How to prepare files before attempting data recovery

First, stop using the affected drive

If you've accidentally deleted files or discovered that a drive is missing data, avoid saving anything new to the affected storage. New writes can replace information that recovery software might otherwise be able to retrieve.

Don't download recovery software onto the affected drive, copy new files to it or run cleanup tools. If your Mac's internal drive is affected, limit activity as much as practical. If an external drive is affected and appears healthy enough to eject normally, stop using it and eject it safely.

Check whether the files are actually missing

Not every missing file has been deleted. It may have been moved, renamed, hidden by a view setting or stored in a different location. Checking the obvious places can save you from an unnecessary recovery attempt.

1. Look in the Bin. If the file is still there, you may be able to restore it to its original location. Check external-drive Bins where relevant.
2. Search using Finder. Try part of the filename, the file type or a project name. Check that you're searching the intended location.
3. Check the original application. Some apps manage their own libraries, recently deleted items or document versions.
4. Review your backups. If you use Time Machine, look for a copy from before the file went missing. Check any separate archive or cloud service's version history too.

Apple explains how to restore individual files from Time Machine. If you're recovering from a backup, pay close attention to the destination so you don't overwrite a different copy you want to keep.

Identify the drive and what happened

Before choosing a recovery method, work out whether the data was stored on your Mac's internal SSD, a connected external SSD, a hard drive, a memory card or another device. The answer matters because each type of storage behaves differently.

Make a short record of what happened: when the files were last seen, whether they were deleted or became inaccessible, whether the drive was reformatted and whether anything has been written to it since. If an error message appeared, note its exact wording.

Check the physical condition without making changes

For an external drive that appears to be functioning normally, confirm its cable and power connection. You can use Disk Utility to see whether macOS recognises the device, but don't erase, partition or repair it as an exploratory first step.

Apple's Disk Utility guidance explains that First Aid checks and can repair certain file-system errors. That is different from recovering deleted files, and a repair operation can change disk structures. If the data is irreplaceable and has no other copy, consider preservation or professional advice before running repairs.

Prepare a safer recovery workspace

If the device is stable and you intend to use recovery software, prepare the destination and any tools before scanning. The goal is to avoid changing the original source more than necessary.

1. Use a separate destination. Have another physical drive with enough free space for recovered files. Never save recovered files back onto the source you're trying to recover from.
2. Use a different drive for the software. Avoid installing or downloading tools onto the affected volume.
3. Preserve the original when possible. For suitable, stable devices, a sector-level image made using an appropriate read-only process may provide a safer working copy for analysis. Creating images is not risk-free on failing hardware; seek expert assistance if the drive is unstable.
4. Identify the files you need most. Note important filenames, folders, formats and approximate dates to help review results.
5. Keep a record. Save notes about the source device, what you've attempted and where any recovered output is stored.

If your drive is encrypted, ensure you have the relevant authorised password or recovery key. Without the required credentials, some data may remain inaccessible regardless of the recovery software used.

Choose the recovery method that matches the problem

Restoring a file from the Bin or an existing backup is usually more straightforward than attempting to reconstruct deleted data. When no usable copy exists, the available options depend on what remains accessible.

Files that still exist but are damaged

If a file exists but cannot be opened, some tools can inspect its contents for supported embedded data. Results depend on the format and how much usable information remains.

Deleted files on an external drive

Recovering deleted material may require access to file-system metadata or a preserved disk image, not simply a normal Finder folder scan. Some devices and formats provide more usable evidence than others.

Problems with the disk itself

If a drive is physically damaged, frequently disconnects or cannot be detected reliably, repeated scans may worsen the situation. Professional recovery is generally the more cautious option, particularly for irreplaceable files.

Understand what software cannot guarantee

Recovery tools cannot recreate data that is no longer available. On some SSDs, TRIM and other storage management behaviour can make deleted content unrecoverable. Encryption, overwriting and serious hardware faults can also limit what is possible.

A scan finding a filename doesn't necessarily mean the file can be opened intact. Partial results may be useful, but inspect recovered copies carefully and keep the originals untouched until you're satisfied with the outcome.

Once the immediate problem is resolved, consider a backup routine that keeps an independent copy of important files. If you're also trying to understand what is stored across several external drives, the planned HDD Catalogue app can record their contents for later offline searching. A catalogue is not a backup or a recovery service.

Frequently asked questions

A careful start makes the difference

When files disappear, it's tempting to start trying every recovery option available. A better first step is to protect the affected drive, check for existing copies and understand what kind of data loss has occurred.

There's no guarantee that missing files can be recovered, but avoiding unnecessary writes and choosing an appropriate next step can help preserve the options you still have.