Can I get files back from a drive I formatted by mistake?
Often yes after a quick format, rarely after a full one, and almost never on an SSD. What the two kinds of format actually do, and the order to work in.
- Difficulty
- intermediate
- Time
- 1 hr
- Read
- 4 min
- Safety
- warning
Short answer
A quick format rewrites the index and leaves the data in place, so recovery software has a real chance — often a good one. A full format on a modern system writes zeros across the whole drive, which destroys the data. On an SSD, either kind usually triggers TRIM and erases the blocks. Stop using the drive, connect it to another computer as a secondary drive, run a scan from that computer, and recover to a third location.
The distinction between the two kinds of format is the whole answer, and it is worth knowing which one you clicked before you spend anything.
Safety
Step by step
- Work out which format was performed.A quick format takes seconds and only writes a new, empty file system structure. A full format takes a long time — often hours on a large drive — because on modern Windows and macOS it also writes zeros over the whole surface, verifying as it goes. If it was over in seconds, you have a chance.
- Disconnect the drive from anything that might write to it.Including automatic indexing, antivirus scans and any helpful operating system offering to prepare it for use. If the format happened during a system install, shut the machine down now.
- Connect it as a secondary drive to another computer.Use a USB enclosure or dock for an internal drive. You want the drive to be a passive target, not the drive the operating system is running from.
- Image the drive before you work on it, if you can.Copying the whole drive sector by sector into a single large file gives you an unchanging thing to work on and as many attempts as you want. It requires a destination as large as the source. This is what a professional would do first.
- Scan for the previous file system, then for raw file types.Good recovery tools first look for the old partition and file system structures, which if found restore your original folders and names. If that fails, they fall back to signature scanning, which finds files by their internal patterns and gives you a heap of correctly-typed files with lost names.
- Recover to a different drive.Never back to the drive being scanned. Every recovered file written back would land on data not yet recovered.
- Sort the results by type and date.A signature-scan result is a large unnamed pile. Photographs carry their capture date in their embedded data, documents often carry a title, and both survive the loss of the filename. That is how people reconstruct an archive from an unnamed recovery.
- Judge when to stop.If a full scan produces mostly unopenable fragments, further scans will not change that. Either accept the loss or, for genuinely irreplaceable material, take the drive to a recovery firm before doing anything else to it.
If it doesn't work
Formatted a memory card in a camera
Cause: Camera formats are almost always quick formats — Fix: Best case there is. Stop taking photographs immediately, remove the card, and scan it in a reader from a computer. Success rates are high if nothing has been written since.
Reinstalled the operating system over the drive
Cause: The installer wrote a new system across the start of the drive — Fix: Personal files further along the drive may survive, but system-adjacent locations are overwritten. A signature scan is the realistic route and the folder structure will not come back.
Formatted an external drive as a different file system
Cause: Changing between exFAT, NTFS or APFS rewrites the structure — Fix: If it was a quick format, a scan will usually still find the old file system. Do not use the drive in the meantime.
Drive was encrypted before the format
Cause: The encryption metadata may have been destroyed — Fix: Without the header and key material, the contents are unreadable noise regardless of whether they physically survive. Some tools recover encryption headers from backups the system made; otherwise this is the end of the road.
Questions people ask
Does a quick format really leave everything intact?
It leaves the data blocks untouched and replaces the map. Whether you get the files back depends entirely on whether anything has written to those blocks since — and a drive put straight back into use starts filling from the beginning.
What about a factory reset on a computer?
Modern resets usually erase in a way designed to be unrecoverable, particularly where the drive is encrypted, because that is the point of the feature. Treat the data as gone.
Is Windows' "you need to format this disk" message a format?
No — that is the system saying it cannot read the file system. Say no. The data is very likely intact and this is one of the most recoverable situations there is. Clicking format at that prompt is how a good outcome becomes a poor one.