IO — Ivan Labs

Deleted Files on an SSD: Why TRIM Changes Everything

4 min de lecture
Récupération de donnéesMatériel

Cet article n'est disponible qu'en anglais pour le moment.

If you've ever recovered a deleted file from a hard drive months later and expect the same from an SSD, the bad news comes fast: it usually doesn't work the same way. Here's why.

How deletion actually works

On any drive, deleting a file doesn't erase its data immediately — the operating system just marks the space as free and removes the entry from the file table. The actual bytes stay on the storage medium until something overwrites them. On an HDD, that's the whole story, which is why recovery tools can often pull deleted files back days or weeks later.

SSDs add a second step that HDDs don't have: TRIM.

What TRIM actually does

TRIM is a command the operating system sends to an SSD telling it "these blocks are no longer in use." The SSD's own controller then proactively erases those flash cells in the background — independently of any file table, and before the space is ever reused.

This exists because of how flash memory works: SSDs can't overwrite a used cell directly, they have to erase a whole block first. Doing that erase ahead of time (instead of at write time) is what keeps SSD write speeds from degrading as the drive fills up. TRIM is a performance and longevity feature — recoverability was never a design goal.

The practical effect: once TRIM has run on the blocks your deleted file occupied, the data is gone at the hardware level, not just hidden from the file system. No recovery software — free or paid — can pull data back from cells that have been physically erased.

When recovery is still realistically possible

ScenarioRecovery odds
Deleted seconds ago, drive still powered, TRIM enabledLow — TRIM often runs almost immediately
TRIM disabled (some RAID configurations, some older/enterprise setups)Higher — behaves closer to an HDD
Drive was in a hardware/USB enclosure without TRIM pass-throughHigher — TRIM commands don't always reach the drive through USB bridges
File was on a different volume than the OS drive and unmounted quicklyHigher — less chance of a TRIM cycle running before you acted
Encrypted drive (BitLocker/FileVault)Recovery of raw data may work, but it's unreadable without the key

What to actually do in the first 10 minutes

  1. Stop using the drive. Don't install recovery software onto the same drive you're trying to recover from.
  2. Check if TRIM is enabled before you assume the situation is hopeless — see the FAQ below for the exact command.
  3. If it's an external/USB SSD, there's a real chance TRIM never reached it — these cases have meaningfully better odds.
  4. If the data matters professionally or legally, stop and get a proper forensic opinion before running consumer recovery tools — some of them write to the drive during the scan, which can destroy the very data you're trying to save.

The honest takeaway

SSD recovery isn't impossible, but the odds are structurally worse than HDD recovery because of a feature (TRIM) that exists specifically to keep the drive fast — not to preserve deleted data. The only recovery strategy that reliably works on an SSD is the one you set up before anything went wrong: backups.

Already in a situation where something important was deleted from an SSD? Get in touch before you try more recovery tools on the same drive — what you do in the first few minutes matters more than which specific tool you use.

Questions fréquentes

Can deleted files be recovered from an SSD?

Sometimes, but far less reliably than on a hard drive. If TRIM has already run on the deleted blocks, the underlying flash cells are physically wiped by the drive's controller, not just marked as free — no software can recover that data.

How do I know if TRIM is enabled on my drive?

On Windows, run `fsutil behavior query DisableDeleteNotify` in a command prompt — a result of 0 means TRIM is enabled. On Linux, `sudo systemctl status fstrim.timer` shows if periodic TRIM is active.

Should I turn off TRIM to make future recovery easier?

Not recommended. TRIM keeps SSD write performance and longevity healthy over time. Trading that away for a hypothetical future recovery scenario is usually the wrong trade — back up important data instead.

Besoin d'aide avec ça ?

Contactez-moi et je vous aiderai à régler ça.

Me contacter

Articles similaires

Partager :X / TwitterLinkedIn