How do I securely erase an M.2 SSD?

SSD
1

I recently upgraded my system and have an old M.2 SSD that I want to wipe clean before repurposing it. I need to make sure all data is securely erased. Can anyone guide me through the safest way to do this? Thanks in advance!

2

Why bother? Overkill much? Just formatting the drive is enough for most people. But I guess if u really want to go full paranoia-mode on this, you can use software like “Parted Magic” or “DBAN” they are designed for this kind of stuff. Downside? You have to pay for Parted Magic, and DBAN sometimes has trouble with SSDs.

Then there’s the built-in Secure Erase command. It’s a lil complicated but works. Check if ur SSD manufacturer has its own tool. For Samsung, there’s the Samsung Magician. It wipes pretty well, but it’s bloated software. Crucial and others have their versions too; don’t expect stellar interfaces…

If you’re that worried about data recovery, maybe just destroy the drive physically? I mean, it may sound extreme, but it’s deffo secure. No one recovers data from pieces of silicon.

3

First off, techchizkid’s spot on about a couple of things, but let me dissect this a bit further for clarity and to cover more bases without just regurgitating what’s been said.

Formatting is definitely not the way to go if you want to securely erase your M.2 SSD. Many users skip right to a quick format thinking it’s done the job, but the reality is that data can still be recovered fairly easily from a formatted drive. So yeah, that’s not gonna fly if you’re really wanting to ensure nobody gets to your old data.

Here’s a more thorough breakdown:

1. Secure Erase via Manufacturer Tools:
Most reputable SSD manufacturers like Samsung, Crucial, Kingston, etc., provide their own tools for drive management, and these tools often come with a Secure Erase feature. Since @techchizkid mentioned Samsung Magician, I’ll add that although it might seem bloated, it’s pretty straightforward if you can get past the interface.

For a step-by-step (and this isn’t exclusive to Samsung):

  • Backup any data you might still need from the SSD.
  • Download the manufacturer’s tool and install it (Samsung Magician, Crucial Storage Executive, etc.).
  • Navigate to the Secure Erase feature. If you’re using a USB boot method, make sure to create the bootable drive and follow the steps.
  • Execute the Secure Erase and wait—it’s usually quite fast.

2. Third-Party Software:
DBAN (Darik’s Boot and Nuke) was mentioned, but as noted, it sometimes has issues with SSDs due to the different way SSDs handle data. Alternatives like Parted Magic are useful, but there’s a cost involved. For free alternatives, consider:

  • HDDErase: is an older, but still effective tool. It uses ATA Secure Erase command and can be run from a bootable USB stick.
  • Blancco: provides a free drive erasure tool specifically for SSDs which is robust.

Note: Be wary of downloading software from non-reputable sources—stick to official websites whenever possible.

3. BIOS/UEFI Secure Erase:
Some newer motherboards provide a built-in secure erase feature directly within the BIOS/UEFI. This method can be really convenient and doesn’t require additional software:

  • Reboot and enter the BIOS/UEFI.
  • Look for settings related to SSD or Storage configuration.
  • Locate the Secure Erase option. The terminology might vary, so you might have to dig a bit.

4. Physical Destruction:
While this method guarantees total data destruction, it’s quite extreme unless you’re absolutely sure you’ll never use the SSD again. If you’re leaning this way:

  • Dismantle the SSD: Remove the circuit board from the metal casing.
  • Shatter the NAND chips: Crush the individual chips so the data becomes unrecoverable.

But again, this is a last-resort approach.

Minor Disagreement:
I don’t entirely agree with @techchizkid’s implication that using Secure Erase commands through built-in tools is overly complicated. Once you get the hang of the tool, especially those from the SSD manufacturer, it’s fairly user-friendly.

Final Note:
One unique method I didn’t see mentioned is using an encrypted file system. If your SSD was encrypted with a strong algorithm and key, simply deleting the encryption keys can serve as a secure wipe. Without the key, the data becomes practically irretrievable. If you didn’t use encryption beforehand, this doesn’t apply, but it’s something to consider in the future for peace of mind.

Remember, secure erasure ensures data is not only deleted but also not recoverable by any casual or even moderately sophisticated means. Choose the method that best meets your comfort level with tech and paranoia about data recovery.

4

Securely erasing an M.2 SSD is definitely not just about hitting “format,” and I see there’s already been some solid advice mentioned. I’ll add a few different angles you might want to consider.

Firstly, another good tool that’s often not mentioned but deserves some spotlight is GParted Live. It’s free, open-source, and pretty straightforward once you create a bootable USB. Unlike the bloated Samsung Magician or pricey Parted Magic, GParted Live allows you to securely erase your SSD. You’d:

  1. Create a bootable USB drive with GParted Live.
  2. Boot into GParted.
  3. Navigate to your SSD and use the “Erase” option to perform a secure erase.

Secondly, while the Secure Erase command and manufacturer tools are prime, not all users are comfortable with these techier options, and sometimes they don’t play nice with all SSD models. An often overlooked option is using Windows PowerShell:

  1. Open PowerShell with admin rights.
  2. Use the manage-bde command for BitLocker-encrypted drives to nuke the encryption keys. This makes existing data irretrievable.

So if you encrypted your drive with BitLocker, running manage-bde -off X: will decrypt it but using remove options more or less erases the encryption keys, making data non-recoverable.

Thirdly, I get the vibe that smashing SSDs feels a tad too dramatic for some. However, if you still worry about someone recovering your secure erase data, you can overwrite the drive multiple times using a stress test or dedicated SSD erase tools that write random data over existing data. SDelete by Sysinternals is a decent option. It’s command-line but not that daunting:

  1. Download and extract SDelete.
  2. Run command prompt as admin.
  3. Type sdelete -p 3 X: which overwrites your SSD three times (increase p value if feeling extra paranoid).

Lastly, keeping future usage in mind, consider always encrypting your SSD if you handle sensitive data. That way, secure erasing down the line is less of a hassle since you’d only need to remove the encryption key.

Remember, the simplest solution that matches your technical ability and paranoia level works best. Some folks just won’t sleep well without a complete hardware destruction ceremony, but for most, the tools mentioned should be more than enough.