How macOS file deletion really works (and why your approach matters)

When you delete a file on macOS, the operating system typically removes the file’s reference from the file system catalog while leaving the underlying data blocks intact—at least for a while. On HFS+ and non-TRIM SSDs, those blocks can often be recovered if nothing overwrites them. On APFS with TRIM enabled for SSDs, the blocks may be zeroed quickly, drastically reducing recovery success.

Understanding the file system (APFS vs HFS+) and the storage type (SSD vs HDD) is the first technical step. APFS adds snapshots and cloning features that can sometimes help (via local snapshots or Time Machine backups), while HFS+ behaves more predictably for classic undelete methods. The crucial user action: stop creating new data on the volume immediately to avoid overwriting deleted blocks.

Recovery tools like Disk Drill scan for file headers, metadata remnants, and file table records. They combine Quick Scans (fast, uses directory records) with Deep Scans (slow, signature-based) to detect recoverable content. Choosing the correct scan mode and saving recovered files to an external destination are essential to success.

Best-practice workflow to recover deleted files on Mac

First and fastest: if you haven’t emptied the Trash, open Trash, locate the file and choose Put Back. If the file is not in Trash, check Time Machine or any cloud backups (iCloud Drive, Dropbox, Google Drive). These are both high-probability recoveries and cost-free in time.

If there’s no backup and the drive is local, immediately stop using the Mac for anything that writes to disk (downloads, installations, updates). If possible, shut down the Mac and connect the drive to another machine as a secondary disk or boot macOS from external media. This minimizes overwrite risk and improves recovery odds.

Next: use a reliable recovery tool that understands macOS file systems and supports deep scanning. Disk Drill is a mature option that supports APFS, HFS+, FAT/exFAT and offers both quick and deep scans plus file previews before recovery. To learn more about using Disk Drill specifically, see this practical guide to recover deleted files on Mac with Disk Drill.

Recover deleted files on Mac with Disk Drill — full method

Step-by-step: Recover deleted files on Mac using Disk Drill (safe method)

1) Prepare an external drive: Get a USB/Thunderbolt external drive with enough free space to store recovered files. This is the destination and must not be the same physical disk you are recovering from.

2) Install Disk Drill off the affected disk: If possible, install Disk Drill on a different Mac or an external drive. If you must install on the same Mac, avoid installing to the same internal volume—use an external installer. Installing to the same disk risks overwriting deleted data.

3) Run Quick Scan then Deep Scan: Launch Disk Drill and select the affected volume. Run a Quick Scan first—it’s faster and may find recently deleted files by reading directory records. If the Quick Scan fails to find what you need, run a Deep Scan (signature-based) which takes longer but detects files by header/footer signatures.

4) Preview and recover: Use Disk Drill’s preview to verify file integrity (images, documents, videos). Select files and recover them to the external drive you prepared. Never recover to the same source volume. After recovery, verify the files open correctly before doing anything else with the source drive.

Download Disk Drill or read more about usage at the Disk Drill resource page: Disk Drill recovery guide.

When recovery is unlikely or impossible (and what to do next)

SSDs with TRIM enabled: TRIM tells the SSD controller it’s safe to erase blocks, and many SSD controllers clear those blocks quickly. If you deleted files on an APFS volume with TRIM active, recovery probability drops dramatically. Time is the enemy—if your SSD supports TRIM you may have only minutes or hours before data is unrecoverable.

Overwritten files: If the deleted file’s blocks have been partially or fully overwritten by new data, recovery is either partial (fragments returned) or impossible. Fragmentation and file rewriting reduce success to near zero for general consumer tools.

Professional recovery: For high-value data (legal, medical, business-critical), consider a professional data recovery lab. Labs can perform forensic-level techniques and handle physical issues. They are costly but sometimes the only option when logical recovery fails.

Alternatives, complementary tools and preventive steps

Alternatives to Disk Drill include PhotoRec (open-source), EaseUS Data Recovery Wizard, and Stellar Data Recovery. Each tool has strengths: some excel at raw signature scans, others provide better file preview or specific OS support. Try Disk Drill first for macOS integration and user-friendly previews.

• PhotoRec — strong signature-based recovery (free)
• EaseUS / Stellar — commercial solutions with guided UIs

Prevention: Enable Time Machine and verify regular backups to an external drive. Use cloud backup for critical documents. Consider snapshot-based workflows on APFS (local snapshots) and keep TRIM enabled only if your drive health requires it; note that disabling TRIM to improve recoverability is generally not recommended as a preventive step for typical users.

Also adopt a recovery checklist: (1) Stop using the drive, (2) boot from external media if possible, (3) install recovery tools to separate media, (4) recover to external destination, (5) verify recovered files before formatting or reusing the disk.

Technical tips: scanning modes, file systems, and maximizing success

Quick Scan: looks at file system catalogs and is effective if the deletion was recent and the catalog entries are intact. It’s fast and should be your first pass.

Deep Scan: signature- or carve-based. It reconstructs files by recognizing file headers and footers. Deep scans are slower and may return files without original names or folder structure, but they find content that Quick Scan misses.

File systems: APFS supports snapshots and cloning; check for local snapshots with Time Machine (tmutil listlocalsnapshots /). HFS+ is older but often easier to recover from with classic undelete techniques. exFAT and FAT drives behave differently—always choose a tool that supports the specific file system in use.

Closing notes: realistic expectations and final checklist

Be realistic: not every deleted file is recoverable. SSDs with TRIM and heavy use reduce the chance. However, many accidental deletions on HDDs, external drives, and some APFS/HFS+ setups are recoverable if you act fast.

Final checklist before you begin recovery: stop using the source disk, prepare an external destination drive, install recovery software off-drive, run Quick then Deep scans as necessary, preview and recover to external media, verify files.

And a little macOS-friendly humor: treat deleted files like cats—if they wander off, don’t keep stomping on the keyboard; give them a chance to come back, and don’t clutter their home (your drive) with new stuff while you search.

FAQ

How do I recover deleted files on Mac using Disk Drill?

Install Disk Drill on a separate drive or external media, run a Quick Scan and then a Deep Scan on the affected volume, preview recoverable items, and restore them to an external destination to avoid overwriting.

Can I recover files after emptying the Trash on macOS (APFS/SSD)?

If your Mac has an SSD with TRIM enabled, the blocks may be erased automatically, lowering recovery odds. For HDDs or non-TRIM SSDs and HFS+ volumes, recovery tools often succeed—act quickly and stop writing to the disk.

Is it safe to install data recovery software on the same Mac drive?

Not recommended. Installing or saving recovered files to the same physical volume may overwrite deleted data. Always install recovery tools to separate media and recover to an external drive.