How to Recover Deleted Files Without Making Things Worse

The fastest way to get a deleted file back is to check the three places it probably still exists — the Recycle Bin or Trash, your cloud service's online trash, and any backup — before you install any recovery software. Only if all three come up empty do you reach for a scanning tool, and by then your one critical job is to have stopped writing anything new to the drive that held the file.

Why "deleted" usually isn't "gone" — and the exception that ruins recovery#

When you delete a file and empty the bin, the operating system does not scrub the actual bytes. It removes the file's entry from the filesystem index (the MFT on Windows NTFS, the catalog on macOS APFS) and marks those clusters as free. The content sits on the platter or in the flash cells until something overwrites it. That gap is what recovery tools exploit.

The exception is TRIM, and it is the single fact most guides get wrong. On a modern SSD, when you delete a file the OS sends a TRIM command telling the drive those blocks are free. The SSD's garbage collector then zeroes them — often within seconds to a few minutes — so the data is physically gone, not just unlinked. TRIM is on by default in Windows 10/11, macOS, and Linux. This is why recovery from an SSD (including the internal storage of nearly every laptop sold since about 2018) usually fails, while recovery from a spinning hard drive, USB stick, or SD card (none of which run TRIM) often succeeds. On Windows you can confirm your drive's state with fsutil behavior query DisableDeleteNotify in an admin Command Prompt; a result of 0 means TRIM is active.

Stop writing to the drive right now#

Every save, app install, browser cache write, or Windows Update can land on top of the exact clusters you are trying to recover. Once overwritten, a file is genuinely unrecoverable by any consumer method.

If the file was on removable media — a USB drive, SD card, or external disk — eject it and set it aside. That fully freezes its state. If it was on your computer's system drive, you can't stop it entirely, but stop actively using that machine: don't download the recovery tool onto that drive, don't reboot repeatedly, and if the data is genuinely critical, shut down and do the recovery by pulling the drive and connecting it to a second computer as a secondary disk.

Check the three obvious places first#

The local Recycle Bin or Trash#

On Windows, open the Recycle Bin, find the file, right-click, and choose Restore — it returns to its original folder. The bin holds files until it hits its size cap (right-click Recycle Bin > Properties to see the limit, often 5–10% of the drive), then purges oldest first. Note that files deleted with Shift+Delete, removed from a USB drive, or larger than the cap bypass the bin entirely.

On macOS, open Trash from the Dock, right-click the file, and choose Put Back. If you enabled Finder > Settings > Advanced > "Remove items from the Trash after 30 days," anything older is already gone.

Cloud trash and version history#

If the file lived in a synced folder, sign in through the web (not the desktop app) and open the service's online trash. Retention windows are specific and worth knowing:

• Google Drive: trashed files kept 30 days.
• iCloud Drive: "Recently Deleted" kept 30 days.
• OneDrive: 30 days on personal accounts, 93 days on work/school accounts.
• Dropbox: 30 days on Basic and Plus, 180 days on Professional/Business.

Also open version history. Google Docs (File > Version history), OneDrive/SharePoint (Version history on the file), and Dropbox all keep prior revisions, which rescues a file you overwrote or corrupted rather than deleted.

Search, in case it was only moved#

Before assuming loss, search the whole machine by filename or a phrase inside it — Windows Search or macOS Spotlight. Files "vanish" surprisingly often because a drag-and-drop dropped them into the wrong folder. This costs a moment and rules out a false alarm.

Restore from a backup — the only reliable method#

A backup is a complete separate copy, so what you get back is intact, not a salvaged fragment. If you have one, use it before recovery software.

• macOS Time Machine: enter Time Machine from the menu bar, navigate to a date before the deletion, select the file, and click Restore.
• Windows File History: Control Panel > File History > Restore personal files, then pick the version and click the green restore button. If it's off, you may still get "Previous Versions" — right-click the containing folder > Properties > Previous Versions.
• Phone backups: an iCloud or Google One backup can restore lost data, though on iPhone this generally means restoring the whole device to that backup, so weigh what you'd lose since then.

Phones follow different rules#

There is no filesystem-level undelete on modern phones because storage is encrypted and apps can't read raw blocks. Recovery is entirely app-level trash and cloud:

• iPhone: Photos > Albums > Recently Deleted (30 days), Files app > Recently Deleted (30 days), and Notes has its own Recently Deleted folder. Anything past that needs an iCloud backup.
• Android: Google Photos trash (holds ~60 days), Files by Google trash (30 days), and manufacturer galleries like Samsung Gallery (30 days) each have their own bin. A microSD card, however, can be pulled and scanned on a PC like any removable drive.

Ignore Play Store or App Store apps promising to "scan and recover deleted files" from internal phone storage without root or a backup — they cannot access the data and mostly show cached thumbnails.

When you need recovery software#

If nothing above works and the drive is an HDD, USB stick, or SD card, scanning software is your last practical option.

1. Install the tool on a different drive than the one you're recovering from.
2. If the data is precious, first make a bit-for-bit image of the source drive (with a tool like ddrescue) and recover from the image, so a failing disk isn't stressed further.
3. Run the scan and recover files onto a separate drive — never back onto the source.

Reputable tools: Recuva (Windows, free, from Piriform), PhotoRec and its partner TestDisk (free, open-source, cross-platform — PhotoRec rebuilds files by signature, TestDisk rebuilds lost partitions), and Disk Drill (Windows/macOS, free scan with paid recovery). Download only from the official site to avoid bundled adware. If a drive is clicking, not mounting, or physically damaged, stop and consider a professional cleanroom service — expect roughly a few hundred to over a thousand dollars, quoted after diagnosis.

Common mistakes that turn a scare into a real loss#

The biggest one is installing recovery software onto the same drive holding the deleted file — the installer overwrites the very clusters you want. Others: recovering files back to the source drive, continuing to use or reboot the machine, expecting SSD recovery to work like a hard drive, and trusting sites that "guarantee" 100% recovery. And the quiet one: never having set up automatic backups, which is the only thing that makes the whole problem a two-minute fix.

FAQ#

Can I recover files from an SSD after emptying the Trash?#

Usually no. TRIM, which is on by default, tells the SSD to erase deleted blocks within seconds to minutes, so the data is physically gone rather than just unlinked. Your realistic options are the Recycle Bin (if still there), cloud trash, or a backup — not scanning software.

How long do I have before a deleted file is overwritten?#

There's no fixed clock — it depends on how much you keep writing to the drive. On a busy system drive it can be minutes; on a drive you immediately stopped using, files can survive for weeks. That's why "stop using it" beats "act fast" as advice.

Does formatting a drive erase everything permanently?#

A quick format only rewrites the filesystem index and leaves most data intact, so recovery is often possible on an HDD. A full format (or a format on a TRIM-enabled SSD) writes over or discards the data and is effectively permanent for consumer tools.

Is free recovery software as good as paid?#

For undeleting recently lost files, PhotoRec and Recuva are as capable as paid apps. Paid tools like Disk Drill or R-Studio mainly add friendlier interfaces, deeper partition rebuilding, and RAID support — worth it for complex cases, unnecessary for a single deleted folder.