How to securely erase all of the data from your Windows based computer

Do you have an old Windows-based computer you want to get rid of but want to ensure that all of your data is securely erased? Or would you like to wipe all the data from your hard drive and perform a clean Windows installation? Either way, you'll want to make the data is completely wiped out. Here's how to securely erase all the data from your Windows-based computer.

Backup all folder(s) and file(s) you want to save

This is the time to double and triple-check for any folder(s) and file(s) you may want to keep. If you plan on reinstalling Windows, make sure that you have all of the installation media available. If you need to create the recovery media stored on your computer, this is the time to do it. Once the hard drive is wiped clean, the recovery media images will be gone, too.

Windows 11 Backup

Windows 10 Backup

Windows 8 Backup

Windows 7 / Windows Vista Backup

Windows XP Backup

Download and create bootable media with disk-wiping software

The best way to completely wipe clean a hard drive is by booting the computer on a CD/DVD or USB drive. This way, you can erase all the space on the hard drive. Several free utilities exist for doing this, including Darik's Boot And Nuke, CMRR - Secure Erase, and PC Disk Eraser. I recommend the Ultimate Boot CD (UBCD), which has all of these and more already built-in.

Once you download the UBCD image file (.ISO), you can either create a bootable USB drive using Rufus or burn the image to a disk with Windows built-in disk burning software. I recommend Rufus, as it has predefined settings creating a bootable UBCD USB drive.

Encrypt the contents of your hard drive

This step may seem unnecessary, but it makes data recovery virtually impossible on the drive you will wipe. Windows has a built-in feature called Encrypting File System (EFS), but it's disabled by default. It encrypts files transparently with a File Encryption Key (FEK). For more on EFS, check out this Wikipedia article. So, even if someone could recover the data on the drive after wiping it, it would be in deplorable condition. After that, the data would have to be unencrypted, and being in such a bad condition would be hard, if not impossible.

1. Open File Explorer / Windows Explorer (Windows logo key + E).
2. Select the file(s) and/or folder(s) you want to encrypt.
3. Right-click on the items selected and then left-click on Properties from the context menu that appears.
4. On the General tab, left-click on Advanced.
5. Left-click the check box for Encrypt contents to secure data.
6. Left-click on OK. Be patient; encrypting the folders and files may take some time.

Insert bootable media and restart the system

When you restart your system, it should boot up on the media you created. Follow the on-screen instructions. If using the UBCD, navigate to HDD > Disk Wiping for the list of utilities. Each program will have similar data destruction settings. I always look for the latest Department of Defense standard (DOD 5220.22-M). If you really want to clean your hard drive, just run two or more of the disk-wiping programs included on the UBCD.

If your system does not boot up on the media you created, you may have to change your computer's boot order and turn off the secure / UEFI boot feature inside of the BIOS (Basic Input Output System). The BIOS can generally be accessed by pressing the DEL or F2 key when the 'splash' screen (motherboard/computer manufacturer logo) appears. It's always recommended to check your motherboard documentation on which keys are used to access the BIOS and where in the BIOS to change the boot order and turn off secure / UEFI boot.