15

I suddenly notice an option called Secure Empty Trash. While Empty Trash is normally gotten by pressing Right Click on the Trash icon, for Secure Empty Trash, we have to only press Command button at that time.

I also notice that with Secure Empty Trash the System takes longer to empty the trash than normally. Why is that? What's the difference between them? And when should i use "Secure Empty Trash"?

Improve this question

4 Answers 4

Reset to default
10

This excerpt from Tech Republic explains it quite well (emphasis mine):

The Secure Empty Trash command prompts Mac OS X to perform a seven-pass* erasure of the file Instead of just removing a directory entry to the file or files in question, Mac OS X's Secure Empty Trash command initiates a series of seven different passes in which random information is written to the hard disk sectors previously occupied by that file. In fact, Apple states that this secure erasure meets United States Department of Defense security standards.

*This is incorrect. It's a 1X pass. See edit.

In comparison, "Empty trash" does not write over the 'deleted' data at all - it just marks the blocks where this data is stored on your HDD as available for use. It does not erase the actual data you discard.

Writing over a disk even one time takes a while. Simply telling the system "these blocks are now available to be written over" takes no time as well.

You should use "Secure Empty Trash" if you are deleting sensitive information and you want to make sure it won't be recovered in the future.

Edit:

That Tech Republic article is incorrect. As Andrew Medico correctly pointed out in his answer, securely emptying the trash performs a 1X pass. From Apple's Training Manual:

There are varying levels of security offered depending on the number of passes and whether each path uses a specific data pattern or random data. Disk Utility in OS X offers multiple sanitization options for an entire volume or free space. A seven-pass erase option is available that meets U.S. Department of Defense standards (DOD 5220-22M).

Users can also initiate sanitization while deleting files using the Secure Empty Trash command in the Finder. This command overwrites files as they are deleted using a single-pass erase.

While the Erase Free Space option in Disk Utility offers 7X pass, the secure empty trash feature is only a 1X pass. Tech Republic seems to have conflated the two.

Improve this answer
4
  • That article is wrong. Apple says "Secure Empty Trash ... overwrites files as they are deleted using a single-pass erase" (training.apple.com/pdf/osx_wp_security_108.pdf). A seven-pass overwrite would take a truly ridiculous amount of time for non-trivial amounts of data.
    – nobody
    Jun 5, 2014 at 2:31
  • @AndrewMedico yes, I just saw your answer and edited my post. Thank you for that important correction.
    – njboot
    Jun 5, 2014 at 3:11
  • @AndrewMedico Thanks a lot for explaining it elaborately. It's now clear & well understood to me. Have a nice day. :)
    – Tulon
    Jun 5, 2014 at 15:45
  • @njboot Thanks a lot for your explanation. I got it. Have a nice day. :)
    – Tulon
    Jun 5, 2014 at 15:45
4

When you perform Empty Trash the data is not erased from the disk, instead the disk space which was occupied by these files becomes available for the System to use. As the information is still there it can be accessed and retrieved with forensic software and utilities.

When you perform Secure Empty Trash the files' disk space is overwritten so that the information is very unlikely to be recovered.

So Secure Empty Trash should be used when sensitive information wants to be completely removed from the disk. If this is not the case just using Empty Trash will do the trick and, besides being faster than doing it securely, could save you in occasions in which you accidentally delete an important file and want to recover it.

Improve this answer
4
  • 4
    Note that on SSDs the secure empty trash does not overwrite the same p[art of the disk so in effect does no more than a simple delete
    – mmmmmm
    Jun 4, 2014 at 22:22
  • 1
    @Thecafremo Thanks for commenting. I got it. Have a good day dear. :)
    – Tulon
    Jun 5, 2014 at 15:46
  • @Mark That is true, but misleading. A non-secure erase only gets rid of the pointer to the file content on disk... if a utility reads the SSD at the right location, the content will still be there; same as a HDD. A secure erase wont overwrite the same physical memory inside the SSD, but at least a read to the same logical location on disk will no longer have content. Really deleting the exact physical location on an SSD usually means secure erasing the entire drive with a hardware feature, typically downloaded from the manufacturer.
    – danwyand
    Nov 20, 2014 at 22:59
  • I don't see the option for secure erase or empty trash. My MacBook Pro will only secure erase. Is there a way for me to choose plain erase?
    – user120764
    Apr 4, 2015 at 23:09
4

According to Apple, as of OS X 10.8 (and probably all other releases supporting Secure Empty Trash):

Secure Empty Trash ... overwrites files as they are deleted using a single-pass erase.

This prevents data recovery after the data has been overwritten.

The ordinary Empty Trash command just marks the file areas as available, but does not overwrite them. The data could still be recovered by specialized tools.

Improve this answer
1

Well you see SET(Secure Empty Trash) checks all the files and separate the files you need or don't need. If you accidentally deleted a system file secure empty trash will fix the problem. ET(Empty Trash) on the other hand just deletes it without looking or checking the files. This means although SET takes longer it is less risky to delete files.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .