How to wipe a hard drive: Secure Erase vs overwrite
Hard drives have been around long enough that both approaches work — but one reaches sectors the other can't touch.
Spinning hard drives support the same ATA erase commands as SATA SSDs, and the logic is the same: prefer firmware erasure, fall back to software overwrite. But hard drives add a wrinkle — reallocated sectors.
ATA Secure Erase on hard drives
ATA Secure Erase and Enhanced Secure Erase tell the drive's own controller to overwrite every sector. Because the controller knows about reallocated sectors — bad sectors that were mapped out and replaced with spares — it can wipe data remnants that the operating system can no longer see. That's something a host-side overwrite can't do.
- Secure Erase → NIST 800-88 Clear
- Enhanced Secure Erase → NIST 800-88 Purge
Software overwrite as a fallback
When a drive doesn't support firmware erasure, the fallback is a software overwrite — writing zeros or a pattern across the visible drive. It's slower (an 8 TB mechanical drive can take tens of hours), and it can't reach reallocated sectors, but it maps to NIST 800-88 Clear and is perfectly adequate for drives being redeployed internally.
Secure Erase vs overwrite at a glance
| Secure Erase | Software overwrite | |
|---|---|---|
| Reaches reallocated sectors | Yes | No |
| Speed | Minutes to hours | Hours to days |
| NIST 800-88 | Clear / Purge | Clear |
| Use when | Supported | No firmware erase available |
Wiping a hard drive with tScrub
- Boot the appliance with the drive connected.
- tScrub classifies it as ATA and checks for Secure Erase / Enhanced Secure Erase support.
- It runs the firmware erase where available, or falls back to a software overwrite.
- The report records the method, final status, and pre/post-wipe SMART data.
FAQ
How long does wiping a hard drive take?
Firmware Secure Erase is usually the fastest route — often well under an hour. A full software overwrite of a large drive can take days, which is exactly why firmware erasure is preferred.
Do I need multiple overwrite passes?
No. A single pass is sufficient on modern drives. The multi-pass standards date from a much earlier era and mostly add time.