Permanently Delete Files on Windows: File Shredder Guide

Why Delete and the Recycle Bin are not permanent

When you press Delete, Windows moves the file to the Recycle Bin so you can restore it. Emptying the bin, or pressing Shift+Delete to skip it, removes the file from view and marks its space as free. The contents usually stay on the drive until something new is written over them.

That is why recovery tools exist. Microsoft’s Windows File Recovery app is built to recover files deleted from local storage, and Microsoft notes that success depends on whether the free space has already been overwritten, especially on a solid-state drive (SSD).

Copies also live elsewhere: synced cloud folders, backups, restore points, email attachments, and the temporary or autosave files that programs create while you work. To permanently delete a file in any practical sense, you have to account for every copy, not only the one you can see.

How secure file delete works on a hard drive

On a traditional spinning hard drive (HDD), software can usually write to the same physical place where a file lived. A file shredder relies on that: it overwrites the file’s contents with new data and then deletes it, so the old bytes are replaced instead of simply being marked as free.

NIST SP 800-88 Rev. 2, NIST’s guideline on media sanitization, says overwriting a drive’s user-addressable storage typically hinders recovery, even against laboratory techniques. It describes multi-pass recipes, such as DoD-style patterns, as past practice. A higher pass count is not, by itself, proof of anything.

Even on a hard drive, overwriting one file has limits. It does not reach copies stored elsewhere, older versions held in shadow copies, or sectors the drive has set aside as faulty. Overwriting a single file is a good step on an HDD, not a guarantee.

Why a file shredder is unreliable on SSDs

SSDs, USB flash drives and memory cards work differently. A controller inside the drive decides where data physically goes. When software overwrites a file, the controller usually writes the new data to a different block and leaves the old block for later cleanup. Three features are responsible:

Wear levelling spreads writes across memory cells to extend the drive’s life, so a rewrite rarely lands on the old cell.
Over-provisioning keeps spare capacity that Windows cannot address. NIST gives the example of a drive with more physical storage than it shows the user.
TRIM lets Windows tell the SSD which blocks are no longer in use. Microsoft documents that TRIM is enabled by default on NTFS. The drive may erase those blocks later, but you cannot see or confirm when.

NIST states that on flash storage with spare cells and wear levelling, a user cannot sanitize all previous data by overwriting through the normal interface, and that multi-pass overwrites on SSDs with over-provisioning give very little protection. No file shredder can honestly promise that a single file on an SSD cannot be recovered.

What to do instead on an SSD

Because you cannot reliably erase one file on an SSD, protect the whole drive and plan for its disposal.

Encrypt the whole drive. BitLocker encrypts entire volumes, and Microsoft describes it as protecting data on devices that are lost, stolen, decommissioned or recycled. BitLocker is included with Windows Pro, Enterprise and Education. On qualifying hardware, Device encryption turns BitLocker on automatically, including on Windows Home.
Turn it on before sensitive files arrive. Turning it on later protects your current files, but older leftovers can remain in free space or in an SSD’s spare blocks.
Keep the recovery key somewhere safe and separate from the PC, so encryption never locks you out of your own data.
For whole-device disposal, use the drive’s own sanitize or secure-erase command, usually through the drive maker’s utility or the computer’s firmware settings. NIST notes that dedicated sanitize commands can address storage areas more effectively than overwriting, but you are trusting the vendor to have implemented them correctly.
Understand cryptographic erase. NIST describes destroying the encryption key of encrypted storage as a fast purge technique when its conditions are met. It only helps if the data was encrypted in the first place.

Built-in Windows options for secure file delete

Windows has no one-click secure delete for a single file, but these built-in tools help when used for the right job.

Shift+Delete skips the Recycle Bin. It is convenient, not secure: the data stays on the drive until it is overwritten.
cipher /w is part of the cipher command for NTFS volumes. Microsoft documents that the /w parameter removes data from unused disk space on the entire volume that contains the folder you name, for example cipher /w:C:\.
Reset this PC with Remove everything and the clean data option is meant for selling, donating or recycling a computer. Microsoft says cleaning makes removed files harder to recover, and also that it is aimed at consumers and does not meet government and industry data erasure standards.

Run cipher /w only after you have deleted the files and emptied the Recycle Bin. It works on free space, so it never removes files that still exist. Expect it to take a long time on a large drive, and close other programs first. On an HDD it is a sensible follow-up; on an SSD it inherits the same limits as any other overwrite.

Check cloud copies, backups and shadow copies

Many leftover copies are not on the drive at all. Before you call a file deleted, check each of these:

Cloud sync folders. If the file was in a synced folder, the deletion syncs to the service, where it usually lands in an online recycle bin. Microsoft says OneDrive can restore deleted items for 30 days on personal accounts and 93 days on work or school accounts, unless an administrator changed that. Empty the online bin and review version history and shared links.
Other devices and apps. Phones, tablets and other PCs signed in to the same account may hold synced or downloaded copies, as may email attachments and chat apps.
Backups. File History, Windows Backup, external drives and network storage keep their own copies until those backups are deleted or retired.
Restore points and shadow copies. The Volume Shadow Copy Service, which System Restore uses, keeps the old contents of changed blocks in a separate storage area. Run vssadmin list shadows from an administrator Command Prompt to see what exists. Deleting restore points removes your ability to roll Windows back, so weigh that trade-off.

Disposal checklist before you sell, donate or recycle a PC

Copy anything you need to storage you control, and confirm that the copies open.
Sign out of your accounts and remove the PC from services that limit how many devices you can use.
Find out what kind of drive you have: open Defragment and Optimize Drives and check the Media type column for solid state drive or hard disk drive.
Check whether BitLocker or Device encryption is on, and know where the recovery key is stored.
For a hard drive, use Reset this PC with the clean data option, or a full-drive overwrite tool. For an SSD, use the drive maker’s sanitize or secure-erase tool, ideally on a drive that has been encrypted since day one.
For highly sensitive data, or a drive that no longer works, consider physical destruction through a reputable service. NIST treats destruction as its own sanitization method for cases like these.
Write down what you did: date, device, serial number, method and who did it. NIST SP 800-88 includes a sample certificate of sanitization you can adapt.
If the device holds business, client or patient records, follow your retention schedule and any legal hold first. Requirements vary by industry and by state.

Do you need multiple overwrite passes? Shredding algorithms explained

Data recovery software can restore a deleted file because Windows marks its space as free instead of erasing it. Tools such as Windows File Recovery read file-system records, like the NTFS master file table, or scan the drive for known file headers. Either way, they can rebuild only data that has not been overwritten. Our guide to Windows File Recovery limits covers that side.

A file shredder tries to securely delete files by overwriting their contents before deleting them. Many let you choose a shredding algorithm: a recipe for how many passes to write and which patterns to use. Two names come up most often:

DoD 5220.22-M. Named after a U.S. Department of Defense industrial security manual, it usually means several passes of set patterns. NIST notes that DoD removed the overwriting specifications from that manual in 2006. The manual is now Part 117 of Title 32 of the Code of Federal Regulations.
Gutmann. A 35-pass sequence from Peter Gutmann’s 1996 paper, presented at a USENIX security conference. Many of its passes targeted disk encoding methods of that era. Gutmann later wrote that running all 35 on one drive is pointless, and that a few random passes are the best you can do on newer drives.

NIST SP 800-88 Rev. 2, published in September 2025 to replace Revision 1, settles the question. It clarifies that its Clear method does not need multi-pass overwriting, and it calls the DoD pass-count language obsolete. On SSDs with over-provisioning, it says multi-pass practices should be avoided because they give very little protection.

For sensitive information, coverage matters more than passes. NIST prefers sanitizing a whole drive over part of it whenever possible, and when you need more assurance it points to its purge or destroy methods. Overwriting data multiple times mainly multiplies the time a shred takes. To shred files from your hard drive, a single pass plus the copy checks earlier in this guide is a sound plan.

Where ASL Shredder fits

ASL Shredder provides selected-file removal for Windows, with local receipts and explicit storage limits. It offers overwrite options only for disks declared as magnetic. On SSDs and flash storage it performs a logical deletion, and its product page states plainly that this is not a sanitization guarantee.

It does not claim NIST Clear, Purge or device destruction, and it does not present a higher pass count as stronger assurance. A receipt for one removed file does not show that backups, synced copies or shadow copies are gone, so pair it with the checks above.

Frequently asked questions

Does Shift+Delete permanently delete files?

It skips the Recycle Bin, so the file is no longer easy to restore from Windows. The data usually stays on the drive until it is overwritten, and recovery tools may still find it, especially on a hard drive.

Does a file shredder work on an SSD?

Not reliably. Wear levelling, over-provisioning and TRIM mean an overwrite usually lands somewhere other than the original data. Use full-disk encryption from the start, and use the drive’s own sanitize or secure-erase command when you dispose of it.

How many overwrite passes does a hard drive need?

NIST SP 800-88 says overwriting a hard drive’s addressable storage typically hinders recovery, and it treats multi-pass recipes as past practice. Making sure every copy is covered matters more than the pass count. On an SSD, adding passes does not solve the problem.

Is the DoD 5220.22-M wipe method still required?

NIST SP 800-88 Rev. 2 says its Clear method does not need multiple passes, and it calls the DoD pass-count language obsolete. DoD removed the overwriting specifications from that manual in 2006. A contract or internal policy may still name the method, so check what yours actually requires.

Is cipher /w safe to run for secure file delete?

It only overwrites unused space on the chosen volume and leaves existing files alone. It can take a long time and is most useful on hard drives. Back up first, as with any disk maintenance, and do not rely on it to reach every block of an SSD.

What is the safest way to erase a PC before recycling it?

Back up first, then match the method to the drive: Reset this PC with clean data or a full overwrite for a hard drive, and the maker’s sanitize tool for an SSD. For highly sensitive data, consider physical destruction, and keep a written record.

Related guides

Explore the complete product

Read features, current access and limitations

How to Permanently Delete Files on Windows and When a File Shredder Works