Wipe/Clean Notebooks and Desktops
 

Good morning. I thought I'd seen a thread on this topic, but I can't find it. Probably like many of you, I have a bunch (like a dozen) of previously used desktops and notebooks. I am downsizing and want to dispose of these items. The good news is that each turns on and will get to a Windows screen.

The bad news is that passwords are long forgotten; there are files, especially, pics that I'd like to save. And then I want to wipe the data clean and drop-off at the local recycling center.

I am tech literate, but not tech savvy anymore. I can follow instructions and not make a mess of things. Any recommendations for tools to a) bypass the Windows password so that I can get to the "C:" drive so that I can offload any wanted files (even at the system prompt); and b) wipe the data?

Thanks FTers!

If you don't have Bitlocker enabled then you can remove the hard drive and connect it to a computer you can log in to. You can then browse the drive and copy the files you want. If you do have Bitlocker enabled and don't have the recovery key, then your files are lost.

To erase the drives, you can either:
1. Format the drive when it is connected to another computer, which will of course also require reinstalling Windows in order to be able to use it again.
2. If you have Windows 10 you can boot into recovery mode (usually by pressing Esc or F11 at boot up) and there should be an option to restore to factory settings, which will give you a fresh-out-of-the-box install of Windows.

(Whoops, ninja’d.)

If the drives are not encrypted, just stick them in an external enclosure and connect them on a computer you are using to access the data. (I’m guessing they’re Windows boxes, no Bitlocker.)

If the data is encrypted... good luck.

To wipe... sdelete works fine. Search for Sysinternals sdelete: https://docs.microsoft.com/en-us/sys...nloads/sdelete

You can either format it or delete just the specific data, then run sdelete w/ -c flag and a 3-pass run.

For the drop-off... best to do a format & fresh install if you have the discs.

After recovering your files seriously consider removing the hard disk(s) before taking to a recycling center, then do one or more of the following: Bury 6 feet under, then pave over; have the local road builder run their steam roller over the disk; use for target practice; mega de-magnatize...

Only half kidding.

I use Eraser to wipe clean my disks. There are other similar tools.

https://eraser.heidi.ie/

Those computers still could be used by poor students.

Most computers made in the last several years include the ability to restore to factory settings from a hidden partition on the hard drive. If you can boot to the login screen in Windows 10, hold Shift while choosing Restart from the corner menu, then you'll be able to boot into restore.

As [MENTION=15711]gfunkdave[/MENTION] mentioned, assuming you aren't using bitlocker, you can extract the HD and use a dock or kit to copy your files off. One other possibility is to use a password recovery app (basically you create a bootable USB key and use the software to extract the password). This would likely be easier since you're not ripping into the computer if you don't feel comfortable... I've used this (link embedded) a few times with success. There are others out there that you could use. As for how to reset the computers after you have extracted what you want for it, there's a couple of options depending on make and model and how comfortable you feel doing it... Personally my process (if repurposing the computer to someone else)...

1) Extract the serial number (assuming Windows 7,8 or 10);
2) Assuming all the sensitive data has been deleted, wipe the free space (there are apps there that have been mentioned,);
3) Upgrade to Windows 10 via the Window Media Creation Tool;
4) Use the Windows Media Creation tool to create a bootable installer (USB or DVD) and use that to install a clean copy of Windows 10 (whoever gets the computer will thank you for not putting the manufacturer's bloatware on there);

Or if you feel lazy, just run the "Reset this PC" command from the start menu... Personally I prefer the cleaner method but it's personal preference.

Your local Goodwill should be able to take care that for you.

You can try using external enclosure and connect to your current PC. You should be able to review the content by taking ownership of the relevant folders.

It depends on how clean you want to be. The best way ever is to physical destroy the HDDs. If the data is not sensitive enough, a factory restore will also do the job.

FWIW - IMHO, the DoD method is a myth, given that the DoD also physically destroys the HDDs as well.

Factory restore will not get rid of the data, it will just wipe the file pointers, as a standard delete will do. Any reasonably good data recovery software can easily pick up the actual data - just test w/ a free one (e.g. Recuva) on your current machine.

A truly secure data deletion means you must write 1s and/or 0s into what the computer now believes is ‘empty space’ to clear all possible areas where the data may still reside.

It is theoretically possible that a determined data forensics expert with some heavy-duty physical, magnetism-based tools might be able to access data even after that, but the degree of difficulty is likely already significant after even one pass and 3 is likely well more than needed.
(That 7-10 passes are needed to deny the theoretical expert access may be a myth.)

Of course, that is only if the HDD doesn’t have any physical / software / firmware vulnerability or compromises. I expect shredding the drives is to reduce all possibilities to zero.
(With SSDs now, over-provisioning, ‘hidden’ cells for resiliency or failed sectors pulled out of usage by the SSD controller likely makes physical destruction a necessity, as secure erase is not a certainty.)

Why not just download one of the zillion options for live boot media (thumb drive, CD/DVD ROM) - boot from one them, copy the files you want to a network or cloud drive or an attached external drive, you're (half) done.
(If the partitions or user folders are encrypted, then it's a harder nut)

As for wiping - how sensitive information the drives have? There are different solutions for simple wiping/reformatting to mil spec data erasure. If you want to play really safe, you should physically destroy the drives. Old skool spinning ones can be killed by frying their electronics and/or driving a few holes in them (I don't think anyone would go to the trouble replacing the electronics to get to the data). SSD drives might also not like holes drilled in them.

Thanks everyone for this information. I'll be attempting one over the weekend and I'll report back!

There's a software called NTPasswd .
I used it a couple of years ago to get data stored on old laptops. Works with Windows XP, 7 ,8
It's fairly easy to use (you just need a USB key IIRC)
https://www.winpasskey.com/how-to-re...indows-10-8-7/

I took the hard drives out of mine and smashed them up good with a sledgehammer. With 500GB SSDs starting at under $50, anyone wanting to use the machine probably would be better off with that than the old, old, mechanical drives in them.

That doesn't hurt, but some people may not be able to afford that either and if you're looking to donate these machines as functional to someone in need, you might need to leave those drives functional. I usually follow the process I outlined above/below when donating the machines. I usually keep my data on a separate drive that I remove when giving away a computer or if sensitive data, an encrypted container so I'm not too concerned. But others may not work like some of us.

I've always used DBAN. Simple and there is a free version.

https://dban.org/

The only problem with DBAN is that it wipes everything out including a restore partition if there is one. I mean it's not an issue if you're going to install a clean version of Win10, but some people like the actual install of Win10 that comes from the factory. (I find for the elderly, they like their card games solitaire even though you can find better versions on the net).

The other consideration (and this might be outdated information as it has been a while since I've used it and never on an SSD) is it's effect on the lifespan of an SSD, especially if you go for the full on 25 pass wipes (but that's true of any data wiper). Also considering it hasn't been updated in years... there are better ways of doing it.

I'm often in one of three major metropolitan areas and have attempted to donate similar machines to a good cause. Unfortunately, most orgs don't want the machines b/c of the hassle of working with them and them being "different" from other machines which they get/use in bulk. Sadly, I'm left to remove and physically destroy the drives and recycle all of it. For me, the only way to be sure is destruction of the drives.

Have you checked more recently? There was a large need for used hardware around last fall and some schools are still operating remotely. They might need more laptops, tablets, or chrome books for incoming students if they're operating in hybrid models. Donations in my area could be made to libraries which partnered with companies or volunteers to re-image everything. The libraries also worked with the city to provide hotspots and extend wifi into more areas of the parking lot/exterior for those without stable home internet.

Agreed. I take any reasonably usable system from any contacts/clients, wipe the drives and install a fresh OS (varies) and donate them to schools and community centres. This includes desktop PC's. No expectation of support. Would love to be able to provide a stream of steady computers to help the community, but they'll take what they can get. When I build a surplus of non functional parts (if I rebuild systems) those go to recycling, although i wouldn't mind finding a direct partner to break down and reclaim the materials if I had enough.

Goodwill is NOT a good option for this. I have, multiple times, found computers at Goodwill with all their data intact.

If you are near a freegeek location, that's a good choice. They take data security / privacy very seriously.

I can't speak to Freegeek, but I must say, the only person you can hold responsible for your data is you. If you don't wipe it yourself and leave it to others, invariably someone will miss something. Others can help you, but it's your responsibility to secure your data.

If these are older than (say) 5 years most of the data is "stale"--probably a simple pass or two of a drive erase utility should be sufficient.
Another option is to pull the drives and use them externally (adding a drive enclosure) for back-up purposes.
About 5 years ago my pc was "scammed": "we're from Microsoft and we detected 'bad files' on your computer" the scammers got onto to my computer and "showed me bad stuff", I detected a scam and wanted them off my system, they "sysgened" my system, since the computer was getting flaky I pulled the drive backed it up to a new computer...in 5 years I've never needed to access any of the backed up dats.:p

I can speak to freegeek - Dedicated data cage, employees only, every device is wiped thoroughly. If a storage device can’t be wiped due to hardware issues, it is destroyed.