No guarantees
Sometimes a lost file comes back in seconds. Sometimes it is gone for good. Which one you get depends on how the file was lost, what kind of storage it was on, and what happened afterward. Anyone who promises that every file can be recovered is overstating what is possible. The most reliable recovery is a backup, and the rest of this article is about what to try when there is not one.
Start with the easy places
Before reaching for any special tools, check the simplest options.
- Recycle bin or trash. Files deleted normally on a computer often go here first and can be restored. Files deleted from some external drives, network locations or by certain commands may skip it.
- Search. The file may have been moved or renamed rather than deleted. Search by name, type or date.
- Recent items and “undo.” Many programs offer undo after a deletion or move, and some keep auto-saved or temporary versions of documents.
- Version history. Some operating systems and cloud services keep earlier versions of files or a recently deleted folder for a limited time. Check yours as soon as possible, since the time window may be short.
- Backups. If you have any backup, look there first. Phones and cloud photo services often have a “recently deleted” area.
- Other devices and email. A copy may exist on another device, in a sent message or in a shared folder.
What happens when a file is deleted
When you delete and empty the trash, the system usually marks the space as available instead of immediately erasing the contents. Until that space is reused, recovery software can sometimes find the file. This is why the advice is to stop using the device or drive as soon as you notice a loss. Saving new files, installing software or even continued browsing can overwrite the very space you hope to recover. Once data is overwritten, it is generally gone.
Why solid-state storage is different
On many modern solid-state drives and phones, a feature that clears deleted space for performance can erase the contents shortly after deletion. This makes recovery from these devices much less likely than from older hard disks. Encrypted drives also complicate things, because without the key the stored data cannot be read. This is one of the trade-offs described in the article on everyday encryption. Treat a file deleted from a modern SSD or phone as possibly unrecoverable.
Recovery software
Programs exist that scan a drive for deleted files. They can work well in simple cases, such as accidentally deleting a folder from a hard disk or a memory card. Some points to keep in mind:
- Install and save the recovered files onto a different drive, never the one you are recovering from.
- Results vary. Files may come back with missing names, damaged contents or only partly readable.
- Be careful where you download from. Fake recovery tools are a common way to spread unwanted software, so use well-established sources and be wary of online scams that promise easy fixes.
- Free versions often show what they found without letting you save it, so budget accordingly.
If the data matters a lot, consider making an exact image of the drive and working from that, if you are comfortable doing so.
When the drive itself is damaged
If a drive is clicking, grinding, not detected, or was exposed to water, fire or a hard impact, software is the wrong tool. Continuing to power it on can make the damage worse. Professional recovery services can sometimes retrieve data from physically damaged drives, but the work can be expensive, success is not certain, and the results depend on the damage. Ask a service what they charge for an evaluation and what they charge if they fail. Early signs of failing devices, such as slow response and strange noises, are a cue to back up immediately rather than wait.
Special cases
- Corrupted files: a document that will not open may be repairable using the program’s own repair feature, or may be recoverable from an earlier version.
- Phones: check built-in cloud backups and the recently deleted album. Without one, recovery from a modern phone is often limited.
- Ransomware: malicious software that locks your files is a serious problem. Do not assume paying will restore your data. Disconnect the device, and seek help from a qualified professional. Offline backups are the best defense.
- Formatted drives: a quick format often leaves data recoverable for a time, but a full erase may not.
A sensible order of steps
- Stop using the affected device or drive.
- Check trash, version history, cloud services and backups.
- If needed, try reputable recovery software, saving to a different drive.
- For physical damage or irreplaceable data, consider a professional service.
- Afterward, set up a backup, so next time you can simply restore.
Recovery is a last resort, and success is never certain. The better habit is to keep copies, as described in the beginner approach to data backup.