How to erase a hard drive on Mac securely
Posted on
by
Kamso Oguejiofor-Abugu

Simply moving files to the Trash doesn’t fully clear your Mac’s drive, as someone else could still bring those files back with a recovery tool. When you securely erase a hard drive on a Mac, that data is effectively unrecoverable. That makes it the right step when you’re preparing a drive to pass along, setting it up for a new purpose, or clearing out old hardware.
The exact process depends on the drive you have, whether that’s your Mac’s built-in storage, an external hard disk drive (HDD), or a solid-state drive (SSD). Before starting, take a quick moment to double-check that you’ve selected the right drive or partition, just to protect anything you want to keep.
This guide walks you through how to securely erase the hard drive on your Mac, and what to do if you plan to give away, sell, or trade in the computer.
Choose the right method for your drive
Different drives require different steps. Pick the wrong method and you could end up erasing the wrong thing, or with a drive that isn’t fully wiped. Here’s the short version:
- For internal drives, use Apple’s Erase Assistant if the Mac has Apple silicon or the Apple T2 Security Chip and runs macOS Monterey 12 or later.
- For internal drives on other Macs, restart the device in macOS Recovery mode and use Disk Utility Go to erase the disk.
- For external hard disk drives (HDDs), use Disk Utility, plus write over the old data, if your drive supports it.
- For external solid-state drives (SSDs) or flash drives, use Disk Utility. You can’t write over the old data, so you’ll have to use encryption to protect your data here.
How to securely clear the disk on your Mac
Your Mac’s internal drive is the main storage inside your Mac that holds your operating system and personal files. How you erase it depends on the age of your Mac and the chip inside it. Before you begin, make sure you back up anything important using Time Machine or another storage method.
If your Mac has Apple silicon or the Apple T2 Security Chip and runs macOS Monterey 12 or later, use Apple’s Erase Assistant. For the complete sale, trade-in, donation, or recycling workflow, see how to securely dispose of your old Mac.
If Erase Assistant isn’t available, start the Mac in macOS Recovery and erase the startup disk with Disk Utility:
- On a Mac with Apple silicon, shut down the Mac. Press and hold the power button until Loading startup options appears, select Options, then click Continue.
- On an Intel-based Mac, restart the Mac and immediately hold Command-R until the Apple logo or a spinning globe appears.
- If prompted, select the startup disk and an administrator account, enter the password, and click Continue.
- When the Recovery window opens, select Disk Utility and click Continue.
Here’s how to use Disk Utility after opening it in recovery mode:
- Open the View menu at the top of your screen and choose Show All Devices. This ensures Disk Utility lists the entire physical drive rather than just an individual partition inside it.
- In the sidebar, select the drive or volume you want to erase. Double-check that you’ve selected the right one before moving on.
- Click Erase near the top of the window.
- For Scheme, choose GUID Partition Map. If you don’t see this option, go back to the sidebar and make sure you selected the main drive rather than an inner volume.

- Under Format, pick the file system that works best for you.
- Type a name for your drive.
- If your drive supports Security Options, click that button and adjust the slider to your liking. Click OK.
- Click Erase, then click Done once the process completes.
To set up your Mac again using the freshly erased disk, select Reinstall macOS from the options on screen, click Continue, and follow the steps as they appear.
If your Mac has an SSD, you won’t see Security Options. If you want extra security before wiping an SSD, encrypt the drive beforehand so your data remains unreadable without the encryption key.
How to securely erase an external hard drive with Disk Utility
Before you begin, double-check that you plugged in the correct drive and that any files you want to keep are backed up somewhere else. Follow these steps:
- Connect the drive to your Mac and confirm it appears on your Desktop or in the Finder sidebar.
- Open Disk Utility. You can find it by opening Finder and going to Applications > Utilities, or by pressing Command + Spacebar to search for it with Spotlight.

- Open the View menu at the top of your screen and select Show All Devices. This ensures Disk Utility lists the full physical drive rather than just an individual partition inside it.
- In the sidebar, select the drive or volume you want to erase. Take a moment to make sure you have highlighted the correct device.
- Click Erase near the top of the window.
- For Scheme, choose GUID Partition Map. If you don’t see this option, go back to the sidebar and make sure you selected the main physical drive rather than an inner volume.
- Under Format, pick the file system that works best for you.
- Type a name for your drive.
- If your drive supports it, you’ll see a Security Options button. Click it and choose an overwrite level. A single overwrite pass is usually sufficient for ordinary reuse, while additional passes take longer and may be required by an organization’s data-handling policy. Click OK.
- Click Erase, then click Done once the process completes.
Secure erase options for HDDs
When you erase an external HDD in Disk Utility, you may see a Security Options button in the erase dialog. Clicking it reveals a slider with a few settings. At the fastest end, the drive is erased quickly but the old data isn’t written over, so a recovery tool could still bring it back. As you move the slider to the right, Disk Utility writes over the data, and the higher settings do it several times.
These options aren’t available for every storage device, so if you don’t see the button at all, it doesn’t mean something’s wrong.
Each extra pass overwrites the drive again, making original data much harder to recover, though each pass adds significant time to the process.
It’s easy to think that picking maximum passes is the sensible default, but most people don’t need to go that far. If you’re handing the drive off to someone else or setting it up for a new project, a single overwrite pass is usually sufficient for ordinary reuse. Just avoid leaving it on the fastest setting, since that one doesn’t write over your data.
Those extra passes are really there for times when strict privacy guidelines or sensitive data demand an extra layer of caution.
Why Security Options is missing on SSDs
Disk Utility doesn’t provide Security Options for SSDs, and that’s not a bug or a missing feature on your end. The reason has to do with how SSDs store data.
Traditional hard drives write to fixed physical locations, which is what makes overwriting them meaningful.
SSDs manage data differently, spreading and moving it across memory cells in ways that make repeated overwriting an unreliable way to guarantee the original data is gone. So Disk Utility doesn’t offer it as an option here.
Erasing an SSD multiple times or trying to force a multi-pass wipe won’t give you the same security as overwriting an HDD. If you want to keep the contents of an SSD or flash drive out of reach, encryption is the way to do it.
Using encryption for SSDs and flash drives
Disk Utility can’t overwrite an SSD the same way it does an HDD, which makes encryption essential for keeping your files private. When a drive is encrypted, anything left behind after an erase remains scrambled and useless without the decryption key or password.
Keep in mind that encrypting a drive later on won’t protect files you deleted while protection was turned off. This means specialized recovery software might still be able to read those older files. The simplest approach is to turn encryption on as soon as you plug the drive in for the first time.
For Mac internal SSDs
Use FileVault to encrypt your Mac’s internal SSD. When it’s turned on, everything written to your startup disk is encrypted, so even if someone got hold of your Mac, the data would be unreadable without your password or recovery key.
Here’s how to turn on FileVault:
- From the Apple menu, choose System Settings, then go to Privacy & Security > FileVault.
- Turn on FileVault and enter your administrator password if prompted.
- Choose whether to use your iCloud account or create a recovery key to unlock the disk if you forget your password. If you choose a recovery key, store it somewhere safe away from the Mac.
- If macOS shows Enable Users, select the other users who should be able to unlock the disk and enter their login passwords.
On Macs with Apple silicon or the T2 Security Chip, data is already encrypted automatically; FileVault adds protection by requiring an authorized login password to access it. On older Intel Macs, initial encryption may take time, but you can continue using the Mac while it finishes.
For external SSDs and flash drives
For external SSDs and flash drives, you may be able to encrypt the drive straight from Finder. When you do this, the disk format is converted to the APFS format and then encrypted, which protects it with a password while leaving your files in place. To encrypt a drive in Finder:
- Plug in your external drive or flash drive.
- Open Finder and locate the drive in the left sidebar.
- Control-click (or right-click) the drive’s icon and select Encrypt [drive name].
- Create a unique, memorable password, then choose Encrypt Disk. Make a note of this password somewhere safe. Without it, you can’t access the files on the drive.
Depending on how much is already saved on the drive, the encryption process may take a little time. You can keep using your Mac normally while it finishes up.
If you don’t see the Encrypt [drive name] option in Finder, it might not be available for your drive or Mac. In that case, you can format and encrypt the disk using Disk Utility.
For both internal and external drives
You can also encrypt an internal or external storage device while formatting it in Disk Utility. This protects the newly formatted device with a password. Select APFS (Encrypted) as the format when erasing the drive. For your Mac’s active startup disk, use FileVault instead.
How to erase a Mac before you sell, trade, or recycle it
Preparing a Mac for a new owner involves more than erasing its drive. Follow our guide to securely dispose of your old Mac for the complete sale, trade-in, donation, or recycling workflow, including the correct erase method, account sign-outs, Activation Lock, and final handoff steps.
What to do if you can’t erase a drive
Occasionally, a drive reaches a point where it won’t show up on your Mac or respond to standard erase commands, yet the private files stored on it remain intact.
When this happens, don’t try to force the issue with physical destruction or improvised methods at home. That’s harder to do safely and thoroughly than it sounds, and it’s easy to end up with a drive that’s damaged but still partially readable.
A simpler and far more reliable option is to hand the drive over to a certified recycling or data-destruction service. They have the proper equipment to handle drives that can’t be erased through normal means, and to destroy the data in a way you can actually verify.
Choosing a file system after erasing
When you erase a drive in Disk Utility, you’ll be asked to choose a format. The best choice depends on what you need to store and which computers you will plug the drive into.
For Mac-only use, choose an APFS format. APFS is built for macOS 10.13 and later, and it comes in a few variations:
- APFS: This is the standard option, and the right choice for most people who don’t need encryption or special file-naming rules.
- APFS (Encrypted): Adds encryption to your drive. Pick this if you’re saving personal files, tax documents, or anything you wouldn’t want someone else to open if the drive gets misplaced.
- APFS (Case-sensitive): Keeps folders like “Photos” and “PHOTOS” completely separate. You can safely skip this unless you’re writing code or running software that specifically calls for it.
- APFS (Case-sensitive, Encrypted): Gives you both encryption and exact capitalization tracking on the same drive.
If you plan to move files back and forth between a Mac and a Windows PC, use one of these formats instead:
- MS-DOS (FAT): Pick this for smaller flash drives and memory cards that hold 32 GB or less.
- ExFAT: Use this for any drive larger than 32 GB.
Frequently asked questions
How do I erase an external hard drive on Mac?
To erase an external hard drive (HDD), plug it into your Mac, open Disk Utility, and select the drive itself from the sidebar rather than one of the volumes under it. Click Erase, pick a format and scheme, and confirm. If you see a Security Options button, you can use it to overwrite the old data and make recovery impractical with ordinary recovery tools.
Why is Security Options missing in Disk Utility?
Security Options only shows up for certain storage devices. If the option isn’t there, that’s expected for some drives. It doesn’t mean anything is wrong with your Mac or the drive.
Can you securely erase an SSD on Mac?
Disk Utility doesn’t use overwrite passes on solid-state drives (SSDs) because they work differently than other storage devices. Instead, turn on encryption before you erase an SSD or thumb drive.
Does Disk Utility erase everything?
Erasing a drive in Disk Utility is more thorough than deleting files or emptying the Trash. However, someone could still use advanced data recovery software to retrieve the old data if you didn’t encrypt or write over it.
Should I use APFS or ExFAT after erasing a drive?
If the drive is only going to connect to modern Macs, choose APFS. If you need to move files back and forth between a Mac and a Windows PC, pick MS-DOS (FAT) or ExFAT instead.
How do I wipe a Mac before selling it?
If you plan to sell your Mac, use the Erase All Content and Settings feature rather than manually erasing the internal drive. On older Macs without this option, sign out of your Apple Account and accounts first, then erase and reinstall macOS through Recovery Mode.
Does FileVault make erasing an SSD safer?
Yes. FileVault encrypts your Mac’s startup disk, so even if someone tries to recover data after you erase the disk, they won’t be able to read it without the encryption key.