How to Securely Erase a Hard Drive on Linux

Confirm the target hard disk device name (such as /dev/sda) to avoid accidentally deleting the system disk; 2. Use sudo dd if=/dev/zero of=/dev/sdX bs=1M status=progress to overwrite the zero value in full disk, which is suitable for most scenarios; 3. Use sudo shred -v -n 3 /dev/sdX for three random data overwrites to ensure that it cannot be restored; 4. Optionally execute sudo badblocks -wsv /dev/sdX for destructive write tests; finally use sudo hexdump -C /dev/sdX | head to verify that it is all zero and complete safe erasing.

If you're decommissioning a hard drive, selling an old laptop, or just want to make sure your data is truly gone, simply deleting files or reformatting isn't enough. On Linux, there are reliable, built-in tools to securely erase a hard drive so data can't be recovered—even with forensic tools.

Here's how to do it right:

? 1. Identify the Correct Drive

Before doing anything, double-check which drive you're targeting— wiping the wrong one could destroy your OS or data .

 lsblk

or

 sudo fdisk -l

Look for the device name like /dev/sda , /dev/nvme0n1 , etc.
? Pro tip: Unplug all unnecessary drives to avoid mistakes.

?️ 2. Use dd with /dev/zero (Basic Secure Wipe)

This overwrites the entire drive with zeros—good for most cases:

 sudo dd if=/dev/zero of=/dev/sdX bs=1M status=progress

Replace sdX with your actual drive (eg, sda ).

• if=/dev/zero = input is all zeros
• of=/dev/sdX = output to your target drive
• bs=1M = faster write speed
• status=progress = shows real-time progress

✅ Why this works : Overwriting with zeros makes most recovery tools useless.
⚠️ Note : This takes time—hours for large drives.

? 3. For Extra Security: Use shred

shred writes random data multiple times (default: 3 passes), making recovery nearly impossible:

 sudo shred -v -n 3 /dev/sdX

• -v = verbose (shows progress)
• -n 3 = 3 overwrite passes (you can use more, but 3 is usually sufficient)

? Use this if the drive hold sensitive data like passwords, financial records, or personal documents.

? 4. Optional: Use badblocks for Destructive Write Test

This is overkill for most users but useful if you want to both test for bad sectors and wipe:

 sudo badblocks -wsv /dev/sdX

• -w = destructive write test (wipes the drive)
• -s = show progress
• -v = verbose

This does one pass of predefined patterns —not as through as shred , but faster and still secure for casual use.

✅ Final Step: Verify the Wipe

After wiping, check that the drive is actually blank:

 sudo hexdump -C /dev/sdX | head

You should see only zeros (like 00000000: 00 00 00 ... ). If you see readable text or patterns, the wipe failed.

⚠️ Important Notes:

• Unmount all partitions first :

   sudo umount /dev/sdX*

• SSDs vs HDDs : For SSDs, use blkdiscard or the drive's built-in secure erase (via hdparm )—because wear leveling can leave data in unused blocks.
• Physical destruction is the only 100% secure method for top-secret data—but that's beyond software.

---

Basically, for 99% of users:

1. Identify the drive ✅
2. Run shred -v -n 3 /dev/sdX ?
3. Verify with hexdump ✅

It's not glamorous—but it's secure, simple, and uses tools already on your Linux system.

The above is the detailed content of How to Securely Erase a Hard Drive on Linux. For more information, please follow other related articles on the PHP Chinese website!