Permanently delete files on Mac: limits and choices

What “permanently delete” means on a Mac

There are two different goals: removing a file from the normal filesystem, and ensuring nobody could recover any old copy from any storage. Finder provides the first. The second depends on the storage, encryption and every other place the data was kept.

For ordinary cleanup, use the Trash while you are deciding. Permanent removal is for files you have reviewed and no longer need. If the file is an important record, preserve the required copy elsewhere first. If an employer controls the data, follow its retention and disposal process rather than guessing from a file’s age.

Delete a specific item with Finder

The cautious route is to move the selected item to the Trash first with Command-Delete. Open Trash, preview the item if needed, then Control-click it and choose Delete Immediately. Read Finder’s warning and confirm only that selection.

Finder also provides the Option-Command-Delete shortcut to bypass the Trash for a selected item. Treat it as a destructive shortcut, not a faster ordinary move. Do not use it while you are still working out which of several similar files is the right one.

To remove everything already in Trash, use Finder › Empty Trash, but inspect its contents first. Emptying the whole Trash can include files from other cleanup sessions. The Trash guide owns the full workflow and common errors.

These ordinary Finder controls are available on macOS 15 Sequoia, macOS 26 Tahoe and macOS 27. No Terminal deletion command is needed. A locked item or permission failure calls for checking the item’s ownership and intended scope, not escalating to an indiscriminate command.

Why Secure Empty Trash disappeared

Apple’s OS X El Capitan security note records the reason it removed Secure Empty Trash: it could not guarantee secure deletion on some systems, including flash storage. The issue is listed as CVE-2015-5901. The feature is not hidden behind a modern Finder preference.

Installing a replacement menu command cannot restore a guarantee the storage cannot provide. A tool may overwrite the logical bytes it can access, but that is different from proving every older representation has vanished. Do not judge a deletion product by an unsourced number of overwrite passes.

Apple’s Disk Utility guide also says secure-erase options are unavailable for SSDs and recommends considering FileVault from the time you start using the drive. Ordinary removal and protection of stored data are complementary choices, not interchangeable buttons.

Why SSDs and APFS change the answer

Flash storage manages physical locations internally, and filesystems can preserve earlier versions through mechanisms such as copy-on-write and snapshots. Rewriting the current file is not proof that an older physical copy, clone or snapshot was rewritten too.

APFS supports cloning, so identical-looking files need not be ordinary independent copies at every moment. Backups and snapshots may deliberately preserve data you removed from the current folder. That is useful for recovery, but it means a file shredder cannot honestly claim to erase all history merely by overwriting one pathname.

Encryption protects data at rest by controlling access to its keys. On supported Apple silicon and T2 Macs, Apple documents hardware-backed volume encryption and the additional protection FileVault gives the key hierarchy. The FileVault guide explains the account and recovery choices.

Do not interpret FileVault as a selective “erase this one file everywhere” feature. An unlocked account can still access its data, and separate backups or cloud accounts have their own protection and retention. Turning encryption on today is not evidence that every earlier unencrypted copy on every device has gone.

Check the other copies you actually control

• Cloud storage: a local deletion can sync to other devices, while a Remove Download action only removes a local cached copy. Confirm the service and intention first.
• Backups and snapshots: they can retain earlier versions. Use the backup provider’s supported retention controls rather than deleting its internal files.
• Exports and attachments: an email attachment, shared document or exported PDF can exist independently of the original.
• Another person’s copy: deleting your copy does not recall a file you have already sent.

The iCloud Drive guide covers the particularly common confusion between removing a local download and deleting the cloud document. A synced folder is the wrong place to experiment with permanent deletion.

If you are selling or giving away the Mac

Do not try to sanitize the whole computer by selecting folders and shredding them one by one. Back up what you need, then use Apple’s supported erase workflow. On compatible Macs, System Settings › General › Transfer or Reset › Erase All Content and Settings removes user data, settings and apps while retaining the installed operating system.

Apple’s security documentation explains the role of destroying encryption keys in making erased volume data cryptographically inaccessible. The factory-reset guide covers the prerequisites, account steps and fallback without duplicating that destructive procedure here.

Where Tend fits

Tend Pro’s Shredder overwrites each eligible selected file once with random data, flushes it and removes it without a stop in the Trash. It asks for confirmation. On SSDs with APFS, it cannot promise that every old copy is gone; its interface says so. It refuses protected locations such as app libraries, cloud folders and your Library.

For routine cleanup, Tend’s free views show eligible home-folder files and Pro moves reviewed selections to the normal Trash. Use that recoverable workflow when you are undecided. Shredder is not a replacement for FileVault, backup retention or Apple’s whole-Mac erase process.

Questions

Related guides

Sources

• Apple, deletion, Trash and Delete Immediately.
• Apple, OS X El Capitan security content, Finder / CVE-2015-5901: Secure Empty Trash removal.
• Apple, SSD secure-erase limitation and volume encryption and key deletion.
• Apple, Erase All Content and Settings.
• Tend Shredder behavior checked read-only in Sources/Tend/Privacy/Shredder.swift; no file deletion or overwrite was executed.

Sources checked 23 October 2026. Spotted something out of date? Tell us and we'll fix it.