Home › Mac Guides › Securely Delete Files

How to securely delete files on a Mac (the honest version)

Most advice about securely deleting files on a Mac is a decade out of date. It tells you to overwrite files multiple times, or to use tools that Apple removed years ago, on hardware where overwriting does not do what people think it does. The genuinely secure approach on a modern Mac is different, simpler, and mostly something you set up once. Here is what actually works, and where the older methods still have a legitimate use.

Updated 2026-08-02 · Written by the CleanerMac team · macOS 13–15 tested

Why overwriting no longer works on an SSD

On a spinning hard disk, a file occupied specific physical sectors. Writing zeros over those sectors physically replaced the data, which is why overwrite tools made sense.

SSDs do not work that way. The controller sits between the filesystem and the flash, and it constantly relocates data through a process called wear levelling, so that no memory cell wears out faster than the rest. When you overwrite a file, the drive typically writes the new data to a fresh block and marks the old block as invalid rather than erasing it in place. The original contents remain in flash until garbage collection eventually reclaims that block, and you have no way to control or verify when that happens. SSDs also ship with spare capacity your operating system cannot address, which can hold copies of your data indefinitely.

APFS makes this further removed from the old model. It is copy-on-write, so a modification writes new blocks rather than changing existing ones, and snapshots (used by Time Machine and by macOS updates) can retain the previous version of a file for days after you deleted it. Overwriting the visible file does nothing to a snapshot that still references the old blocks.

The result is that no user-space tool can promise your data is unrecoverable from an SSD by overwriting. Any product claiming otherwise is overselling.

What Apple removed, and why

Apple did not remove these features to annoy anyone. It removed them because leaving them in place implied a guarantee the hardware could not honour, and a false sense of security is worse than none.

The real answer: FileVault plus ordinary deletion

Full-disk encryption solves the problem from the other direction. If every block on the drive is encrypted, then a recovered fragment of a deleted file is just ciphertext. There is nothing to reconstruct without the key.

1. Open System Settings, Privacy and Security, FileVault and turn it on.
2. Choose how to store the recovery key. If you pick the local key, write it down and keep it somewhere safe, because losing it means losing the data permanently.
3. Wait for the initial encryption to complete. On Apple Silicon Macs the internal SSD is always encrypted at the hardware level, and turning on FileVault ties that encryption to your password rather than making the disk newly encrypted, so it completes almost instantly.
4. From then on, deleting a file normally and emptying the Trash is sufficient. Any residue left in flash is unreadable.

This is the single most effective thing you can do, it costs essentially nothing in performance on modern hardware, and it protects you in the scenario that actually matters most: a lost or stolen laptop.

Erasing an entire Mac before you sell it

For a whole machine, do not attempt file-by-file deletion at all. On any Mac with Apple Silicon or a T2 chip, use System Settings, General, Transfer or Reset, Erase All Content and Settings. This performs a cryptographic erase: it destroys the encryption keys held in the Secure Enclave, which renders every block on the drive permanently unreadable in an instant. It is both faster and more thorough than any overwrite could be. On an older Intel Mac without a T2, boot to Recovery and erase the drive from Disk Utility, ideally with FileVault having been enabled beforehand.

Where secure overwrite still genuinely helps

None of the above means overwriting is useless. It means it should be applied where the physics still support it:

• Spinning hard disks. Traditional platter drives, including most external desktop backup drives and older iMacs and Mac minis, still map logical sectors to fixed physical locations. Overwriting works exactly as advertised there.
• External USB drives and SD cards formatted as HFS+ or exFAT that are not SSDs.
• Defeating casual recovery. The common threat is not a forensics laboratory. It is someone running an off-the-shelf undelete tool on a machine they have access to. Overwriting a file before deleting it defeats every tool in that category, on any drive type.
• Compliance and process requirements. Some workplace policies require a documented overwrite step regardless of the underlying media.

CleanerMac includes a Secure Erase feature for exactly these situations. It overwrites the contents of items you have already put in the Trash before unlinking them, which reliably prevents recovery on mechanical drives and blocks consumer undelete tools everywhere else. We would rather be straightforward about the limits: on an internal Apple Silicon SSD it is a useful extra step against casual recovery, not a guarantee against a determined forensic examination. FileVault is what provides that guarantee, and it is free and built in.

The places copies of your file are still hiding

Even a perfect deletion of one file often misses its siblings. Before you consider something gone, check:

• Time Machine and local snapshots. APFS keeps local snapshots for up to 24 hours by default. List them with tmutil listlocalsnapshots /.
• iCloud Drive, Dropbox and Google Drive, including their web-based trash and version history, which can retain files for 30 days or more.
• Mail attachments and Messages history, which keep their own copies independent of the file in Finder.
• App-specific version history, since macOS document versioning stores prior revisions in a hidden system folder.
• Backups on external drives, which are frequently forgotten entirely.
• The Trash itself. An obvious one, but deleting from a folder without emptying the Trash achieves nothing.

This is a good moment to also see what else is accumulating: our guides to finding large files and freeing up space cover the routine side, and uninstalling apps completely matters here too, because deleted apps leave behind databases that can contain your data.

A practical policy

1. Turn FileVault on today, on every Mac you own. This is the step that matters.
2. Delete files normally and empty the Trash. On an encrypted drive that is sufficient.
3. Use secure overwrite for external mechanical drives, and when you want to defeat consumer recovery tools.
4. Use Erase All Content and Settings when disposing of or selling a Mac.
5. Remember to check cloud services and backups, which is where recovered files usually come from in practice.

Keeping the machine tidy generally helps too, simply because fewer stray copies exist. The routine in our maintenance checklist covers that side.

Delete sensitive files with confidence

Secure erase for the drives where it counts, plus a full cleanup.

Download CleanerMac — free for 3 days

macOS 13+ · Apple Silicon & Intel · $24.99 once, no subscription