How-to · 4 min read · Updated 6 November 2026
How to securely erase an SSD: why it differs from a hard drive
Why SSDs are different
A hard drive stores data in fixed places on a spinning magnetic platter, so overwriting every sector replaces every piece of data. An SSD stores data in flash memory chips managed by a controller. To spread wear evenly, the controller constantly moves data around and keeps a reserve of spare blocks that the computer cannot see, known as over-provisioning.
That means software that simply writes zeros to every visible address may never touch copies of data sitting in spare or retired blocks. Laboratory studies have recovered data from SSDs that had been overwritten in the usual way.
Methods that work and methods that do not
| Method | Works on SSD? | Notes |
|---|---|---|
| Deleting files or quick format | No | Data often remains, TRIM helps but is not guaranteed |
| Standard overwrite software | Not reliably | Can miss spare and retired blocks |
| Degaussing | No | Flash memory is not magnetic |
| ATA Secure Erase or Sanitize | Yes, if implemented correctly | Built into the drive firmware |
| NVMe Format or Sanitize with crypto erase | Yes, if implemented correctly | Destroys the internal encryption key |
| Shredding to small particles | Yes | Chips must be broken, not just the casing |
Step by step: erasing a working SSD
- Record the make, model and serial number of the drive and the device it came from
- Remove the drive from any RAID array, and suspend or remove BitLocker or similar if the erase tool needs it
- Boot the device into a dedicated erasure tool rather than running it from inside Windows
- Use the drive's sanitise command, choosing cryptographic erase plus block erase where available
- Let the tool verify the result by reading back samples of the drive
- Save the erasure report with the serial number, method, date and result
- If the erase fails or the drive is not detected, set it aside for shredding
Some laptops lock the sanitise command in the BIOS or UEFI. Good erasure tools can work around this, but if one cannot, physical destruction is the safe fallback.
When to shred instead
Shred SSDs that are faulty, will not accept erase commands, have held very sensitive data, or are simply too old to be worth reselling. With an SSD, what matters is the memory chips, not the casing. Shredders designed for hard drives can leave chips intact on small M.2 drives, so ask the provider what particle size their machine produces for SSDs.
For the highest-security work, some organisations set a target of particles of a few millimetres. For ordinary commercial data, a shredder that reliably breaks every chip is usually proportionate. Your data protection officer or security policy should set the standard.
Do not forget hidden flash storage
- M.2 drives inside thin laptops, sometimes two per device
- Soldered storage on many ultrabooks and MacBooks, which cannot be removed
- Phones and tablets
- USB sticks and memory cards
- Embedded storage in printers, firewalls and network switches
- Cache SSDs inside servers and storage arrays
For devices where storage is soldered to the motherboard, software erasure through the device's own reset or sanitise function is the only way to preserve the device. Otherwise the whole board needs to be shredded.
Checking a provider's SSD process
Many providers have years of experience wiping hard drives and simply apply the same overwrite method to SSDs. Before you book, ask how they treat flash storage specifically.
- Which erase commands are used for SATA SSDs and NVMe drives
- Whether cryptographic erase is used where the drive supports it
- How the result is verified, and what happens if verification fails
- Whether soldered storage in laptops is handled by software or by shredding the board
- What particle size the shredder produces for SSDs and M.2 drives
- Whether the erasure report names the method used for each drive
Clear, specific answers are a good sign. A provider that can only say the drives are wiped to a standard, without explaining how flash storage is handled, may not be treating SSDs any differently from hard drives.
Encryption makes it easier
If drives are encrypted from day one with BitLocker, FileVault or self-encrypting drive hardware, destroying the key at end of life makes the data unreadable almost instantly. It does not remove the need for a recorded erasure or destruction, but it adds a strong extra layer if a device goes missing before it is disposed of.
Check that encryption was actually switched on for every device before relying on it. Asset management or device management reports can usually show which machines are encrypted.
Frequently asked questions
Can I use the same erasure software for SSDs and hard drives?
Many professional erasure tools handle both, but they use different methods for each. For hard drives they overwrite and verify. For SSDs they should issue the drive's own sanitise or crypto erase commands. Check the tool specifically supports NVMe and SATA SSD sanitisation and produces a report showing which method was used.
Does a degausser work on an SSD?
No. Degaussers disrupt magnetic fields, and SSDs store data as electrical charge in flash memory chips, so a degausser leaves the data untouched. The SSD may also look physically fine afterwards, which can give false confidence. Use firmware-based erasure with verification, or physical shredding that breaks every memory chip, instead.
Can an erased SSD be reused or resold?
Yes. A successful sanitise or cryptographic erase leaves the drive working, so it can be reused internally or resold with the laptop. That is one of the main reasons to choose verified software erasure over shredding when the equipment still has value. Keep the erasure report with the serial number so you can show the drive was cleaned before it left.
SSD data erasure NVMe shredding
Related services
We cover 250 towns and cities, including Birmingham, Coventry, Nottingham, Mansfield, Manchester, Salford.
