Secure erase SSD alternatives? (not able through manufacturer software)

ddiaconu21

Member
Local time
4:25 PM
Posts
14
Hi guys,

So I'm currently having some issues with my 2 SSD drives (one external Samsung T5 SSD and one Intel SSD 600p Series SSDPEKKW256G7).

1. Samsung T5 SSD can't be secure erased from Samsung Magician because it's done via USB and it's not a internal SSD.
2. The Intel SSD can't be secure erased because it's the main SSD (Intel isn't allowing it) and Windows 8/10 don't accept secure erase. (more info here: Securely Erase Data on Intel® Solid State Drives That Needs...)

Is diskpart/dban a good alternative for "secure erase"? As far as I know, secure erase between HDD and SSD is fairly different and methods like diskpart/dban aren't that efficient and sometimes do more bad than good (overwriting an SSD overuses it for no constructive reason). What other choice do I have beside the proprietary software that is not working in my case?

Context: I want to have a clean start for my laptop and external SSD (or as fresh as possible in this case). This actually started by trying to figure out on how to use my T5 SSD with both my Mac Mini and my laptop and since I had to format, I thought I should do a deep cleaning (I had a lot of useless/random files written over time, including running Linux on it). Not planning on selling them or hiding my secret CIA/FBI/NSA folder.

Thanks!
 
Windows Build/Version
22471/11

My Computer

System One

  • Operating System
    Windows 11

jimbo45

Well-known member
Member
VIP
Local time
1:25 PM
Posts
630
Location
Hafnarfjörður IS
Hi there
simply write X'00' (HEX zero) on every physical address (cluster etc) .

Plenty of free software around to do that.

You could even use a standard "Hex editor" to erase data areas where you have data you want to erase. (Takes longer though).


Cheers
jimbo
 

My Computer

System One

  • Operating System
    Windows XP,7,10,11 Linux Arch Linux
    Computer type
    PC/Desktop
    CPU
    2 X Intel i7

bobkn

Well-known member
Member
VIP
Local time
9:25 AM
Posts
438
Location
Danbury, CT, USA
Courtesy of our friends at Google: https://www.makeuseof.com/tag/securely-erase-ssd-without-destroying/

It's not the clearest article I've read. It claims that an SSD can be securely erased without overwriting it, but one method (Parted Magic) is said to write zeroes. For the truly paranoid, an SSD may pose concerns because of the way its data are managed.

Regardless, I wouldn't be concerned about the amount of wear done by a single write. The Intel SSDPEKKW256G7 is rated at 144 TBW, which means its expected life is equivalent to writing the 256GB drive over 560 times. Even a multi-pass write wouldn't be significant unless you do it many times.
 

My Computers

System One System Two

  • Operating System
    Windows 11 22000.194
    Computer type
    PC/Desktop
    Manufacturer/Model
    homebuilt
    CPU
    Ryzen 9 5950X
    Motherboard
    Asus Tuf X570 Plus Gaming
    Memory
    32GB Gskill DDR4 2800
    Graphics Card(s)
    Radeon RX 6900 XT
    Sound Card
    onboard
    Monitor(s) Displays
    Asus PA329C
    Screen Resolution
    3940 X 2160
    Hard Drives
    WB Black SN850 1TB M.2 NVME SSD
    Seagate Iron Wolf 8TB
    PSU
    Seasonic SS-1250XM
    Case
    Corsair Obsidian 750D
    Cooling
    Corsair H100i RGB Pro XT
    Internet Speed
    1200 Mbps
  • Operating System
    windows 10 19044.1151
    Computer type
    PC/Desktop
    Manufacturer/Model
    homebuilt
    CPU
    Ryzen 9 3900X
    Motherboard
    MSI MPG X570 Gaming Plus
    Memory
    32GB
    Graphics card(s)
    Gigabyte RTX 2080 Super
    Sound Card
    built in Realtek
    Monitor(s) Displays
    Samsung LU28R550UQNXZA
    Screen Resolution
    3840 X 2160
    Hard Drives
    Sabrent 1 TB PCI-E 4.0 X4 NVME M.2
    4 GB Seagate Ironwolf
    PSU
    eVGA SuperNOVA 750 G1+
    Case
    Phanteks ENTHOO Pro M
    Cooling
    Corsair H100i RGB Pro XT
    Internet Speed
    400 Mbps

ddiaconu21

Member
Thread Starter
Local time
4:25 PM
Posts
14
Courtesy of our friends at Google: https://www.makeuseof.com/tag/securely-erase-ssd-without-destroying/

It's not the clearest article I've read. It claims that an SSD can be securely erased without overwriting it, but one method (Parted Magic) is said to write zeroes. For the truly paranoid, an SSD may pose concerns because of the way its data are managed.

Regardless, I wouldn't be concerned about the amount of wear done by a single write. The Intel SSDPEKKW256G7 is rated at 144 TBW, which means its expected life is equivalent to writing the 256GB drive over 560 times. Even a multi-pass write wouldn't be significant unless you do it many times.
Thank you for the elaborate answer.
Now my question is: what separates Parted Magic from stuff like diskpart?
 

My Computer

System One

  • Operating System
    Windows 11

bobkn

Well-known member
Member
VIP
Local time
9:25 AM
Posts
438
Location
Danbury, CT, USA
Thank you for the elaborate answer.
Now my question is: what separates Parted Magic from stuff like diskpart?
I'm not the best person to answer this, but...

diskpart seems to have no ability to over-write the disk, so it cannot do a secure erase.
 

My Computers

System One System Two

  • Operating System
    Windows 11 22000.194
    Computer type
    PC/Desktop
    Manufacturer/Model
    homebuilt
    CPU
    Ryzen 9 5950X
    Motherboard
    Asus Tuf X570 Plus Gaming
    Memory
    32GB Gskill DDR4 2800
    Graphics Card(s)
    Radeon RX 6900 XT
    Sound Card
    onboard
    Monitor(s) Displays
    Asus PA329C
    Screen Resolution
    3940 X 2160
    Hard Drives
    WB Black SN850 1TB M.2 NVME SSD
    Seagate Iron Wolf 8TB
    PSU
    Seasonic SS-1250XM
    Case
    Corsair Obsidian 750D
    Cooling
    Corsair H100i RGB Pro XT
    Internet Speed
    1200 Mbps
  • Operating System
    windows 10 19044.1151
    Computer type
    PC/Desktop
    Manufacturer/Model
    homebuilt
    CPU
    Ryzen 9 3900X
    Motherboard
    MSI MPG X570 Gaming Plus
    Memory
    32GB
    Graphics card(s)
    Gigabyte RTX 2080 Super
    Sound Card
    built in Realtek
    Monitor(s) Displays
    Samsung LU28R550UQNXZA
    Screen Resolution
    3840 X 2160
    Hard Drives
    Sabrent 1 TB PCI-E 4.0 X4 NVME M.2
    4 GB Seagate Ironwolf
    PSU
    eVGA SuperNOVA 750 G1+
    Case
    Phanteks ENTHOO Pro M
    Cooling
    Corsair H100i RGB Pro XT
    Internet Speed
    400 Mbps

ddiaconu21

Member
Thread Starter
Local time
4:25 PM
Posts
14
Hi guys,

As a wrap up, Parted Magic worked on my internal NVMe (secure erase), but there external SSD/USB storages can't be securely erased due to them not being connected directly to the internals (just through USB).

It seems there is no proper secure erase option for portable storage.
Thanks!
 

My Computer

System One

  • Operating System
    Windows 11

Mark Phelps

Member
Member
VIP
Local time
9:25 AM
Posts
73
Hi guys,

So I'm currently having some issues with my 2 SSD drives (one external Samsung T5 SSD and one Intel SSD 600p Series SSDPEKKW256G7).

1. Samsung T5 SSD can't be secure erased from Samsung Magician because it's done via USB and it's not a internal SSD.

Thanks!
I have a Samsung SSD and Magician and it allowed me to create a USB stick I could use to do a secure erase. It worked fine.
 

My Computer

System One

  • Operating System
    Windows 10

bobkn

Well-known member
Member
VIP
Local time
9:25 AM
Posts
438
Location
Danbury, CT, USA
This is an external SSD
Then, you don't need a bootable utility.

Does the secure erase feature in the free version of CCleaner work for you? CCleaner Makes Your Computer Faster & More Secure | Official Website

(Caution: CCleaner is now owned by Avast, and their installer sometimes tries to install Avast products. If you don't want them, you have to opt out. The default is to install the Avast stuff. They don't obscure the choices, but inattentive clicking may give you something that you don't want.)
 

My Computers

System One System Two

  • Operating System
    Windows 11 22000.194
    Computer type
    PC/Desktop
    Manufacturer/Model
    homebuilt
    CPU
    Ryzen 9 5950X
    Motherboard
    Asus Tuf X570 Plus Gaming
    Memory
    32GB Gskill DDR4 2800
    Graphics Card(s)
    Radeon RX 6900 XT
    Sound Card
    onboard
    Monitor(s) Displays
    Asus PA329C
    Screen Resolution
    3940 X 2160
    Hard Drives
    WB Black SN850 1TB M.2 NVME SSD
    Seagate Iron Wolf 8TB
    PSU
    Seasonic SS-1250XM
    Case
    Corsair Obsidian 750D
    Cooling
    Corsair H100i RGB Pro XT
    Internet Speed
    1200 Mbps
  • Operating System
    windows 10 19044.1151
    Computer type
    PC/Desktop
    Manufacturer/Model
    homebuilt
    CPU
    Ryzen 9 3900X
    Motherboard
    MSI MPG X570 Gaming Plus
    Memory
    32GB
    Graphics card(s)
    Gigabyte RTX 2080 Super
    Sound Card
    built in Realtek
    Monitor(s) Displays
    Samsung LU28R550UQNXZA
    Screen Resolution
    3840 X 2160
    Hard Drives
    Sabrent 1 TB PCI-E 4.0 X4 NVME M.2
    4 GB Seagate Ironwolf
    PSU
    eVGA SuperNOVA 750 G1+
    Case
    Phanteks ENTHOO Pro M
    Cooling
    Corsair H100i RGB Pro XT
    Internet Speed
    400 Mbps

barman58

Moderator
Staff member
Local time
2:25 PM
Posts
578
What is secure? if you wish to stop a parent or sibling from reading your digital diary then there are many ways such as have been noted. If however you want to protect data from professional recovery or Government agencies Law enforcement then the only way is total physical destruction of the media.

Overwritten drives are recovered all the time by the pros and many a business have been very grateful even though the cost is great for these services
 

My Computers

System One System Two

  • Operating System
    Windows 10 Pro x64 [Latest Release Preview]
    Computer type
    PC/Desktop
    Manufacturer/Model
    Chillblast to my design
    CPU
    Ryzen 9 5950X, 4.9GHz
    Motherboard
    Asus Prime X570-Pro Motherboard
    Memory
    64GB DDR4 3200MHz
    Graphics Card(s)
    4GB NVIDIA GEFORCE GTX 1650 Ti - HDMI, DP
    Sound Card
    On motherboard Feeding SPDiF 5.1 system
    Monitor(s) Displays
    32" UHD 32 Bit HDR Monitor + 43" UHD 4K 32Bit HDR TV
    Screen Resolution
    2 x 3840 x 2160
    Hard Drives
    1TB M2 SSD OS, 500GB Fast Access SSD, 2 x 8TB Data + Various Externals from 1TB to 4TB, 10TB NAS
    PSU
    NZXT C750 80 PLUS Gold 750W Modular PSU
    Case
    Chillblast Silent Workstation PC Case - Black
    Cooling
    NZXT Kraken X63 280mm CPU Cooler, Quiet Case fans Fan
    Keyboard
    Wireless Logitec MX Keys + K830 [Depending on where I'm Sat]
    Mouse
    Wireless Logitec - MX Master 3 + M570 Trackball
    Internet Speed
    72 MB Down 18.5 MB Up
    Browser
    Latest Chrome
    Antivirus
    BitDefender Total Security 2021
    Other Info
    Also run...
    Laptop - Quad 8GB - Windows 10 Pro x64 HP 15.2"
    Nexus 7 Android tablet
    Samsung 10.2" tablet
    Sony Z3 Android Smartphone
    Samsung S9 Plus Smartphone
    Samsung Note S20
    Wacom Pro Medium Pen Pad
    Wacom Pro Small Pen Pad
    Wacom ExpressKey Remote
    Loopdeck+ Graphics Controller
    Shuttle Pro v2 Control Pad
  • Operating System
    Windows 10 Pro x64 [Latest release]
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 17 9700
    CPU
    i7 10750H
    Motherboard
    Stock
    Memory
    32 GB
    Graphics card(s)
    Stock Intel + GTX 1650 Ti
    Sound Card
    Stock 4 speaker
    Monitor(s) Displays
    Stock 17"
    Screen Resolution
    3840 x 2160 HDR touchscreen
    Hard Drives
    2TB M2
    PSU
    Stock
    Case
    Stock Aluminium / Carbon Fibre
    Cooling
    Stock + 2 fan cooling pad
    Mouse
    Stock Trackpad
    Keyboard
    Stock Illuminated
    Internet Speed
    72 MB Down 18.5 MB Up
    Browser
    Latest Chrome
    Antivirus
    BitDefender Total Security 2021

Hazel123

Well-known member
Member
VIP
Local time
2:25 PM
Posts
344
I’ve used parted magic for secure erase many times. It’s quick and easy and it will tell you if secure erase is enabled on the drive. It may say the drive is frozen - you follow instructions to unfreeze it ( in the article above?) and then choose secure erase for an ssd. Internal erase. Writing zeros to an ssd (external erase) isn’t recommended - wear to the drive and also it could leave data behind. Secure erase is inbuilt into the drive snd it just flashes the drive to reset everything so no data left - it takes minutes. If it’s an hdd you can just select to write zeros to the drive - which takes a lot longer.

You download the iso of parted magic, burn it to a usb and then boot from it. It runs live.
 

My Computers

System One System Two

  • Operating System
    Windows 10, Linux
    Computer type
    Laptop
    Manufacturer/Model
    HP Pavilion DM4, HP Spectre 13 X360
    CPU
    Core i5
    Memory
    8gb
    Hard Drives
    Samsung Evo 860 1tb
    Internet Speed
    Dismal
    Browser
    Firefox
  • Operating System
    Windows 10
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP Omen 25l
    CPU
    Intel Core i5
    Memory
    16gb
    Graphics card(s)
    Nvidia GeForce 2060
    Monitor(s) Displays
    Pixio 24”
    Hard Drives
    250gb ssd, 1tb hdd
    Keyboard
    Razer
    Internet Speed
    Dismal
    Browser
    Firefox

Hazel123

Well-known member
Member
VIP
Local time
2:25 PM
Posts
344
Make absolutely sure you select the correct drive to erase! The external one.
 

My Computers

System One System Two

  • Operating System
    Windows 10, Linux
    Computer type
    Laptop
    Manufacturer/Model
    HP Pavilion DM4, HP Spectre 13 X360
    CPU
    Core i5
    Memory
    8gb
    Hard Drives
    Samsung Evo 860 1tb
    Internet Speed
    Dismal
    Browser
    Firefox
  • Operating System
    Windows 10
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP Omen 25l
    CPU
    Intel Core i5
    Memory
    16gb
    Graphics card(s)
    Nvidia GeForce 2060
    Monitor(s) Displays
    Pixio 24”
    Hard Drives
    250gb ssd, 1tb hdd
    Keyboard
    Razer
    Internet Speed
    Dismal
    Browser
    Firefox

jimbo45

Well-known member
Member
VIP
Local time
1:25 PM
Posts
630
Location
Hafnarfjörður IS
Hi folks
Write X´00´ or anything random to every data area on device multiple times, ideally on every physical adressable sector or however the disk geometry is defined -- even F.B.I couldn't untangle it then.

I think this bit of code in python should give you an idea -- backup any data before messing around though.
Not quite "impregnable " but I'm sure people who have vastly more coding experience than me could do it. I don't mess around with much coding these days but python is my preferred coding language when I have a go at it as it's portable between most OS'es. This is a start -- you might want to change the code to physical sectors for the writes. The addressing scheme of the HDD / SSD depends on the actual disk geometry rather than the specific file sysem used.

def secure_delete(path, random_fill=True, null_fill=True, passes=3):
"""
securely delete a file by passing it through both random and null filling
"""
files = os.listdir(path)
for i, f in enumerate(files):
files = "{}/{}".format(path, f)
for item in files:
with open(item, "wr") as data:
length = data.tell()
if random_fill:
for _ in xrange(passes):
data.seek(0)
data.write(os.urandom(length))
if null_fill:
for _ in xrange(passes):
data.seek(0)
data.write("\x00" * length)
os.remove(item)


However the only 100% safe way is physical destruction of the device.

Cheers
jimbo
 

My Computer

System One

  • Operating System
    Windows XP,7,10,11 Linux Arch Linux
    Computer type
    PC/Desktop
    CPU
    2 X Intel i7

Hazel123

Well-known member
Member
VIP
Local time
2:25 PM
Posts
344
I think terminology can be confusing as well - securely erasing data from a drive is not the same thing as “secure erase” - which is a command

“Secure Erase

Secure Erase is the name given to a set of commands available from the firmware on PATA and SATA based hard drives (it isn't available on SCSI drives).


Using Secure Erase to erase the data from a hard drive is often considered the best way to do so because the action is accomplished from the drive itself, the same hardware that wrote the data in the first place. Other methods of removing data from a hard drive may be less effective because they rely on more standard ways of overwriting it.”

So either an ssd or hdd may have the secure erase function built into the drive. I think all but much older ssd’s do.

So in parted magic you would select “internal “ erase and the secure erase option (which is the only option for “internal erasing”.

If it’s not an ssd you can select external erase and it gives you a choice of methods - writing zeros to the drive, the same but with three passes and other erasing software (all do similar).

I did secure erase three times on an ssd last time - just to be sure. If you want to be really belt and braces you could do the secure erase command -AND external “wiping “ by writing zeros to the disk - but filling the drives with zeros with an ssd could shorten the life due to the number of writes. Also it there would be gaps between the zeros so it’s not enough on its own with an ssd.



 

My Computers

System One System Two

  • Operating System
    Windows 10, Linux
    Computer type
    Laptop
    Manufacturer/Model
    HP Pavilion DM4, HP Spectre 13 X360
    CPU
    Core i5
    Memory
    8gb
    Hard Drives
    Samsung Evo 860 1tb
    Internet Speed
    Dismal
    Browser
    Firefox
  • Operating System
    Windows 10
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP Omen 25l
    CPU
    Intel Core i5
    Memory
    16gb
    Graphics card(s)
    Nvidia GeForce 2060
    Monitor(s) Displays
    Pixio 24”
    Hard Drives
    250gb ssd, 1tb hdd
    Keyboard
    Razer
    Internet Speed
    Dismal
    Browser
    Firefox
Top Bottom