Data Recovery Case File · Trust, Practice & Honest Limits · Making Data Unrecoverable
The Opposite Request, and It Deserves a Straight Answer
Her enquiry is the reverse of almost every other one here. A laptop damaged by a spill where the shutdown button was affected so "it's as if it is constantly pressed. Now when I turn it on, it'll work for a few seconds then shuts down again. I would like to wipe all my information on the laptop before I potentially sell it, but I'm not sure how to go a"bout it. She does not want her data back — she wants to be certain nobody else can have it, and a machine that shuts down after seconds cannot run anything that would achieve it.
| Media | Laptop internal storage — host shutting down within seconds of power-on following liquid damage to the power control; secure disposal of contents required prior to sale |
| Reported situation | Liquid spilled on the machine · assessment finding the machine otherwise sound with the power control damaged · machine shutting down within seconds of starting · owner intending to sell the machine · secure erasure of contents required · no data recovery sought |
| Fault class | No data loss — verified erasure required on a host unable to sustain operation; storage removal indicated |
| Equipment used | Storage encryption status established first · drive removed and erasure performed independently of the machine · cryptographic key destruction where the volume was encrypted · verification pass confirming no readable content · retention of the drive offered as an alternative to erasure |
The decode: what wiping means, and the shortcut most people miss
Why nothing can be run on that machine: every erasure method needs the computer to stay on for the duration — minutes for a modern approach, hours for an old-fashioned overwrite. A machine that shuts down after seconds cannot complete any of them, and repeatedly starting it in the hope of getting further achieves nothing except more power cycles on a liquid-damaged board.
The first question, which decides everything: was the storage encrypted? On most machines of recent years it is, often by default. Where a volume is encrypted, wiping it does not require overwriting anything — destroying the key makes the entire contents unreadable immediately, because without it the data is meaningless. That takes seconds rather than hours, and it is more thorough than an overwrite because it does not depend on every region being successfully written.
Why that matters on solid-state storage particularly: the old advice about overwriting several times was written for mechanical drives. On solid-state media it does not work reliably — the drive decides where writes physically land, keeps spare capacity you cannot address, and may leave original content in blocks the overwrite never reached. Overwriting a solid-state drive is the least reliable method available, and key destruction is the correct one.
The simplest answer of all, and it is worth saying: she does not have to erase anything. Remove the drive and keep it. Sell the machine without storage — plenty of buyers expect that on a damaged laptop, and many prefer it. The drive stays in a drawer, or is physically destroyed, and there is no question of whether an erasure worked because the medium never left. It is cheaper, faster and more certain than any wiping procedure.
What to be wary of: a quick format is not an erasure. It writes an empty index and marks space available — which, as most of this archive demonstrates, leaves the contents entirely recoverable. Anybody selling a machine after a quick format is selling their data with it.
How to be certain either way: after erasure, the drive should be checked for readable content rather than assumed clean. Verification is a separate step from the operation, and it is the only thing that turns an intention into a fact.
On the machine itself: a damaged power control on a liquid-affected board is worth disclosing to a buyer, and the sale is a separate matter from the data.
On the bench
Storage encryption status was established first, an encrypted volume requiring only key destruction rather than an overwrite — immediate, and more thorough than writing over a medium that may not accept writes everywhere. The drive was removed and erasure performed independently of the machine, since a host shutting down within seconds cannot sustain any erasure method. A verification pass confirmed no readable content remained, verification being separate from the operation. Retention of the drive was offered as an alternative to erasing it at all.
The outcome
The encryption position established, erasure performed independently of the machine and verified, with retention offered as the simpler alternative. Free assessment, one fixed written figure including VAT. The decode: nothing can be run on a machine that shuts down after seconds, so the drive has to come out. If the volume was encrypted, destroying the key makes everything unreadable instantly and more reliably than overwriting — which on solid-state media is the least dependable method there is. And the simplest option is to keep the drive and sell the machine without it.
Wiping a machine you intend to sell
Take the drive out and keep it — that's simpler, cheaper and more certain than any erasure, and plenty of buyers expect a damaged laptop to be sold without storage. If you do want it erased, find out whether the volume was encrypted first: where it was, destroying the key makes everything unreadable in seconds and is more thorough than overwriting, because it doesn't depend on every region being successfully written. That matters especially on solid-state drives, where the advice about overwriting several times doesn't hold — the drive chooses where writes land and keeps spare capacity you can't address. And be clear that a quick format is not an erasure; it leaves everything recoverable. Whatever you do, verify afterwards.
Keeping the drive is simplest — or call Guildford Data Recovery on 01483 901310; encryption status established first, erasure performed independently of the machine, and a verification pass confirming nothing readable remains.
Request a quote online →
Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.