So, recent versions of macOS no longer offer the option to Empty Trash Securely. From what I am reading here and here it seems the general consensus is that it is now best to encrypt files and then delete them.
However, if I create an encrypted disk image and move the files in there, it is using different blocks on the drive... so it does not zero out the blocks on the drive where the data was stored, and we're back where we started.
I've read comments from people saying deleted data is difficult to recover from an SSD anyway, so don't worry about it. Well even if that is true, what if you have a Fusion Drive and you don't even know which part of the drive the data in question resides in?
I'm not finding a clear answer on what the best way is to securely delete at present, which is surprising since it's a pretty common measure when transferring ownership of a computer, etc. Can someone please enlighten me:
- Is encrypting then deleting effectively the same as securely erasing?
- How can existing data be encrypted (rather than copied into an encrypted .dmg)?