutes. Treat every case as urgent.

Is paid data recovery software better than free?

Not inherently. What matters is doing a deep scan, recovering to a different drive, and previewing files before recovering. Free tools built on the same engines often achieve the same result for simple deletions.

Can a data recovery service get back files my software could not?

Yes, when the disk is failing or the file table is badly damaged. We image the drive at sector level first, then recover from the image — so the original is never worked on directly.

Do I lose files if my laptop will not turn on at all?

Usually not. In most cases the storage is intact and only the machine failed. We remove the drive, read it on another system, and recover your data from there.

Lost something important?

Stop using the drive and bring it in. We image it first, then attempt recovery from the image — your original data is never put at risk by the attempt.

Disclosure: some links on this page may be affiliate links. If you buy through them we may earn a small commission at no extra cost to you. We only recommend tools and services we would use ourselves.

Get the next guide by email

One practical computer or online-earning guide a month. No spam, unsubscribe anytime.

Keep reading

Related articles

WhatsApp