![]() ![]() If this is very sensitive data and you can’t rely on throwing away encryption keys, you would probably want to physically destruct the SSD. So again, best is likely to encrypt and otherwise… But again, don’t forget the drive’s wear leveling can (and likely will) interfere with what you’re trying to achieve here. ![]() Best to just let it do its thing while you sleep. A 3-pass (DOE standard) or 7-pass (DOD standard) secure erase of a 2TB drive will likely take all night. However, that said, since this is a drive that is likely destined for the garbage, you don’t have to worry about write cycles and instead this is likely more about peace of mind. On SSDs this is commonly not recommended because SSDs have finite write cycles and because their wear leveling makes it difficult to perform this operation correctly. Depends on your level of paranoia how much effort you want to put into this.įinally, you can always use Disk Utility to perform a multi-pass secure erase by writing zeros or random data to the SSD. The answer to that question determines if you should be worried about items that you once had on the drive that have been deleted (but not overwritten), from remaining unencrypted on the drive or not. A while back I was attempting to confirm if that encrypted the entire drive or just the present contents, but I’m afraid that question is still open. To encrypt an APFS drive that was not formatted as encrypted, attach the drive to your Mac, in the Finder right-click its icon, and chose Encrypt. Once the entire disk is encrypted, that will allow you to “securely erase” it by again throwing away the encryption key. If you did not format it as encrypted, you could try adding that encryption now. If the drive was formatted encrypted, throwing away the encryption key (the password you set when formatting) is good enough to securely erase the data. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |