Secure erase SSD alternatives? (not able through manufacturer software)


ddiaconu21

Active member
Local time
2:58 PM
Posts
19
OS
Windows 11
Hi guys,

So I'm currently having some issues with my 2 SSD drives (one external Samsung T5 SSD and one Intel SSD 600p Series SSDPEKKW256G7).

1. Samsung T5 SSD can't be secure erased from Samsung Magician because it's done via USB and it's not a internal SSD.
2. The Intel SSD can't be secure erased because it's the main SSD (Intel isn't allowing it) and Windows 8/10 don't accept secure erase. (more info here: Securely Erase Data on Intel® Solid State Drives That Needs...)

Is diskpart/dban a good alternative for "secure erase"? As far as I know, secure erase between HDD and SSD is fairly different and methods like diskpart/dban aren't that efficient and sometimes do more bad than good (overwriting an SSD overuses it for no constructive reason). What other choice do I have beside the proprietary software that is not working in my case?

Context: I want to have a clean start for my laptop and external SSD (or as fresh as possible in this case). This actually started by trying to figure out on how to use my T5 SSD with both my Mac Mini and my laptop and since I had to format, I thought I should do a deep cleaning (I had a lot of useless/random files written over time, including running Linux on it). Not planning on selling them or hiding my secret CIA/FBI/NSA folder.

Thanks!
 
Windows Build/Version
22471/11

My Computer

System One

  • OS
    Windows 11
Hi there
simply write X'00' (HEX zero) on every physical address (cluster etc) .

Plenty of free software around to do that.

You could even use a standard "Hex editor" to erase data areas where you have data you want to erase. (Takes longer though).


Cheers
jimbo
 

My Computer

System One

  • OS
    Windows XP,7,10,11 Linux Arch Linux
    Computer type
    PC/Desktop
    CPU
    2 X Intel i7
Courtesy of our friends at Google: https://www.makeuseof.com/tag/securely-erase-ssd-without-destroying/

It's not the clearest article I've read. It claims that an SSD can be securely erased without overwriting it, but one method (Parted Magic) is said to write zeroes. For the truly paranoid, an SSD may pose concerns because of the way its data are managed.

Regardless, I wouldn't be concerned about the amount of wear done by a single write. The Intel SSDPEKKW256G7 is rated at 144 TBW, which means its expected life is equivalent to writing the 256GB drive over 560 times. Even a multi-pass write wouldn't be significant unless you do it many times.
 

My Computers

System One System Two

  • OS
    Windows 11 22631.2861
    Computer type
    PC/Desktop
    Manufacturer/Model
    homebuilt
    CPU
    Amd Threadripper 7970X
    Motherboard
    Gigabyte TRX50 Aero D
    Memory
    128GB (4 X 32) Kingston DDR5 5200 (RDIMM)
    Graphics Card(s)
    Gigabyte RTX 4090 OC
    Sound Card
    none (USB to speakers), Realtek
    Monitor(s) Displays
    Philips 27E1N8900 OLED
    Screen Resolution
    3840 X 2160 @ 60Hz
    Hard Drives
    Crucial T700 2TB M.2 NVME SSD
    WD 4TB Blue SATA SSD
    Seagate 18TB IronWolf Pro
    PSU
    eVGA SuperNOVA 1600 GT
    Case
    Lian Li 011 Dynamic Evo XL
    Cooling
    Alphacool Eisbaer Pro Aurora 360, with 3 Phanteks T30 fans
    Keyboard
    Logitech K120 (wired)
    Mouse
    Logitech M500s (wired)
    Internet Speed
    1200 Mbps
  • Operating System
    windows 11 22631.2861
    Computer type
    PC/Desktop
    Manufacturer/Model
    homebuilt
    CPU
    Intel I9-13900K
    Motherboard
    Asus RoG Strix Z690-E
    Memory
    64GB G.Skill DDR5-6000
    Graphics card(s)
    Gigabyte RTX 3090 ti
    Sound Card
    built in Realtek
    Monitor(s) Displays
    Asus PA329C
    Screen Resolution
    3840 X 2160 @60Hz
    Hard Drives
    WDC SN850 1TB
    8 TB Seagate Ironwolf
    4TB Seagate Ironwolf
    PSU
    eVGA SuperNOVA 1300 GT
    Case
    Lian Li 011 Dynamic Evo
    Cooling
    Corsair iCUE H150i ELITE CAPELLIX Liquid CPU Cooler
    Mouse
    Logitech M500s (wired)
    Keyboard
    Logitech K120 (wired)
Courtesy of our friends at Google: https://www.makeuseof.com/tag/securely-erase-ssd-without-destroying/

It's not the clearest article I've read. It claims that an SSD can be securely erased without overwriting it, but one method (Parted Magic) is said to write zeroes. For the truly paranoid, an SSD may pose concerns because of the way its data are managed.

Regardless, I wouldn't be concerned about the amount of wear done by a single write. The Intel SSDPEKKW256G7 is rated at 144 TBW, which means its expected life is equivalent to writing the 256GB drive over 560 times. Even a multi-pass write wouldn't be significant unless you do it many times.
Thank you for the elaborate answer.
Now my question is: what separates Parted Magic from stuff like diskpart?
 

My Computer

System One

  • OS
    Windows 11
Thank you for the elaborate answer.
Now my question is: what separates Parted Magic from stuff like diskpart?
I'm not the best person to answer this, but...

diskpart seems to have no ability to over-write the disk, so it cannot do a secure erase.
 

My Computers

System One System Two

  • OS
    Windows 11 22631.2861
    Computer type
    PC/Desktop
    Manufacturer/Model
    homebuilt
    CPU
    Amd Threadripper 7970X
    Motherboard
    Gigabyte TRX50 Aero D
    Memory
    128GB (4 X 32) Kingston DDR5 5200 (RDIMM)
    Graphics Card(s)
    Gigabyte RTX 4090 OC
    Sound Card
    none (USB to speakers), Realtek
    Monitor(s) Displays
    Philips 27E1N8900 OLED
    Screen Resolution
    3840 X 2160 @ 60Hz
    Hard Drives
    Crucial T700 2TB M.2 NVME SSD
    WD 4TB Blue SATA SSD
    Seagate 18TB IronWolf Pro
    PSU
    eVGA SuperNOVA 1600 GT
    Case
    Lian Li 011 Dynamic Evo XL
    Cooling
    Alphacool Eisbaer Pro Aurora 360, with 3 Phanteks T30 fans
    Keyboard
    Logitech K120 (wired)
    Mouse
    Logitech M500s (wired)
    Internet Speed
    1200 Mbps
  • Operating System
    windows 11 22631.2861
    Computer type
    PC/Desktop
    Manufacturer/Model
    homebuilt
    CPU
    Intel I9-13900K
    Motherboard
    Asus RoG Strix Z690-E
    Memory
    64GB G.Skill DDR5-6000
    Graphics card(s)
    Gigabyte RTX 3090 ti
    Sound Card
    built in Realtek
    Monitor(s) Displays
    Asus PA329C
    Screen Resolution
    3840 X 2160 @60Hz
    Hard Drives
    WDC SN850 1TB
    8 TB Seagate Ironwolf
    4TB Seagate Ironwolf
    PSU
    eVGA SuperNOVA 1300 GT
    Case
    Lian Li 011 Dynamic Evo
    Cooling
    Corsair iCUE H150i ELITE CAPELLIX Liquid CPU Cooler
    Mouse
    Logitech M500s (wired)
    Keyboard
    Logitech K120 (wired)
Hi guys,

As a wrap up, Parted Magic worked on my internal NVMe (secure erase), but there external SSD/USB storages can't be securely erased due to them not being connected directly to the internals (just through USB).

It seems there is no proper secure erase option for portable storage.
Thanks!
 

My Computer

System One

  • OS
    Windows 11
Hi guys,

So I'm currently having some issues with my 2 SSD drives (one external Samsung T5 SSD and one Intel SSD 600p Series SSDPEKKW256G7).

1. Samsung T5 SSD can't be secure erased from Samsung Magician because it's done via USB and it's not a internal SSD.

Thanks!
I have a Samsung SSD and Magician and it allowed me to create a USB stick I could use to do a secure erase. It worked fine.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Ryzen 5600X
    Motherboard
    ASRock Steel Legend
    Memory
    16GB
    Graphics Card(s)
    EVGA GT 710
    Sound Card
    None
    Monitor(s) Displays
    23",24", 19" - flat panels
    Screen Resolution
    1920x1200
    Hard Drives
    None - only M.2 SATA and NVMe drives
    PSU
    750W
    Case
    Antec
    Cooling
    stock Wraith cooler
    Keyboard
    Corsair gaming
    Mouse
    Logitech M720
    Internet Speed
    1Gb
This is an external SSD
Then, you don't need a bootable utility.

Does the secure erase feature in the free version of CCleaner work for you? CCleaner Makes Your Computer Faster & More Secure | Official Website

(Caution: CCleaner is now owned by Avast, and their installer sometimes tries to install Avast products. If you don't want them, you have to opt out. The default is to install the Avast stuff. They don't obscure the choices, but inattentive clicking may give you something that you don't want.)
 

My Computers

System One System Two

  • OS
    Windows 11 22631.2861
    Computer type
    PC/Desktop
    Manufacturer/Model
    homebuilt
    CPU
    Amd Threadripper 7970X
    Motherboard
    Gigabyte TRX50 Aero D
    Memory
    128GB (4 X 32) Kingston DDR5 5200 (RDIMM)
    Graphics Card(s)
    Gigabyte RTX 4090 OC
    Sound Card
    none (USB to speakers), Realtek
    Monitor(s) Displays
    Philips 27E1N8900 OLED
    Screen Resolution
    3840 X 2160 @ 60Hz
    Hard Drives
    Crucial T700 2TB M.2 NVME SSD
    WD 4TB Blue SATA SSD
    Seagate 18TB IronWolf Pro
    PSU
    eVGA SuperNOVA 1600 GT
    Case
    Lian Li 011 Dynamic Evo XL
    Cooling
    Alphacool Eisbaer Pro Aurora 360, with 3 Phanteks T30 fans
    Keyboard
    Logitech K120 (wired)
    Mouse
    Logitech M500s (wired)
    Internet Speed
    1200 Mbps
  • Operating System
    windows 11 22631.2861
    Computer type
    PC/Desktop
    Manufacturer/Model
    homebuilt
    CPU
    Intel I9-13900K
    Motherboard
    Asus RoG Strix Z690-E
    Memory
    64GB G.Skill DDR5-6000
    Graphics card(s)
    Gigabyte RTX 3090 ti
    Sound Card
    built in Realtek
    Monitor(s) Displays
    Asus PA329C
    Screen Resolution
    3840 X 2160 @60Hz
    Hard Drives
    WDC SN850 1TB
    8 TB Seagate Ironwolf
    4TB Seagate Ironwolf
    PSU
    eVGA SuperNOVA 1300 GT
    Case
    Lian Li 011 Dynamic Evo
    Cooling
    Corsair iCUE H150i ELITE CAPELLIX Liquid CPU Cooler
    Mouse
    Logitech M500s (wired)
    Keyboard
    Logitech K120 (wired)
What is secure? if you wish to stop a parent or sibling from reading your digital diary then there are many ways such as have been noted. If however you want to protect data from professional recovery or Government agencies Law enforcement then the only way is total physical destruction of the media.

Overwritten drives are recovered all the time by the pros and many a business have been very grateful even though the cost is great for these services
 

My Computers

System One System Two

  • OS
    Windows 11 Pro x64 [Latest Release Preview] [Win11 PRO HighEnd MUP-00005 DD]
    Computer type
    PC/Desktop
    Manufacturer/Model
    Scan 3XS to my design
    CPU
    AMD RYZEN 9 7950X OEM
    Motherboard
    *3XS*ASUS TUF B650 PLUS WIFI
    Memory
    64GB [2x32GB Corsair Vengeance 560 AMD DDR5]
    Graphics Card(s)
    3XS* ASUS DUAL RTX 4060 OC 8G
    Sound Card
    On motherboard Feeding SPDiF 5.1 system [plus local sound to each monitor]
    Monitor(s) Displays
    32" UHD 32 Bit HDR Monitor + 43" UHD 4K 32Bit HDR TV
    Screen Resolution
    2 x 3840 x 2160
    Hard Drives
    3XS Samsung 980Pro 2TB M.2 PCIe4 4 x 8TB Data + Various Externals from 1TB to 8TB, 10TB NAS
    PSU
    3XS Corsair RM850x 850w Fully Modular
    Case
    FDesign Define 7 XL BK TGL Case - Black
    Cooling
    3XS iCUE H150i ELITE Liquid Cool, Quiet Case fans
    Keyboard
    Wireless Logitec MX Keys + K830 [Depending on where I'm Sat]
    Mouse
    Wireless Logitec - MX Master 3S +
    Internet Speed
    950 MB Down 55 MB Up
    Browser
    Latest Chrome
    Antivirus
    BitDefender Total Security [Latest]
    Other Info
    Also run...
    Dell XPS 17 Laptop
    HP Laptop 8GB - Windows 10 Pro x64 HP 15.2"
    Nexus 7 Android tablet [x2]
    Samsung 10.2" tablet
    Blackview 10.2 Tablet
    Sony Z3 Android Smartphone
    Samsung S9 Plus Smartphone
    Wacom Pro Medium Pen Pad
    Wacom Pro Small Pen Pad
    Wacom ExpressKey Remote
    Loopdeck+ Graphics Controller
    Shuttle Pro v2 Control Pad
  • Operating System
    Windows 11 Pro x64 [Latest release]
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 17 9700
    CPU
    i7 10750H
    Motherboard
    Stock
    Memory
    32 GB
    Graphics card(s)
    Stock Intel + GTX 1650 Ti
    Sound Card
    Stock 4 speaker
    Monitor(s) Displays
    Stock 17" + 32" 4K 3840 x 2160 HDR-10
    Screen Resolution
    3840 x 2400 HDR touchscreen
    Hard Drives
    2TB M2 NVMe
    PSU
    Stock
    Case
    Stock Aluminium / Carbon Fibre
    Cooling
    Stock + 2 fan cooling pad
    Mouse
    Stock Trackpad +Logi Mx Master 3 or MX Ergo Trackball
    Keyboard
    Stock Illuminated + Logi - MX Keys
    Internet Speed
    950 MB Down 55 MB Up
    Browser
    Latest Chrome
    Antivirus
    BitDefender Total Security 2021
    Other Info
    Also use an Adjustable Support for Laptop and Adjustable stand for monitor
I’ve used parted magic for secure erase many times. It’s quick and easy and it will tell you if secure erase is enabled on the drive. It may say the drive is frozen - you follow instructions to unfreeze it ( in the article above?) and then choose secure erase for an ssd. Internal erase. Writing zeros to an ssd (external erase) isn’t recommended - wear to the drive and also it could leave data behind. Secure erase is inbuilt into the drive snd it just flashes the drive to reset everything so no data left - it takes minutes. If it’s an hdd you can just select to write zeros to the drive - which takes a lot longer.

You download the iso of parted magic, burn it to a usb and then boot from it. It runs live.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    Laptop
    Manufacturer/Model
    HP Pavilion 14-ce3514sa
    CPU
    Core i5
    Memory
    16gb
    Hard Drives
    Samsung 970 evo plus 2TB
    Cooling
    Could be better
    Internet Speed
    200mbps Starlink
    Browser
    Firefox
    Other Info
    Originally installed with a 500gb H10 Optane ssd
Make absolutely sure you select the correct drive to erase! The external one.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    Laptop
    Manufacturer/Model
    HP Pavilion 14-ce3514sa
    CPU
    Core i5
    Memory
    16gb
    Hard Drives
    Samsung 970 evo plus 2TB
    Cooling
    Could be better
    Internet Speed
    200mbps Starlink
    Browser
    Firefox
    Other Info
    Originally installed with a 500gb H10 Optane ssd
Hi folks
Write X´00´ or anything random to every data area on device multiple times, ideally on every physical adressable sector or however the disk geometry is defined -- even F.B.I couldn't untangle it then.

I think this bit of code in python should give you an idea -- backup any data before messing around though.
Not quite "impregnable " but I'm sure people who have vastly more coding experience than me could do it. I don't mess around with much coding these days but python is my preferred coding language when I have a go at it as it's portable between most OS'es. This is a start -- you might want to change the code to physical sectors for the writes. The addressing scheme of the HDD / SSD depends on the actual disk geometry rather than the specific file sysem used.

def secure_delete(path, random_fill=True, null_fill=True, passes=3):
"""
securely delete a file by passing it through both random and null filling
"""
files = os.listdir(path)
for i, f in enumerate(files):
files = "{}/{}".format(path, f)
for item in files:
with open(item, "wr") as data:
length = data.tell()
if random_fill:
for _ in xrange(passes):
data.seek(0)
data.write(os.urandom(length))
if null_fill:
for _ in xrange(passes):
data.seek(0)
data.write("\x00" * length)
os.remove(item)


However the only 100% safe way is physical destruction of the device.

Cheers
jimbo
 

My Computer

System One

  • OS
    Windows XP,7,10,11 Linux Arch Linux
    Computer type
    PC/Desktop
    CPU
    2 X Intel i7
I think terminology can be confusing as well - securely erasing data from a drive is not the same thing as “secure erase” - which is a command

“Secure Erase

Secure Erase is the name given to a set of commands available from the firmware on PATA and SATA based hard drives (it isn't available on SCSI drives).


Using Secure Erase to erase the data from a hard drive is often considered the best way to do so because the action is accomplished from the drive itself, the same hardware that wrote the data in the first place. Other methods of removing data from a hard drive may be less effective because they rely on more standard ways of overwriting it.”

So either an ssd or hdd may have the secure erase function built into the drive. I think all but much older ssd’s do.

So in parted magic you would select “internal “ erase and the secure erase option (which is the only option for “internal erasing”.

If it’s not an ssd you can select external erase and it gives you a choice of methods - writing zeros to the drive, the same but with three passes and other erasing software (all do similar).

I did secure erase three times on an ssd last time - just to be sure. If you want to be really belt and braces you could do the secure erase command -AND external “wiping “ by writing zeros to the disk - but filling the drives with zeros with an ssd could shorten the life due to the number of writes. Also it there would be gaps between the zeros so it’s not enough on its own with an ssd.



 

My Computer

System One

  • OS
    Windows 11
    Computer type
    Laptop
    Manufacturer/Model
    HP Pavilion 14-ce3514sa
    CPU
    Core i5
    Memory
    16gb
    Hard Drives
    Samsung 970 evo plus 2TB
    Cooling
    Could be better
    Internet Speed
    200mbps Starlink
    Browser
    Firefox
    Other Info
    Originally installed with a 500gb H10 Optane ssd
Back
Top Bottom