How to recover deleted files on Windows and Mac: the methods that actually work
Your stomach drops the second you realise what happened. A folder you needed is gone, the Recycle Bin is empty, and you have no idea whether the file still exists somewhere on the drive or is gone for good. You search for "how to recover deleted files on Windows and Mac" hoping for a single clean answer, and instead you get ten pages telling you to "use a recovery tool" without explaining which one, why, or when it will fail.
So let's be precise about it. The recovery method depends entirely on a few things: the operating system, the type of drive, and how the file was deleted. Get those wrong and you'll waste hours. Get them right and you'll often pull the file back in under ten minutes.
Key takeaways
- The Recycle Bin (Windows) and Trash (Mac) are the first stop — always check them before anything else.
- Windows File Recovery (winfr) is Microsoft's own command-line tool, free, and works even after the Recycle Bin is emptied.
- On Mac, APFS local snapshots and Time Machine can recover files without any third-party software.
- SSDs with TRIM enabled, and APFS-encrypted volumes, cut your recovery odds dramatically — speed matters more than the tool you pick.
- Stop writing to the drive immediately. Every new file overwrites the space your deleted file still occupies.
Why a deleted file isn't really gone (yet)
When you delete a file, the operating system doesn't erase the data. It removes the pointer that tells the system where the file lives. The actual bytes stay on the disk until something else writes over them. That gap — between deletion and overwrite — is your entire recovery window.
Which is why the single most important thing you can do is stop using that drive. Don't install software on it, don't save new documents to it, don't let your browser cache fill it up. I watched someone lose a semester's worth of coursework because they downloaded a recovery tool onto the same drive they were trying to recover from. The installer overwrote the exact blocks holding the thesis draft.
A quick word on drive types
This is where most guides go quiet, and it's the part that decides whether you succeed.
| Drive type | File system | Recovery odds |
|---|---|---|
| Mechanical HDD | NTFS / HFS+ | High — deleted blocks linger until overwritten |
| SSD with TRIM enabled | NTFS / APFS | Low — TRIM wipes blocks within minutes |
| APFS-encrypted Mac volume | APFS | Very low once the encryption keys are dropped |
| External USB drive | Usually NTFS / exFAT | Moderate to high, if you act fast |
TRIM is the quiet killer here. On modern SSDs, the controller proactively erases deleted blocks to keep performance up. That's great for your drive's lifespan and terrible for recovery. On APFS, full-disk encryption means those blocks are also scrambled without the volume key.
The takeaway: if you're on an SSD and the file matters, treat the next few minutes as a countdown, not a project.
How to recover deleted files on Windows
Windows gives you more built-in options than people realise. The trick is knowing which one fits your situation.
Method 1: the Recycle Bin
Open it, search by name, right-click, restore. If the file is there, you're done in ten seconds. If the Recycle Bin was emptied — either manually or by a cleaner tool — skip to the next method.
Method 2: Windows File Recovery
This is Microsoft's official command-line utility, free on the Microsoft Store. It does not have a graphical interface, which scares people off, but the syntax is simpler than it looks.
The tool has four modes, and choosing the right one matters:
- Regular — for NTFS drives where you deleted the file recently
- Extensive — for NTFS drives after formatting, or when Regular comes up empty
- Segment — for FAT, exFAT, and ReFS drives
- Signature — the slowest, but it works when the file system no longer recognises the file at all
A typical command looks like this:
winfr C: D: /regular /n \Users\YourName\Documents\report.docx
Translation: recover from drive C, save the output to drive D, use Regular mode, target this specific file. Always recover to a different drive than the one you're recovering from. If you don't have a second drive, use an external USB stick.
I'll be honest: the first time I ran winfr, I typed the destination wrong and got a wall of errors. Read the flags twice before you hit Enter.
Method 3: check your backups first
Windows Backup, File History, and OneDrive's own Recycle Bin all hold deleted files for a set retention period. OneDrive keeps deleted items for 30 days by default. If you're syncing your Documents folder, the file might be sitting in the cloud trash right now, untouched.
How to recover deleted files on Mac
Mac's recovery options are genuinely good — if you know where to look, and if your file hasn't been purged by APFS.
Can you recover deleted files after emptying the recycle bin on a Mac?
Yes, often — but rarely through the Trash itself. Once the Trash is emptied, your realistic paths are local APFS snapshots, Time Machine, or a third-party tool. The Trash is a one-way street once you've emptied it.
Local APFS snapshots: the trick almost nobody mentions
macOS takes periodic local snapshots of your drive, usually every hour, and holds them for up to 24 hours. They don't show up in Finder, but the Terminal can see them:
tmutil listlocalsnapshots /
If a snapshot from before the deletion exists, you can mount it and pull the file out manually. It's not a one-click solution, but it has saved me more than once when Time Machine's last backup was already too old.
Time Machine
If you have Time Machine running, this is your cleanest option. Open the folder where the file used to be, click the Time Machine icon in the menu bar, and browse back to the moment before deletion. Restore. Done. No third-party software, no command line.
Terminal-based recovery
For advanced users, some files leave traces in temporary directories or app-specific caches. It's messy, undocumented, and rarely worth the effort for anything other than documents saved in specific apps. I'd only go there if snapshots and Time Machine both fail.
How to recover permanently deleted files on both systems
When the built-in options are exhausted, third-party recovery software is the next step. This is where the internet gets noisy, so here's what actually matters when choosing:
- Does it support your file system (NTFS, APFS, HFS+, exFAT)?
- Can it scan the drive read-only, without writing to it?
- Does it let you preview files before paying for a licence?
- Is the recovery done to a separate drive?
- Does it handle your specific file type — photos, video, Office documents?
Free options exist (Recuva on Windows, PhotoRec on both platforms), and they genuinely work for simple cases. Paid tools tend to do better with fragmented files and unusual formats, but "better" is a spectrum, not a guarantee. I've had free tools pull back files that paid tools missed, and the reverse. Don't assume price equals success rate.
How can I recover files that are deleted from the recycle bin?
Once a file is removed from the Recycle Bin, Windows treats the space as free but leaves the data in place until overwritten. Your options are Windows File Recovery in Extensive mode, a system backup if one exists, or third-party software. The success of all three depends on how quickly you act and whether the drive is an SSD with TRIM.
The honest truth about recovery odds
Nobody wants to hear this, but I'll say it anyway: your best recovery tool is a backup you already have. Every method above is a rescue operation, and rescue operations fail. I've had a 90% success rate recovering small documents from mechanical drives, and near zero on modern SSDs where TRIM had already done its work.
Set up Time Machine on Mac. Set up File History or Windows Backup on Windows. Sync your critical folders to a cloud service with a retention window. It takes twenty minutes and saves you from ever needing to run winfr at 2am again.
Which is the part that sticks with you, isn't it? The files you panic about are always the ones you never backed up. Maybe the real lesson isn't how to recover deleted files — it's why we keep trusting that we won't need to.
