Emptying the Trash on a Mac feels final, and in a technical sense it is, but the file itself usually isn’t gone the moment you see that confirmation. When you delete a file normally, macOS removes the pointer to it and marks that space on the drive as available to reuse.
The actual data often stays exactly where it was until something else gets written over it. That’s the window recovery software works in, and it’s why acting quickly matters more than almost anything else in this process.
This guide covers what actually happens when you delete a file on macOS, why recovery odds depend heavily on your drive type and how much you’ve used the Mac since deleting, and the specific tools and methods that can bring files back without a Time Machine backup or iCloud copy to fall back on.
Why Recovery Is Even Possible in the First Place
Every file on a Mac’s drive is tracked by a file system, either APFS on modern Macs or the older HFS+ on machines from around 2017 and earlier.
Both systems work by keeping a catalog of where every file’s data physically lives on the drive, along with a name and folder location.
When you delete a file and empty the Trash, macOS doesn’t wipe that data immediately. It removes the catalog entry and flags the space as free.
The file’s actual content, the photo, document, or video itself, still sits on the drive in whatever blocks it originally occupied.
Recovery software works by scanning the drive for these orphaned blocks of data, either by rebuilding what’s left of the catalog entries or by recognizing file signatures directly in the raw data, a technique called file carving.
This is why recovery is possible, but it’s also why it’s not guaranteed. The moment the operating system needs space for something new, whether that’s a downloaded file, a system update, or even routine background activity like Spotlight indexing, it can overwrite those freed blocks.
Once overwritten, that portion of the file is gone permanently, and no software can bring it back.
The Single Most Important Thing to Do Right Now
If you haven’t already, stop using the Mac for anything other than the recovery process itself. Every new file saved, every app installed, every browser tab that caches data, is a chance for the system to write into the space your deleted file occupied.
This matters more on the drive where the file was deleted than for the Mac overall. If the deleted file was on an external drive or USB stick, you can keep using the Mac’s internal drive normally, but stop writing anything to that external drive.
If the file was on your Mac’s internal drive, avoid saving new documents, downloading anything, or even taking screenshots until you’ve either recovered the file or installed recovery software (ideally onto a different drive).
Why SSDs Make This Harder Than It Used to Be
If your Mac has a solid state drive, which includes every Mac built since around 2016 along with many earlier models with upgraded storage, there’s a technical detail that significantly changes your odds compared to older hard drives.
SSDs use a background process called TRIM. When a file is deleted, TRIM tells the drive’s controller that those memory blocks are no longer needed, and the controller can proactively erase them to keep write speeds fast, often within seconds to minutes of deletion rather than waiting for new data to overwrite them.
This is a deliberate performance feature of SSD firmware, not a bug, but it means that on a Mac with TRIM enabled (the default on all Apple SSDs), a file deleted more than a few minutes ago may already be unrecoverable at the hardware level, regardless of what software you try.
There’s no way to check from software whether TRIM has already erased a specific file’s blocks. This is genuinely one of the harder truths about Mac data recovery: hard drives (HDDs) and older Fusion Drives generally give you a much longer recovery window, sometimes days or weeks, because they don’t use TRIM.
If your Mac has an SSD, the practical takeaway is to run recovery software immediately, within minutes if possible, rather than waiting even an hour.
Checking the Trash and Recently Deleted Folders First
Before reaching for recovery software, rule out the possibility that the file isn’t actually gone yet.
If you deleted the file but haven’t emptied the Trash, it’s still fully recoverable with a simple right-click and “Put Back,” or by dragging it out of the Trash folder.
This sounds obvious, but it’s worth checking carefully, since Trash contents don’t always sort the way people expect and a file can be easy to miss in a long list.
Certain Apple apps keep their own separate recently-deleted archive that doesn’t route through the main system Trash:
- Photos app: Check the “Recently Deleted” album in the sidebar. Photos and videos stay there for 30 days after deletion before being permanently removed.
- Mail app: Check the “Trash” mailbox for each email account, which typically holds deleted messages for 30 days depending on the account’s settings, though some IMAP providers empty it faster on their own schedule.
- Notes app: Check “Recently Deleted” in the Notes sidebar, which retains deleted notes for 30 days.
- iCloud Drive: If the file was stored in iCloud Drive, check the Recently Deleted section, accessible through the iCloud Drive folder in Finder or through icloud.com, where files remain for 30 days.
If your file was managed by any of these apps, this step alone may solve the problem without needing any third-party software at all.
Using Data Recovery Software
If the file isn’t sitting in any of those recoverable locations, third-party recovery software is the main practical option left. These tools scan the drive directly for recoverable data rather than relying on the normal file system.
How These Tools Actually Work
Recovery software typically offers two scanning approaches. A quick scan reads what remains of the file system’s catalog to reconstruct recently deleted files with their original names and folder structure intact, and it’s fast, often finishing in minutes.
A deep scan (sometimes called a raw or signature scan) ignores the catalog entirely and searches the raw drive data for recognizable file headers, like the byte patterns that identify a JPEG, a Word document, or an MP4 video.
Deep scans take much longer, sometimes several hours for a large drive, and recovered files usually lose their original names and folder locations, appearing instead as generic file names sorted by type.
But deep scans can find files that quick scans miss, especially if some time has passed since deletion or if the catalog entry has already been partially overwritten.
Choosing and Installing Recovery Software
The most important rule here is where you install the software. Never install recovery software onto the same drive where the deleted file lived, since the installation process itself writes new data and risks overwriting the very file you’re trying to recover.
If you’re recovering from your Mac’s internal drive, install the software onto a USB drive or external drive, or run a portable version if the tool offers one.
Well-regarded options for macOS include Disk Drill, PhotoRec (a free, open-source, command-line tool with no GUI polish but a strong reputation among technical users), and EaseUS Data Recovery Wizard for Mac.
Each handles both HFS+ and APFS drives, though you should confirm APFS support specifically if you’re on a newer Mac, since some older recovery tools were built before APFS existed and never fully updated.
Running the Scan
- Install the recovery software on a different drive than the one you’re recovering from.
- Open the software and select the correct disk or volume to scan, being careful to choose the exact drive the file was deleted from.
- Start with a quick scan if the deletion was recent, since it’s faster and preserves file names.
- If the quick scan doesn’t find the file, run a deep scan, understanding it will take longer and may return files without their original names.
- Preview recovered files before restoring them. Most reputable tools let you preview photos, documents, and videos to confirm you’ve found the right file before committing to a full recovery.
- Save recovered files to a different drive than the one being scanned, never back to the original location, since writing to that drive during an active recovery can overwrite other recoverable data you haven’t found yet.
What to Expect and When It Won’t Work
Recovery success depends on three factors working in your favor: how much time has passed, how much new data has been written to the drive since deletion, and whether the drive uses TRIM. A file deleted five minutes ago on an HDD with no other activity has a strong chance of full recovery.
A file deleted a week ago on an SSD that’s seen normal daily use has a low chance, and if TRIM already processed those blocks, no software will find anything usable.
Partial recovery is also common with deep scans. You might get a document that opens but is missing formatting, or a video file that plays for a few seconds before corrupting. This happens when part of the file’s data has been overwritten while other parts remain intact.
When the File Was on an External Drive or SD Card
The same principles apply, but external media often gives you better odds because it’s used less frequently than your Mac’s main drive.
Stop using the external drive immediately, connect it to the Mac (or a different computer if you’re worried about accidental writes from macOS background processes), and run recovery software with the destination set to a separate, third drive, not back onto the external drive itself and not onto your Mac’s internal drive if that’s also involved in the scan.
Camera SD cards and USB flash drives typically use simpler file systems (FAT32 or exFAT) that recovery tools handle very reliably, often with better success rates than APFS drives, since these formats don’t have TRIM-like proactive erasure and their structure is more straightforward to reconstruct.
Professional Data Recovery Services
If the file is important enough to justify the cost, roughly ranging from a few hundred to over a thousand dollars depending on the drive and complexity, and DIY software hasn’t worked, professional recovery services have tools and clean-room facilities that go beyond what consumer software can do. This is particularly worth considering if:
- The drive has physical damage or is making unusual noises (a hard drive clicking is a sign to stop trying anything yourself and go straight to a professional, since continued use can cause further damage)
- The file is on an SSD and consumer software has already failed, since some professional services have access to lower-level hardware tools
- The data is irreplaceable, like the only copy of years of photos or critical business documents
Get a diagnostic quote before committing to a full service, since most reputable companies will assess the drive and tell you your actual odds before charging for the full recovery.
Preventing This Situation Going Forward
Once you’ve recovered what you can, it’s worth closing the gap that led here. Time Machine is built into every Mac and, with an external drive plugged in, backs up automatically on a rolling basis with minimal setup.
iCloud Drive with Optimized Mac Storage covers documents and desktop files, though it depends on a stable internet connection and enough iCloud storage.
For anyone who wants an extra layer beyond a single physical backup, a cloud backup service that runs continuously in the background adds protection against situations where a local backup drive is also lost, stolen, or damaged at the same time as the Mac.
None of these prevent every possible loss, but having even one active backup system turns a deleted file from a stressful emergency into an inconvenience solved in a couple of clicks.
Frequently Asked Questions
Does Disk Utility have a way to recover deleted files?
No. Disk Utility manages disk formatting, partitioning, and repair, but it has no file recovery function. Attempting disk repairs on a drive you’re trying to recover files from can also overwrite data, so avoid running First Aid on that drive until after recovery is complete.
Can I recover files from Time Machine if I never explicitly set it up?
Check anyway. Some Macs have Time Machine enabled with a previously connected external drive that the user forgot about, or macOS may have created local snapshots on the internal drive that persist for a limited time even without an external backup drive connected.
These local snapshots aren’t a substitute for full backups and don’t last long, but they’re worth checking through Time Machine’s “Enter Time Machine” interface before assuming there’s truly no backup.
Will Factory Reset or reinstalling macOS erase recoverable data?
Yes, and this should be avoided during a recovery attempt. Reinstalling the operating system writes a significant amount of new data to the drive, which can overwrite the very blocks you’re trying to recover.
Is it true that “permanently deleted” files can never come back?
It depends entirely on context. Files deleted through normal use, even from an emptied Trash, are frequently recoverable if you act quickly, especially on HDDs.
Files removed through a secure erase feature, a full disk encryption wipe, or several passes of specialized erasure software are designed specifically to prevent recovery and generally cannot be brought back by any consumer or professional method.
Related Articles
- How to Reset MacBook Without Erasing iCloud Account
- How to Use Terminal for Basic Mac Maintenance
- How to Fix Safari Not Loading Websites on Mac
- How to Share Files Between Mac and Windows
If you think there’s been a mistake here, please do let us know by commenting on this post or Contact Us. And a member of our Content Integrity Team will review this decision with you.
This Post Has One Comment