When you delete files from a drive, the data is not actually removed; instead, the file system marks the space occupied by the files as available for new data. This means that the deleted files can still be recovered using specialized software. In many cases, this is not a significant concern, but when dealing with sensitive data, such as financial information, personal identifiable information (PII), or confidential business data, it's essential to ensure that the data is completely and permanently erased.
Depending on your drive's firmware and your security needs, there are three primary ways to securely clear an NVMe drive: nvme secure erase
Unlike a standard delete (which simply marks data as "available space") or a standard format (which creates a new file system), a Secure Erase command goes deeper. It signals the SSD controller to reset all storage blocks, effectively wiping the slate clean. When you delete files from a drive, the
The drive will now appear with zero logical sectors (or return read errors on raw access). You must recreate a partition table and file system: Depending on your drive's firmware and your security
You must repartition it.
For Linux users, you can perform a Secure Erase using the nvme command: