{"id":47587,"date":"2015-11-05T10:42:32","date_gmt":"2015-11-05T18:42:32","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=47587"},"modified":"2017-08-25T04:19:04","modified_gmt":"2017-08-25T11:19:04","slug":"how-to-securely-empty-trash-in-os-x-el-capitan","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/how-to-securely-empty-trash-in-os-x-el-capitan\/","title":{"rendered":"How to Securely Empty Trash in OS X El Capitan"},"content":{"rendered":"

\"Secure<\/p>\n

Previous versions of OS X used to have a Secure Empty Trash feature, which would securely delete the contents of the Trash. What this did was overwrite\u00a0the files with zeroes, making\u00a0it much harder \u2014 nearly impossible, in fact \u2014 to recover the files.<\/p>\n

Unfortunately, when OS X El Capitan was released, Apple removed the Secure Empty Trash feature due to a vulnerability identifid as CVE-2015-5901<\/a>. As the company says in its\u00a0notes for security fixes<\/a>:<\/p>\n

Finder
\nAvailable for: Mac OS X v10.6.8 and later
\nImpact: The “Secure Empty Trash” feature may not securely delete files placed in the Trash
\nDescription: An issue existed in guaranteeing secure deletion of Trash files on some systems, such as those with flash storage. This issue was addressed by removing the “Secure Empty Trash” option.<\/p><\/blockquote>\n

When OS X saves a copy of a file, it doesn’t write that file to the same part of the disk. In layman’s terms, what this\u00a0means is that while you may be able to securely delete a file or folder, you cannot\u00a0be certain that other copies of that file are not recoverable. As such, securely emptying the Trash is not reliable. While many Mac users miss this option, Apple felt it’s better to be safe and not offer it if the feature isn’t 100% reliable.<\/p>\n

How to securely delete files\u00a0in El Capitan<\/h3>\n

There are still a couple of ways you can securely delete files in El Capitan. For example, you can use a command called srm<\/code>, which can “securely remove files or directories.” To do this, open Terminal (go to Finder<\/strong> > Applications<\/strong>\u00a0> Utilities<\/strong>); it’s in the Utilities folder in your Applications folder, and then type the following:<\/p>\n

srm -v <\/code><\/p>\n

Type a space after the above command. Drag a file that you want to delete into the Terminal window; you’ll see that Terminal adds its file path. Press Return, and the file will be securely deleted. If the file is very large, this may take a while.<\/p>\n

If you want to delete a folder, then use this command:<\/p>\n

srm -rv <\/code><\/p>\n

However, this command may still not delete other copies of a file that had previously been written to other parts of your disk.<\/p>\n

How to securely erase free space in El Capitan<\/h3>\n

To fully clean up your drive, you can use another Terminal command to securely erase all its free space. (This feature used to be available in Disk Utility<\/a>, but Apple removed it.). The command is as follows:<\/p>\n

diskutil secureErase freespace LEVEL \/Volumes\/DRIVE<\/code><\/p>\n

Replace DRIVE with the name of your drive, and LEVEL to a number from 0 to 4. The following describes what these numbers mean:<\/p>\n