Recovery guide
How to recover deleted files without making the situation worse.
The safest recovery process starts with low-risk checks and moves gradually toward deeper scans. Follow these steps in order, stop as soon as you have the files back, and avoid the most common mistake: overwriting recoverable data while trying to recover it.
Deleted files often remain recoverable only because the operating system has marked their old space as available rather than wiping it immediately. The actual bytes are still on the drive, waiting to be reused. Every new write can reuse that available space, and once data has been overwritten, no consumer software can bring it back. This is why a calm, ordered process matters more than speed. Working slowly and correctly is faster than working quickly and reformatting the drive by mistake.
The three core methods below cover almost every consumer recovery case. Work through them in order. The first method is free and instant. The second is free if you have a backup. The third costs money but is often unnecessary if methods one and two have been done properly.
Method 1
Check the Recycle Bin and other obvious locations first.
The Recycle Bin exists because most "deletions" are not actually deletions yet. When you press Delete on a file in Windows, the file is moved to the Recycle Bin and stays there until the bin is emptied or until Windows reaches its size limit and clears the oldest entries. On macOS, the equivalent is the Trash. Checking these is the fastest, safest, and most successful recovery method, and surprisingly often the only one needed.
How to check the Windows Recycle Bin
- Open the Recycle Bin from the desktop or File Explorer.
- Search by file name, sort by date deleted, or browse by original location.
- Right-click the file and choose Restore. Windows returns it to its previous folder automatically.
- If you see the file but cannot restore it, copy it instead and paste it to a safe folder on a different drive.
How to check the macOS Trash
- Click the Trash icon in the Dock.
- Find the file and drag it back to a safe folder, or right-click and choose Put Back.
Cloud recycle bins are often the real save
If the file lived in OneDrive, Google Drive, Dropbox, iCloud Drive, or another synced folder, check the web version of that service. Cloud recycle bins typically retain deleted files for 30 days or longer, even when the local copy on your computer is gone. For OneDrive, sign in through the browser at onedrive.live.com and check the Recycle Bin there. Google Drive and Dropbox have equivalent trash views. This route can recover files without touching the affected disk at all, which is the lowest-risk recovery possible.
Also check whether the file exists somewhere else: an email attachment, a messaging app download folder, a recent export to another device, a USB drive you have already copied from, or a colleague's inbox if you sent it to them. The safest recovery is the copy you already have somewhere else. Spending five minutes searching email and messaging apps before installing any software is a habit worth building.
Method 2
Restore from a backup or from File History / Time Machine.
A backup restore is almost always safer than raw recovery because it preserves folder names, version history, and file integrity. The challenge is that many home users do not realize they have a backup running until they need one. Check every option below before concluding you do not have a backup; the answer is often yes.
Windows File History
Windows File History can restore earlier versions of files and folders if it was enabled at any point. Search for "Restore your files with File History" from the Start menu, choose the folder you need, and browse available versions using the navigation arrows. If a version exists, restore it to a safe location, ideally a different drive. File History will only have versions if it was previously enabled and pointed at an external drive or network share, but that is more common than people remember.
Windows Previous Versions
Previous Versions can also help. Right-click the folder that used to contain the file, choose Properties, and open the Previous Versions tab. If Windows lists a snapshot, double-click it, find the file, and copy it somewhere safe. This feature depends on System Protection or scheduled backup settings, so it will not appear on every PC, but it costs nothing to check.
macOS Time Machine
If you use a Mac and have a Time Machine backup drive connected, open the Finder, navigate to the folder where the file used to be, and launch Time Machine from the menu bar or Launchpad. Time Machine shows a timeline of the folder's previous states. Step backwards until the missing file appears, select it, and click Restore. The file is returned to its original location.
Third-party and cloud backups
If you use a full backup product such as a NAS backup, image backup, business backup client, or third-party cloud backup like Backblaze, check that before scanning. Most backup tools offer a web restore or a restore wizard that can recover individual files without affecting the live drive. A backup restore is usually safer, faster, and more complete than any consumer recovery scan, because the backup actually contains the file rather than reconstructing fragments of it.
If method 2 does not return the file, you have ruled out the safest options. Move on to method 3 only after the obvious paths have been exhausted.
Method 3
Use recovery software, with care.
Software recovery is appropriate when the device is still readable and the problem is logical: deleted files, quick format, accidental partition deletion, or file-system damage. It is not the safest first option when the hardware itself appears unstable. Before launching any tool, take a minute to assess the drive's condition.
Check the drive's status first
Open Disk Management on Windows (right-click Start, choose Disk Management) or Disk Utility on macOS. If the drive appears with the expected capacity, recovery software may be able to scan it even if File Explorer or Finder cannot open it. If the drive does not appear at all, disconnects repeatedly, or makes unusual sounds, stop. Those are warning signs of physical failure, and continuing to scan can make things worse.
Match the tool to the situation
For a simple deleted file on Windows, a free tool such as Recuva is a reasonable first attempt. For formatted drives, missing partitions, or larger recovery jobs, compare broader tools such as EaseUS Data Recovery Wizard, Disk Drill, and Stellar before paying. The comparison page shows the trade-offs side by side.
Run the scan correctly
- Connect a second drive that will receive the recovered files. An external USB drive is fine.
- Install the recovery tool on the second drive or on a different internal drive, never on the affected drive.
- Open the tool and select only the affected drive or partition for scanning. Do not scan the whole system unless the tool requires it.
- Run a quick scan first if available. Quick scans are fast and often enough for recently deleted files.
- If the file is not found, run a deep scan and let it finish. Deep scans on large drives can take several hours; resist the urge to stop early.
- Use filters by file type, date, or filename to reduce noise once results appear.
- Preview the exact files you need before paying for or restoring a large set.
- Recover to the second drive only. Never recover back to the source drive.
- Open the recovered files to confirm they are usable before assuming the recovery is complete.
Do not assume that every listed file is usable. A scan may find names, fragments, or thumbnails that cannot be opened after recovery. Prioritize the files that matter most, test a small restore first, and then continue with the larger recovery set. A scan that finds 5,000 files but recovers 50 usable ones is still a successful recovery if those 50 were the ones you needed.
Tool selection
Choose a tool based on the situation.
The table below maps common recovery situations to a sensible first tool to try. It is guidance, not a guarantee. Outcomes depend on how much the drive has been used since the loss and how the file system was affected.
| Situation | Suggested first approach | Reason |
|---|---|---|
| One recently deleted Windows file | Recuva or another simple undelete tool | Low cost and enough for many basic cases. |
| Formatted USB drive or SD card | EaseUS, Disk Drill, or Stellar | Deeper signature scans and better previews are useful. |
| Mac APFS volume | Disk Drill or EaseUS for Mac | Mac-aware scanning and interface support matter. |
| Large video or photo set | Stellar or EaseUS | Preview and media handling become more important. |
| Drive clicking or not detected | Professional recovery lab | Repeated software scans can make failure worse. |
For a deeper breakdown of each tool, see the full comparison or the EaseUS review for our most-mentioned consumer pick.
When to stop
Know when to stop scanning at home.
Stop home recovery attempts when the device behaves like it is failing physically. Warning signs include clicking sounds, grinding, repeated disconnects, extremely slow reads, a burning smell, visible damage, or a drive that does not appear in Disk Management or Disk Utility at all. Stop also if the data is irreplaceable and you cannot accept the risk of a failed attempt. Every additional scan creates additional read activity, and a failing drive can cross from "still readable" to "unreadable" during a long scan.
A professional recovery lab is expensive because it can image unstable media in a clean-room environment and then work from the image rather than repeatedly stressing the original device. That cost may not make sense for a replaceable download or a casual document. It often makes sense for business records, legal files, medical data, tax records, or the only copy of family photos. If the data has financial, legal, or irreplaceable sentimental value, contact a lab before scanning further.
If software succeeds, replace the missing-data panic with a backup plan. Keep at least one automatic cloud backup and one local backup for important folders. Test a restore occasionally to confirm the backup actually works. A backup you have never tested is only a hope. The "3-2-1" rule, three copies on two different media with one offsite, is the standard recommendation, and it prevents almost every panic that drives readers to this page.
Editorial method
How we evaluate the tools mentioned in this guide.
Every tool referenced on this page is assessed against the same framework: real-world testing across common recovery scenarios, usability under stress, and honest performance relative to vendor claims. We test recently deleted files, quick-formatted drives, missing directories, damaged file-system metadata, and systems that will not boot. We do not test physically failing drives because that is a job for a recovery lab, not a consumer app.
Performance is judged on the ratio of usable recovered files to total promised, not on the size of a scan result list. Usability is judged on whether the interface prevents unsafe choices, such as installing on the source drive. Pricing is judged on whether the free allowance, license terms, and upgrade prompts are clear before checkout. The same framework drives our comparison page and our EaseUS review.
Optional next step
If you need a deeper consumer scan.
If the drive is healthy and methods 1 and 2 did not work, a broader recovery tool can be reasonable. EaseUS is one option we cover in detail because it is approachable and supports common deleted, formatted, and lost-partition cases on both Windows and macOS. Compare it with Disk Drill, Recuva, and Stellar before deciding, and run the free scan to confirm previews look promising before any purchase.
This page contains affiliate links. We may earn a commission at no extra cost to you. Buy only after the preview shows the files you actually need.