SSD Destruction: Why Wiping Alone Isn't Enough
Key takeaways
- SSDs store data in memory cells managed by a wear-levelling controller.
- Standard overwriting may miss remapped cells, leaving residual data.
- Reliable methods are verified cryptographic erase or physical shredding.
- Degaussing does not work on SSDs because they are not magnetic.
- Shredding SSDs requires finer particle sizes than hard drives.
- Always obtain a Certificate of Destruction confirming the method used.
Learning how to destroy SSD data properly is essential because solid-state drives do not behave like the spinning hard drives most disposal processes were designed around. Their internal architecture means a standard overwrite can leave recoverable data behind. This guide explains why SSDs are different, which methods genuinely work for secure SSD erasure, the common mistakes to avoid, and how to make sure their data is verifiably gone.
How SSDs differ from hard drives
Traditional hard disk drives store data magnetically on spinning platters, so overwriting every sector and degaussing both reliably erase the data. Solid-state drives have no platters and no magnetism — they store data electronically in NAND flash memory cells.
To prolong their lifespan, SSDs use a controller that constantly moves data between cells through a process called wear levelling. This is excellent for performance and durability, but it is precisely what makes secure erasure harder, because the controller, not the operating system, decides where data physically lives.
Why standard wiping falls short
When you run a conventional overwrite on an SSD, you are writing to the logical addresses the operating system sees — but the controller may have physically mapped some of your old data to spare cells that the overwrite never reaches.
The wear-levelling problem
Because the controller remaps blocks invisibly, copies of data can linger in cells that are no longer addressable from outside. A standard multi-pass wipe designed for hard drives simply cannot guarantee it has reached every cell.
Over-provisioning and hidden capacity
SSDs reserve extra capacity, known as over-provisioning, that the controller uses behind the scenes. Data can reside in this hidden area, out of reach of conventional erasure tools, which is another reason overwriting alone is unreliable.
Why degaussing does not work on SSDs
Degaussing erases magnetic media by disrupting their magnetic field — extremely effective on hard drives. SSDs store no data magnetically, so a degausser has no effect whatsoever. Using one on an SSD provides a false sense of security while leaving the data completely intact, which is one of the most dangerous misconceptions in IT disposal.
Methods that actually destroy SSD data
There are two dependable routes to secure SSD destruction, and the right one depends on whether you want to reuse the drive.
Verified cryptographic erase
Many modern SSDs are self-encrypting and support a manufacturer-grade cryptographic erase that destroys the encryption key, rendering all data unreadable in moments. When carried out and verified to the correct standard, this is a secure option that keeps the drive reusable.
Physical shredding
For maximum assurance, or for any SSD holding sensitive data, physical shredding is the safest choice. SSDs must be shredded to a finer particle size than hard drives because the memory chips are small — a coarse shred could leave an intact chip. A provider equipped for SSDs will use the appropriate particle size.
Where SSDs hide in your estate
Part of the SSD challenge is simply knowing where they are. Flash storage has spread well beyond the obvious laptop, and these devices are easy to overlook when planning disposal.
- Modern laptops and ultrabooks with soldered or M.2 SSDs.
- Servers and storage arrays using enterprise flash.
- Tablets, smartphones and two-in-one devices.
- USB memory sticks and many external drives.
- Embedded storage in some networking and point-of-sale equipment.
Choosing the right method for your SSDs
- Reusable, self-encrypting SSD with non-critical data — verified cryptographic erase.
- Sensitive or regulated data — physical shredding to a fine particle size.
- Failed or unresponsive SSD — physical shredding (it cannot be erased reliably).
- Mixed estate of HDDs and SSDs — triage each device by type and sensitivity.
SSDs in mixed IT refreshes
Most refreshes today mix older hard drives with newer SSDs, and treating them identically is a common mistake. Hard drives can be wiped or shredded conventionally, but SSDs need the specialised handling above. Our secure data destruction service identifies drive types during processing and applies the correct method to each, so nothing slips through with residual data.
Documenting SSD destruction
As with any media, the destruction is only complete when it is documented. Your Certificate of Destruction should specify that SSDs were destroyed by cryptographic erase or shredding, ideally with serial numbers, so you can prove the correct method was used for this distinct media type. Keep it alongside your Waste Transfer Note for at least two years.
A practical SSD disposal checklist
Reliable SSD data destruction is mostly about identifying flash storage correctly and routing each device to the right method. Running through a short checklist before collection prevents the most common failure — an SSD slipping through a process designed for magnetic drives.
- Identify every device that uses flash storage, including laptops, tablets and USB sticks.
- Separate SSDs from spinning hard drives so each gets the correct method.
- Note which SSDs are self-encrypting and healthy enough for cryptographic erase.
- Route failed or unresponsive SSDs straight to physical shredding.
- Flag highly sensitive SSDs for shredding to a fine particle size.
- Record serial numbers so each SSD can be reconciled on the certificate afterwards.
Common SSD destruction mistakes to avoid
Because solid-state drives are still treated by many disposal processes as if they were hard drives, the mistakes tend to repeat. Each one leaves recoverable data behind while giving a false impression that the job is done.
Trusting a hard-drive overwrite tool
Running a multi-pass overwrite designed for magnetic media is the classic error. Wear levelling and over-provisioning mean the tool cannot guarantee it reached every cell, so secure SSD erasure needs a verified cryptographic erase or physical destruction instead of a conventional wipe.
Coarse shredding and forgotten flash
Shredding an SSD in a machine set for hard drives can leave an intact memory chip, so the particle size must be finer. Just as important is remembering the less obvious flash — USB sticks, memory cards and embedded storage in networking or point-of-sale kit all share the same wear levelling data recovery risk and must be destroyed too.
How Ewaste.org.uk destroys SSDs
We identify drive types during processing so SSDs never get treated like spinning hard drives by default. Self-encrypting, healthy SSDs holding non-critical data can be handled by a verified cryptographic erase that keeps them reusable, while sensitive, failed or policy-driven SSDs go to physical shredding at the finer particle size flash media requires. As a registered upper-tier waste carrier, we recycle the residue through a zero-to-landfill process and document the method on your Certificate of Destruction.
If your refresh mixes older hard drives with newer SSDs, it is worth flagging that when you book so each device is routed correctly. Our team can talk through the right approach on 020 4524 7964.
Need help with this? Learn more about our secure data destruction service or arrange a free, no-obligation collection today.
Ready to book a free collection?
Free, compliant, nationwide WEEE collection for UK businesses — with full documentation as standard.
Frequently asked questions
Can you securely wipe an SSD?
Only with the right method. A standard overwrite may leave data in remapped or over-provisioned cells. A verified manufacturer cryptographic erase is reliable for self-encrypting SSDs, while sensitive data is best handled by physical shredding.
Does degaussing work on SSDs?
No. Degaussing only erases magnetic media such as hard disk drives. SSDs store data in flash memory with no magnetism, so a degausser has no effect and leaves the data fully intact.
How are SSDs physically destroyed?
SSDs are shredded to a finer particle size than hard drives because their memory chips are small. A coarse shred could leave a chip intact, so a provider equipped for SSDs uses the appropriate particle size.
Is shredding necessary if my SSD is encrypted?
Not always. A verified cryptographic erase on a self-encrypting SSD can render data unreadable while keeping the drive usable. For highly sensitive data or where policy requires it, physical shredding gives absolute assurance.
How do I prove an SSD was destroyed correctly?
Obtain a Certificate of Destruction that names the method used — cryptographic erase or shredding — and ideally lists serial numbers. This proves the correct method was applied to this distinct media type.
Do USB sticks and memory cards need the same treatment as SSDs?
Yes. USB sticks, memory cards and most external flash drives use the same NAND flash technology, so they share the same wear-levelling and over-provisioning issues. They should be cryptographically erased where supported or physically shredded.
Can a failed SSD still hold recoverable data?
It can. A drive that will not boot may still have intact memory chips that a specialist could read. Because a failed SSD cannot be reliably erased, physical shredding is the dependable way to ensure the data is gone.