FileDial › Guides › Privacy and security
How to securely delete files on a Mac
By Himanshu Ranjan · Updated 8 November 2026
On a modern Mac, protection comes from encryption, not overwriting. Turn on FileVault before sensitive data accumulates, empty the Trash, and when you sell or hand over the Mac use Erase All Content and Settings. Overwriting single files is unreliable on SSDs, and Apple no longer ships a Secure Empty Trash command in current macOS.
What delete and Empty Trash really do
Deleting a file moves it to the Trash. Emptying the Trash removes the file's entry so its space can be reused, but the data blocks are not necessarily rewritten right away. Command-Delete sends the selected item to the Trash and Shift-Command-Delete empties it, as Apple's shortcut list says. Neither is a shredder.
The FTC's business guidance puts it plainly: standard file deletion is not enough because data can often be recovered, and a wipe utility is recommended for old computers and storage devices. That advice dates from the spinning-disk era, and the details differ on modern Macs.
Why overwriting single files does not work on SSDs
Mac laptops use solid-state storage. SSDs use wear leveling and an internal mapping layer, so the drive can write new data to different physical cells than the ones that held the old data. Wikipedia's data remanence article says wear leveling can defeat erasure by moving data between blocks, and that software file-level sanitization methods were not effective on SSDs in testing. TRIM can eventually clear deleted data, but not on a schedule you control.
This is why tools that overwrite a file several times are the wrong approach on a Mac with an SSD. You may have overwritten a logical copy while an older physical copy remains.
What actually works: encryption from the start
Apple's platform security guide explains that on Apple silicon Macs the internal volume is encrypted even with FileVault off, with the key protected by the hardware. FileVault ties that key to your password as well. One caveat from Apple: data that was added and deleted before FileVault was turned on is not encrypted and may be recoverable with forensic tools. The safest habit is to turn FileVault on early and leave it on.
The same guide describes how deleting a volume makes the Secure Enclave securely delete its encryption key, and how erasing the media key makes the volume cryptographically inaccessible. This is the idea behind crypto-shredding: destroy the key and the data becomes unreadable.
- Open System Settings and go to Privacy & Security.
- Find FileVault and turn it on, then keep your recovery option somewhere safe.
- For single sensitive files, keep them in an encrypted disk image or an encrypted folder you can delete as a unit.
- Empty the Trash with Shift-Command-Delete or Finder › Empty Trash.
When you sell, gift or recycle the Mac
Use Erase All Content and Settings. Apple's guide says it works on Macs with Apple silicon or an Intel Mac with the T2 chip running macOS 12 or later: open System Settings, click General, then Transfer or Reset, then Erase All Content and Settings. Back up with Time Machine first, because it removes everything, signs you out of Apple services and turns off Find My and Activation Lock. Older Intel Macs without a T2 chip use the Recovery-based erase instead.
NIST's media sanitization guidelines, last updated in September 2025 as SP 800-88 Rev. 2, are written for organizations choosing a method by how sensitive the data is. Most people need the simpler rule: encryption on, then a full erase before the Mac leaves your hands.
External drives and what FileDial does not do
For an external SSD or USB drive, there is no guaranteed file-level shred. Use encryption when you first set up the drive, then erase the whole disk in Disk Utility when you finish with it. If the drive held highly sensitive data and you cannot trust the erase, physical destruction is the conservative choice.
FileDial does not claim to securely erase files. Its tools write new copies and never touch the original unless a tool says so. What it can do is limit the number of sensitive copies you create. Run clean-up tools such as Privacy › Remove all metadata on the copy you send, then delete the working copies and empty the Trash.
Mistakes people make when deleting on a Mac
The first is believing Empty Trash is a shredder. It is not, and for most everyday files that is acceptable, because a Mac with its internal storage encrypted keeps deleted blocks unreadable without the key. The risk rises when FileVault is off on an older machine, or when the data sat on an unencrypted external drive.
The second is trusting an app that promises multi-pass overwriting of single files. Those methods were designed for spinning disks, and on flash storage the drive may write to different cells, so the old copy can survive. Apple's own security documentation points to encryption and key deletion, not overwriting.
The third is forgetting the other copies. Time Machine backups, iCloud Drive, photo libraries, mail attachments, Downloads and application caches can each hold a version. Deleting the visible file while a backup keeps it is the common real-world leak. Delete from backups when you must, and check synced folders on your other devices.
The fourth is erasing too early or too late when selling a Mac. Sign out of iCloud, back up with Time Machine, then run Erase All Content and Settings; do not hand over a machine that still shows your account. A fifth is overlooking external media. A USB stick that held client files should be erased fully, and if it cannot be trusted, destroyed.
Finally, remember what you can control: fewer copies. Process a sensitive file once, send the cleaned copy, delete the working copies and empty the Trash with Shift-Command-Delete. Privacy › Remove all metadata and the PDF sanitizer in FileDial reduce what the sent copy reveals, but they do not securely erase anything, and this guide does not claim that they do.
Questions
Is Secure Empty Trash still in macOS?
No. Apple removed Secure Empty Trash from the Finder in recent versions of macOS, and the usual explanation is that overwriting is unreliable on solid-state storage. Rely on FileVault to protect stored data and on a full erase when the Mac leaves your hands, rather than looking for a shredder command.
Does Empty Trash make a file unrecoverable?
Not guaranteed. The file stops being listed and its space becomes reusable, but old data may remain until overwritten. On a Mac whose storage is encrypted, that leftover data is encrypted too, which greatly reduces the practical risk, especially with FileVault on and a strong login password.
Is Erase All Content and Settings enough before selling?
For most people, yes. Apple's guide says it removes content, settings, apps and user accounts and turns off Find My and Activation Lock. Back up first, sign out of your accounts, and confirm the Mac shows the Hello screen afterwards before handing it over.
Should I use a third-party shredder app?
Be cautious. Tools built for spinning disks may not remove data from an SSD, because wear leveling can move data between blocks. Wikipedia reports that software file-level methods were not effective on SSDs in testing. Encryption plus a full erase is the approach Apple's security documentation supports.