How to Secure Erase Ssd

Secure erase is the kind of task where you want the “works every time” method, not the “I clicked something and hope for the best” method. The good news: depending on your SSD type and what it supports, you can wipe the drive in a way that’s meant to make old personal data extremely hard to recover. The key is choosing the right path—Windows “Clean data,” firmware Secure Erase, NVMe “Format NVM,” or crypto-erase (when available).

Check what you have: NVMe vs SATA and whether Secure Erase is supported

Before you do anything, figure out two things:

1) Is your SSD NVMe or SATA?

  • NVMe usually shows up as an “NVMe” drive in Windows (often faster, often on M.2).
  • SATA is the more classic drive type (often 2.5-inch or older interfaces), and it looks like a normal SATA SSD in your system.

2) Does your SSD support Secure Erase (or crypto-erase)?

  • Many drives support a firmware Secure Erase feature, but not all.
  • For NVMe, secure erase is handled via the Format NVM command (if supported by the drive).
  • If Secure Erase isn’t supported, you’ll use a “best alternative wipe” approach (covered below).

Quick decision check:

  • If it’s NVMe → jump to NVMe method: Format NVM section.
  • If it’s SATA and supported → use BIOS/UEFI method: firmware Secure Erase.
  • If you want a Windows workflow and it offers the right options → use the Windows method.

Also, make sure you know which drive you’re wiping. If you have more than one SSD (or one SSD + an external drive), it’s easy to pick the wrong target.

Windows method: use Security settings to remove everything and enable Clean data

If you’re wiping from Windows (common for folks selling/donating a whole PC), look for the Windows secure erase-style workflow that uses Remove everything and a Clean data option.

Use this path like a checklist:

Step-by-step (Windows secure erase-style wipe)

1) Open Windows Security.

2) Go to the area for Device security.

3) Look for Reset this PC (or the erase/wipe option inside it, depending on your build).

4) Choose Remove everything.

5) Click Change settings.

6) Enable “Clean data.”

7) Choose whether you want to affect all drives or just the drive you’re working on.

8) Start the reset/erase.

Important choices you’ll see

Important choices you’ll see
  • Remove everything is the “wipe the data” part.
  • Clean data is the stronger wipe option (it’s the one you want enabled when you’re trying to properly secure erase-style results).
  • Affects all drives vs just this drive matters a lot on systems with multiple disks.

Windows 11 vs Windows 10 note

Windows 11 vs Windows 10 note

The wording is very similar, but menus can look slightly different depending on Windows 10 vs 11. If you don’t see the exact option names in the place you expect, the goal is still the same: Remove everything and turn on Clean data.

Before you start:

  • Plug in power if you’re on a laptop.
  • Don’t let the PC sleep or shut down mid-process.
  • Be sure you’re wiping the correct system drive.

BIOS/UEFI method: run Secure Erase from the drive’s firmware interface

If your SSD supports firmware Secure Erase, the “cleanest” feel usually comes from running it outside Windows. That’s because you’re using the drive’s own Secure Erase feature through your system firmware (BIOS/UEFI).

This is also the best route when you have a SATA SSD and you’d rather not rely on Windows options.

Step-by-step (general BIOS/UEFI path)

1) Shut down your PC completely.

2) Turn it on and enter BIOS/UEFI setup (use the key your system shows at startup—commonly Delete, F2, or similar).

3) Look for a storage/security option related to the SSD, often named something like:

  • Secure Erase
  • Drive wipe
  • SSD security (varies by brand)

4) Select the target drive carefully.

5) Run Secure Erase from that menu.

6) Let it finish. Do not interrupt it.

Practical warning

Firmware tools are still “wipe the drive” tools. If you aim at the wrong SSD, you’ll erase the wrong data. Take 30 seconds to confirm the drive model/slot shown in BIOS/UEFI.

If you’re on a laptop or a desktop with unfamiliar storage setups, it’s worth double-checking which drive is listed in the firmware tool before you start.

NVMe method: use the Format NVM command for secure erase

For NVMe SSDs, secure erase is described as being done through the Format NVM command. That’s the NVMe way to trigger a secure-format-style erase (when the drive supports it).

Step-by-step (NVMe secure erase)

1) Confirm the drive is truly NVMe.

2) Use the method your system/utility provides to send the Format NVM command (this may be through a vendor tool or a command-line tool your setup uses).

3) In the formatting/erase options, choose the option that performs the secure erase-style behavior tied to Format NVM.

4) Run the command.

5) Wait for it to finish. Don’t power off early.

What to watch for

  • NVMe secure erase depends on drive support and the tool you use.
  • If you can’t find a way to use Format NVM for secure erase on your setup, don’t force it. That’s your signal to use the fallback method below.

If Secure Erase isn’t supported: safest alternative wipe approach

Sometimes you’ll discover your SSD doesn’t offer Secure Erase (or you can’t access it from BIOS/UEFI or tools). In that case, the “safest alternative wipe” becomes more about doing the best possible full wipe you can from what your drive actually allows.

Here’s a practical way to decide:

Use these steps when Secure Erase isn’t available

1) Try the Windows “Clean data” path first (if you can see Remove everything and Clean data). That’s often the strongest Windows option you’ll get.

2) If you still can’t do a strong erase, use a wipe method that fully targets the whole SSD, not just files. The goal is to remove file access data and ensure the drive is treated as wiped.

3) Avoid “quick delete” style steps. Those can leave too much behind.

4) After wiping, verify you truly wiped the right drive (see verification steps later).

If your goal is sale/disposal and you can’t get Secure Erase, Windows Clean data is usually the most straightforward “do it right” option—assuming it’s available on your system.

Crypto-erase: remove/replace the encryption key instead of overwriting data

There’s another secure wipe idea that doesn’t work like “overwriting everything.” It relies on encryption.

With crypto-erase, the drive is wiped by removing or replacing the encryption key. That makes the stored data unreadable because without the key, the data can’t be decrypted into usable form.

Why this can be a big deal

  • It can be faster than full rewrite-style wiping, depending on the drive.
  • It’s a solid method when the SSD encryption feature is in play and the drive supports crypto-erase.

What you should do with this option

  • If your SSD supports crypto-erase and you know the drive is encrypted, crypto-erase can be a very effective “secure erase” approach.
  • If the drive isn’t encrypted, crypto-erase won’t make sense, because there’s no encryption key to remove or replace.

If you’re unsure whether your SSD is encrypted, check how encryption is set up in your system first.

How to wipe an SSD before selling or disposal (what to verify after)

This is where most people get sloppy. You don’t just start a wipe and assume it worked. You verify.

Right before you wipe

  • Back up anything you still need, even temporarily.
  • Confirm which SSD is being targeted (model name, size, and connection type if possible).
  • Make sure you’re erasing the right device for the right reason (sale/disposal).

After the wipe finishes

After the wipe finishes

What to check depends on what you used:

  • Windows “Remove everything” + Clean data:

After it reboots, you should end up at a fresh setup state (no old user files sitting around). If the wipe was successful, you should see no normal access to your old Windows setup and data.

  • BIOS/UEFI firmware Secure Erase:

The drive should no longer behave like it has your old partitions or OS data. If you’re booting into an old OS and it still starts, stop and investigate—you may not have wiped the target.

  • NVMe Format NVM secure erase:

You should not be able to boot into your prior system normally, and old data should not be accessible in the way you expect.

  • Crypto-erase:

Data should become unreadable because the key is removed/replaced. Practically, that means you shouldn’t be able to open files the old way.

Final double-check (the part you shouldn’t skip)

After you pick your SSD type and the matching method, double-check you erased the correct drive before selling or disposing of it.

How long does it take to secure erase an SSD? (what affects timing)

There isn’t one single time that fits all SSDs. Timing depends on the method you use and how the drive handles the operation.

Here’s what changes the clock:

  • Windows “Clean data” vs a lighter option: enabling Clean data can take longer than just a quick removal.
  • Firmware Secure Erase: drives handle this internally, and the duration depends on the drive’s security command and state.
  • NVMe Format NVM: NVMe secure erase is done through that command, and the time depends on drive support and how the format is processed.
  • Drive size and how your system is set up: larger drives often take longer, and some setups add time for preparation/handling.
  • Crypto-erase (if supported): because it focuses on removing/replacing the encryption key (instead of rewriting everything), it may complete faster than overwrite-style approaches.

If you want a simple expectation: the stronger and more “real erase” options you pick, the longer you should plan to wait. Treat it like a real process, not something you’ll do in the time it takes to click a menu.

What happens if I secure erase my SSD? (expected outcomes and common concerns)

When you secure erase, the goal is to make stored personal data extremely hard to recover. What you’ll notice right after is usually pretty straightforward:

Expected outcomes

  • Your files and old partitions should be gone or no longer usable.
  • Your OS won’t boot normally anymore if you wiped the system drive.
  • The drive should behave like it’s ready for a fresh setup (or ready to be used as blank storage).

Common concerns you might have

  • “Will it damage the SSD?”

Secure erase is designed for this purpose—wiping. You should avoid interrupting it, but the feature itself is built for drive clearing.

  • “Can I still recover my files?”

The whole point is to prevent recovery. If you might need the files later, stop and back up first.

  • “Did I wipe everything, or only my files?”

That’s why you choose the right method (Windows with Clean data, firmware Secure Erase, NVMe Format NVM, or crypto-erase when supported). “File delete” isn’t the same thing.

  • “What if it shows errors or hangs?”

Don’t power off during secure erase steps. If something looks stuck for a long time, give it time to finish if your system remains responsive. If it fails, you’ll need to try a different supported method.

Quick FAQ-style answers

What happens after secure erase?

You should end up with your old data effectively unusable. Usually the PC won’t boot into your old Windows setup, and you can then reinstall OS (for your own use) or hand off the drive (for sale/disposal).

What is the safest way to erase an SSD?

Safest depends on what your SSD supports:

  • Drive-supported Secure Erase (firmware) when available
  • Windows erase with Remove everything + Clean data when that’s your best available option
  • NVMe Format NVM for NVMe drives
  • Crypto-erase if the drive supports it and encryption is involved

If Secure Erase isn’t supported, use the strongest wipe option your system and drive allow.

How long does it take to secure erase an SSD?

It varies by method: Windows Clean data vs firmware Secure Erase vs NVMe Format NVM. Stronger options usually take longer.

How do I safely erase files?

Don’t just delete files. Use a secure erase-style wipe method that targets the whole drive (Windows Remove everything with Clean data, firmware Secure Erase, NVMe Format NVM, or crypto-erase when supported). Then verify the drive behaves like it’s wiped.

---

After you pick your SSD type and method, follow the matching steps and double-check you erased the correct drive before selling or disposing of it.

DH

Written by Dennis Haymon

Dennis Haymon is a security professional and manager at Safe & Sound Security LLC. With experience in security guard and patrol services, he shares practical information about protecting homes, businesses, and properties. Through Safe & Sound Security LLC, Dennis and the team provide security-focused guidance designed to help individuals and businesses better understand their security needs and available protection options.