How to recover deleted files on Windows and macOS using free tools and best practices
Accidentally deleting files is stressful but often recoverable if you act quickly and carefully. This guide walks you through 7 practical steps using free tools and safe habits to maximize your chances of restoring data on Windows and macOS. Follow each step in order and avoid writing new data to the affected drive.
Step 1: Stop using the affected drive
Immediately stop writing to the disk or volume where files were deleted. Continued use (saving, installing, or even browsing) can overwrite recoverable sectors and reduce chances of recovery; this is the single most important action. If possible, power down the machine within 5 minutes and prepare for recovery from another system or external media.
[Illustration: A person unplugging an external drive from a laptop with a clock showing urgency]
Step 2: Check the Recycle Bin or Trash
Open Recycle Bin (Windows) or Trash (macOS) and search by name, date, or file type; many deletes are reversible here. Restore any found items immediately, which is the fastest and safest recovery method and preserves original metadata and folders.
[Illustration: Desktop window showing Recycle Bin/Trash with files listed and a restore button highlighted]
Step 3: Use built-in backup snapshots
Look for File History or Previous Versions on Windows and Time Machine on macOS; restore versions from the most recent snapshot within the last 24–72 hours. Backups often have the exact file and folder structure, restoring permissions and timestamps without scanning the disk sectors.
[Illustration: Screenshot-like view of Time Machine or File History timeline with a file being selected for restore]
Step 4: Create a disk image if needed
If files are critical, make a forensic image of the affected drive to an external disk using free tools like dd (macOS/Linux) or the Windows port of ddrescue; allocate equal or larger external storage and expect the process to take from 10 minutes to several hours based on drive size. Working from an image prevents further damage and lets you attempt multiple recovery passes safely.
[Illustration: Progress bar showing disk cloning to an external hard drive with size indicators and estimated time]
Step 5: Run free recovery software
Use reputable free tools: on Windows try Recuva or PhotoRec; on macOS try PhotoRec or TestDisk. Install recovery software to a different drive than the one being recovered, configure it to perform a deep or full scan, and expect a scan time of 30 minutes to multiple hours depending on size and file system.
[Illustration: Application window of recovery software scanning a drive with found file list and recover button]
Step 6: Preview and recover selectively
After scanning, preview recoverable files (images, documents) and restore only what you need to an external drive or different internal partition. Restoring selectively avoids reintroducing fragmentation and reduces the amount of data to verify; verify at least the first 5 files of each file type for integrity before finishing.
[Illustration: Recovered files list with thumbnails and a destination folder on an external drive selected]
Step 7: Verify and implement prevention
Open restored files to confirm integrity and check timestamps and permissions within 30 minutes. Then set up prevention: enable File History or Time Machine with hourly backups, keep a cloud sync for important folders, and create a regular manual backup schedule of at least weekly for critical projects.
[Illustration: User configuring Time Machine or File History backup settings with schedule options visible]
- Act within 24–72 hours for best odds of recovery; probability drops sharply after heavy drive use.
- Always recover files to a separate drive or external SSD to avoid overwriting source sectors.
- Take screenshots or notes of error messages and filenames before attempting fixes to help if you need expert help later.
- When using PhotoRec, limit file type selection to speed scans and reduce clutter in results.
- Keep a 1 TB external drive on hand for disk images and backups if you work with many large files.
- Test your backup and recovery process quarterly to ensure backups are usable and you can restore within 30 minutes.
- Do not install recovery software on the drive with deleted files or you may overwrite recoverable data.
- Avoid running disk repair utilities that write to the disk (like some 'repair' options) before imaging if files are critical.
- Beware of shady freeware that bundles adware; download recovery tools only from official project pages.
- If the drive makes unusual noises (clicking, grinding), power it off and consult a professional — continued use may cause permanent damage.
Was this guide helpful?
More Computers & Electronics guides
How to set up Git, create a repository, and commit code locally
Setting up Git and committing code locally is a small, reliable skill that pays off immediately. In about 10–20 minutes you can install Git, create a repository, and make your first commits so your work is tracked and easy to manage. Follow these clear steps to get a solid local workflow going.
How to migrate email from one provider to another without losing folders or contacts
Migrating email between providers can feel risky, but with a plan you can preserve folders, labels, and contacts while minimizing downtime. This guide walks you through a careful, step-by-step transfer you can complete in a few hours to a couple days depending on mailbox size. Follow the checklist and you’ll keep structure and address data intact.
How to clean dust and replace a laptop fan to fix overheating and throttling
Overheating and CPU/GPU throttling are often caused by dust buildup or a failing fan. This guide walks you through safely cleaning dust and replacing a laptop fan to restore cooling performance and reduce temperature spikes. Read through all steps, gather basic tools, and work in a well-lit, static-safe area.