How do deleted files come back?
Can't play sound? The illustrated version is right below.
Read the transcript
The full narration of the video.
Deleting a file takes a second, wiping a drive takes two hours. That's about how long it takes to write a one-terabyte spinning drive end to end. So what does the computer really erase in that second? And how can deleted files come back?
Even after you empty the recycle bin, files can often be recovered. Picture the drive as a thick notebook, with each file written on a few of its pages. At the front is a contents page: which file sits on which pages.
Hit delete, and the computer does just one thing: it crosses out that line and marks those pages "free to reuse." Not a single word on those pages is erased. That's why deleting is so fast. Truly erasing means rewriting every page—hence the two hours.
If you're lucky, the crossed-out line is still readable—follow the page numbers and it's back. If the contents are gone too, flip page by page and look at how things begin. Every file type opens with a few fixed characters, and photos differ from documents. Spot them, and you know a photo starts right here.
That's what recovery software does. In real terms: the contents page is called the file table, and "free to reuse" means that space is marked empty. Delete a big file and free space jumps at once, yet the old data stays right where it was.
But the notebook keeps being used. New files get written onto the pages marked free. Once new data lands, the old is gone. Paper keeps faint marks, but a drive doesn't: overwrite it once, and even a lab can't read it back. So after a mistaken delete, stop, and save nothing else to that drive.
And before selling an old computer, deleting isn't enough—use the built-in erase or reset. But that's the old spinning kind of hard drive. Phones and most new computers use solid-state drives, and their notebook has a cleaner on duty.
The moment you delete, the computer tells the drive: these pages aren't needed. In idle moments, the drive wipes them itself. Researchers tested a batch of solid-state drives: with this feature on, most deleted data was gone for good. So is a deleted photo still there? It depends where it lived: on a spinning drive, probably, until something covers it; on a phone or SSD, it's likely wiped soon.
For photos that matter, don't count on recovery—keep a second copy. What's the most painful thing you've ever deleted by mistake? Did you get it back?
Deleting takes a second.
Wiping takes two hours.
Writing a one-terabyte spinning hard drive from start to end takes about two hours. Deleting a file is done in a blink.
The gap is that huge because deleting never erases anything. It just crosses out one line.
A thick notebook
and its contents page
Picture the drive as a thick notebook. Each file is written on a few of its pages. At the front is a contents page: which file sits on which pages.
Hit delete, and the computer does just one thing: it crosses out that line and marks those pages "free to reuse." Not a single word on those pages is erased.
Emptying the recycle bin just crosses out the line again. So files can often still be recovered.
Two ways
to get it back
A photo (JPEG) starts with the bytes FF D8 FF; a PDF starts with %PDF. Find a page that begins with FF D8 FF, and you know a photo starts right there.
That's exactly what recovery software does.
The real names
for the notebook parts
Delete a big file and free space jumps at once. Yet the old data stays right where it was, just marked as free.
Overwrite once,
and it is gone
The notebook keeps being used. When you save something new, the computer writes it onto pages marked "free to reuse." Once new data lands, the old is gone.
Erased paper still keeps faint marks, but a drive doesn't. Guidance from the US National Institute of Standards and Technology is clear: overwrite it once, and even the best lab can't read it back.
Phones have a cleaner
on duty
All of that is about the old spinning kind of hard drive. Phones and most new computers use solid-state drives, and the rules are different.
The moment you delete, the computer tells the drive: these pages aren't needed. In idle moments, the drive wipes them itself. That message is called TRIM, and today's phones and computers usually have it on by default.
Researchers tested a batch of solid-state drives: with TRIM on, most deleted data could not be recovered at all.
Quick check
What does the computer do to the drive in the second you hit delete?
Deleting only crosses out the contents line; the pages stay untouched, which is why it's fast and why files can come back.
