如何在Linux上安全刪除硬盤驅動器

確認目標硬盤設備名（如/dev/sda），避免誤刪系統盤；2. 使用sudo dd if=/dev/zero of=/dev/sdX bs=1M status=progress全盤覆寫零值，適用於大多數場景；3. 敏感數據使用sudo shred -v -n 3 /dev/sdX進行三次隨機數據覆寫，確保無法恢復；4. 可選執行sudo badblocks -wsv /dev/sdX做破壞性寫入測試；最後用sudo hexdump -C /dev/sdX | head驗證是否全為零，完成安全擦除。

If you're decommissioning a hard drive, selling an old laptop, or just want to make sure your data is truly gone, simply deleting files or reformatting isn't enough. On Linux, there are reliable, built-in tools to securely erase a hard drive so data can't be recovered—even with forensic tools.

Here's how to do it right:

? 1. Identify the Correct Drive

Before doing anything, double-check which drive you're targeting— wiping the wrong one could destroy your OS or data .

 lsblk

or

 sudo fdisk -l

Look for the device name like /dev/sda , /dev/nvme0n1 , etc.
? Pro tip: Unplug all unnecessary drives to avoid mistakes.

?️ 2. Use dd with /dev/zero (Basic Secure Wipe)

This overwrites the entire drive with zeros—good for most cases:

 sudo dd if=/dev/zero of=/dev/sdX bs=1M status=progress

Replace sdX with your actual drive (eg, sda ).

• if=/dev/zero = input is all zeros
• of=/dev/sdX = output to your target drive
• bs=1M = faster write speed
• status=progress = shows real-time progress

✅ Why this works : Overwriting with zeros makes most recovery tools useless.
⚠️ Note : This takes time—hours for large drives.

? 3. For Extra Security: Use shred

shred writes random data multiple times (default: 3 passes), making recovery nearly impossible:

 sudo shred -v -n 3 /dev/sdX

• -v = verbose (shows progress)
• -n 3 = 3 overwrite passes (you can use more, but 3 is usually sufficient)

? Use this if the drive held sensitive data like passwords, financial records, or personal documents.

? 4. Optional: Use badblocks for Destructive Write Test

This is overkill for most users but useful if you want to both test for bad sectors and wipe:

 sudo badblocks -wsv /dev/sdX

• -w = destructive write test (wipes the drive)
• -s = show progress
• -v = verbose

This does one pass of predefined patterns —not as thorough as shred , but faster and still secure for casual use.

✅ Final Step: Verify the Wipe

After wiping, check that the drive is actually blank:

 sudo hexdump -C /dev/sdX | head

You should see only zeros (like 00000000: 00 00 00 ... ). If you see readable text or patterns, the wipe failed.

⚠️ Important Notes:

• Unmount all partitions first :

   sudo umount /dev/sdX*

• SSDs vs HDDs : For SSDs, use blkdiscard or the drive's built-in secure erase (via hdparm )—because wear leveling can leave data in unused blocks.
• Physical destruction is the only 100% secure method for top-secret data—but that's beyond software.

---

Basically, for 99% of users:

1. Identify the drive ✅
2. Run shred -v -n 3 /dev/sdX ?
3. Verify with hexdump ✅

It's not glamorous—but it's secure, simple, and uses tools already on your Linux system.

以上是如何在Linux上安全刪除硬盤驅動器的詳細內容。更多資訊請關注PHP中文網其他相關文章！