3 Ways To Securely Erase A Hard Drive On Linux

Every time you re-install Linux and format your exhausting drive partitions, their information isn’t absolutely purged. That means anybody who acquires an previous exhausting drive that’s not adequately erased can recuperate delicate information. Don’t fear, we’ll cowl the entire greatest methods to erase a tough drive on Linux. Every thing from DD, to Shred and even DBAN.

Be aware: Shred and DD require understanding what letter is assigned to the drive you need to erase. To discover the drive letter, open a terminal and enter the lsblk command. The names they present correspond to the exhausting drives.

Zeroing A Drive – DD

The most typical methodology for securely erasing a Linux exhausting drive (aka zeroing) is the DD command. This methodology is sluggish, however as a result of each Linux and Unix system comes with the DD device pre-installed, it’s very accessible. That stated, DD won’t zero a drive at the moment in use. That means you may’t simply do a DD overtop of your working Linux working system. As an alternative, you’ll must both unplug the exhausting drive and put it in one other PC or load up a Linux live disk.

Assuming you’ve carried out considered one of these two issues, right here’s how one can securely erase a Linux exhausting drive utilizing DD:

Step 1: be certain that the drive isn’t mounted. Whether it is connected, unmount it utilizing the file supervisor. Alternatively, use the umount command.

Be aware: exchange X with the precise drive letter, and the Y with the partition quantity (e.g., /dev/sda1).

sudo umount /dev/sdXY -l

sudo dd if=/dev/urandom of=/dev/sdX bs=10M

Utilizing /dev/urandom to put in writing zeros on high of your complete exhausting drive takes a really very long time. One of the best ways to make use of DD is to show it on and let it run in a single day. By the subsequent day, every part needs to be good to go. You’ll know that the DD command is completed when you may sort within the terminal window once more.

Utilizing Shred

One other approach to erase a tough drive is with the GNU Shred device. Like DD, it’s included on all Linux distributions in some type. In contrast to DD, it could actually delete each information and whole exhausting drives. This methodology is good if you wish to erase elements of the exhausting drive, however perhaps not the entire file system. Right here’s how one can delete information with shred:

shred -u file.odt photo1.png photo2.zip

or

discover /path/to/folder/to/shred/ -exec shred {} ;

Lastly, use the Shred device to erase a tough drive by working this command.

Like DD, Shred takes some time. Greatest to run this device in a single day and let it delete every part. When the terminal can settle for typing once more, you’ll understand it’s completed.

Be aware: change X together with your drive letter (e.g. /dev/sda).

sudo shred -vfz /dev/sdX

Different Strategies

If DD and Shred aren’t sufficient, take into account the Darik’s Boot And Nuke device. It’s a Linux powered open supply device that deletes something and every part linked to your PC, so long as it’s working. Utilizing DBAN requires a USB dwell disk. 

1. Obtain the Etcher USB imaging tool, in addition to the most recent DBAN ISO image. The DBAN device is simply a 15 MB file, so most USB drives will work.
2. When every part is downloaded, open the Etcher USB device and use it to flash the DBAN ISO picture
3. Restart your PC
4. Make sure to log into your PC’s BIOS and change the bootloader in order that the USB key hundreds first. Be aware: disconnect any exhausting drives out of your PC that you simply don’t need to erase. DBAN will delete completely every part linked to it.
5. On the DBAN boot display, enter “autonuke” into the immediate. This command will mechanically nuke every part linked to the PC. So be very certain that each exhausting drive you need to save IS NOT CONNECTED, and that solely ones you do want to erase are linked. There is no such thing as a approach to undo this as soon as it’s been carried out.
6. Operating autonuke will deliver up the DBAN UI. It’ll scan for drives and erase them one after the other. This course of takes a very long time. You’ll know when DBAN is full, as it’s going to let you know on the display. Greatest to only go away the device working.
7. After the erasing course of completes, the display will flip black and say “All selected disks have been wiped.” Press any key to proceed with the device to the top display.

Relying in your Linux distribution and safety wants, there are numerous methods to erase your exhausting drive. Some instructions, resembling wipe, might require putting in by your bundle supervisor, so maintain that in thoughts. There are additionally sure utilities you may set up to do the trick. When doubtful, analysis your particular distro to broaden your potentialities. Lastly, when you’ve got extremely delicate information otherwise you’re erasing your drive on your work, you’ll have sanitation requirements you’re required to fulfill. NIST (Nationwide Institute of Requirements and Know-how) is a superb useful resource for this.