An external drive that is no longer big enough for the office and goes to a nephew for his games. A USB stick holding last year’s invoices, lent to a colleague. The memory card from the old camera, sold along with the camera. Before parting with them, almost everyone does the same thing: they format them. A few seconds, a bar that fills up, and the device shows as empty.
The catch is that this “empty” is often only on the surface. The format offered by default is usually the quick one: fast precisely because it does not touch the data, and only wipes the index that says where the data is. Files, photos and documents stay where they were, invisible to you but recoverable by anyone with an ordinary recovery program and a little patience.
This recommendation — R21 of the Cyber Welfare Framework — is about a small choice, made in a dialogue box: when a drive, a USB stick or a memory card is about to leave your hands, choosing a full format, which overwrites the data, rather than a quick one. It does not require technical skills. It requires knowing where to look, and giving the computer the time the job needs.
What this recommendation says
Recommendation R21 states that every storage device that is about to leave your hands should be formatted with an option that overwrites the data, not with the quick option that only wipes the index.
Formatting means preparing a storage device for use by creating its file system from scratch — the index that organises the files and tells the computer where each one is. The two options your operating system usually offers do very different things:
- a quick format creates a new, empty index but leaves everything else untouched: the old data stays written where it was, until something else is written over it;
- a full format, on today’s most widely used operating systems, goes through the entire device and carries out overwriting — writing zeros or meaningless data in place of the old data — while also checking for damaged areas.
You can tell the difference by how long they take: the first lasts seconds, the second can take minutes or hours, depending on capacity. That time is exactly what tells you the work is being done.
What it is not. It is not a request to run a full format on every USB stick you use day to day: if the device is staying with you and you just want to clear it, a quick format is perfectly fine. And it is not an absolute guarantee for every kind of memory: on solid-state drives (SSDs) and on the memory inside modern USB sticks and cards, formatting alone is not always enough, and further down you will see why.
Where it applies. Internal and external hard drives, solid-state drives, USB sticks, memory cards from cameras, phones and camcorders, drives in a small home or office server or a network video recorder. It applies every time the device changes hands: selling, giving away, lending, returning work equipment, recycling.
Why it matters
Quick-formatting a drive you are about to pass on is like tearing the contents page out of a notebook and leaving every written page inside: whoever leafs through it does not know straight away where to look, but can read everything.
Programs that rebuild files from a quick-formatted device are easy to find and often free. There is no need for a laboratory or specialist skills: in most cases you plug in the drive, start a scan and wait. Many of these tools exist for a legitimate reason — to help people who formatted something by mistake. But they work in exactly the same way for anyone who has your old drive in their hands.
The concrete consequences show up on four fronts:
- privacy — family photos, scanned identity documents, medical reports and saved conversations become readable again;
- other people’s data — a work drive holds details of customers, suppliers and staff: if that data resurfaces, the problem is no longer just yours;
- identity theft — with documents, addresses and saved credentials, someone can pretend to be you towards services and contacts;
- false reassurance — you are convinced you have erased everything, so you stop thinking about it, even when you should not.
One case deserves special attention: USB sticks and memory cards. They are small and cheap, they change hands casually, and they often hold more than we remember: a scan made in a hurry, a backup copy from a year ago, the photos from a party.
| Benefit of a full format | Why it counts |
|---|---|
| Overwrites the data instead of hiding it | The old content is no longer on the device in readable form |
| Defeats ordinary recovery programs | There is nothing left to rebuild from the index |
| Checks the health of the device | Damaged areas are identified during the pass |
| Protects the people in your files too | Customers, family and colleagues do not end up in strangers’ hands |
| Gives you a certainty you can check | You know what you have done, instead of hoping it was enough |
A concrete example
Imagine that John, who runs a small plumbing and heating business, buys a new external drive for the office backups. The old one still works well, so he gives it to a friend’s son who needs one for school.
Before handing it over, John plugs it into the computer, clicks “Format” and leaves the quick format box ticked, as suggested. After a few seconds the drive shows as empty. John is reassured.
On that drive, though, there were five years of invoices, quotes with customers’ names and addresses, copies of his two employees’ documents and photos of job sites. The boy is not looking for anything. But drives change hands over the years: all it takes is for someone to run an ordinary recovery program to find one of their own files deleted by mistake, and folders nobody had ever seen reappear in the scan. From that point on, where that material ends up no longer depends on John.
Now let us replay the same afternoon with a different choice. John checks that the new drive really holds everything, then, on the old one, unticks the quick format box and starts a full format. It takes a few hours: he lets it run while he finishes his quotes. By the evening, the drive is genuinely empty.
The drive is the same, the gift is the same. What changes is that, this time, John’s customers stay where they belong: in his own records.
When to apply it
The rule applies every time a device leaves your control, but there are moments when it makes a measurable difference.
- When you sell or give away an external drive. It is the most common case, and the one where a quick format is most widespread.
- When you lend or give away a USB stick. Even if it holds “only” a few files, it has often held many others in the past.
- When you pass on a camera or camcorder. Take out the card, or give it a full format if it goes along with the device.
- When you return work equipment. Company drives, a supplier’s storage, leased devices: they often contain other people’s data.
- When you reuse a drive within the family or the office. Moving a device from personal to shared use is a small change of hands, even if it never leaves the building.
- Before recycling or disposal. A drive left at the recycling centre may still be readable by someone. If it is broken and cannot be formatted, the answer is physical destruction, which the recommendation on erasing data covers.
How to apply it
The operation itself is simple. What matters is the sequence.
- Keep what you need safe. A full format is final: first copy the data you want to keep somewhere else and check that the copy opens.
- Recognise the type of device. A traditional hard drive, with moving mechanical parts, behaves differently from a solid-state drive, a USB stick or a memory card, which use electronic memory. The label or the technical specifications usually tell you which it is.
- Select the right device. Check the name, capacity and drive letter or icon before confirming: formatting the wrong drive is the most painful mistake of all.
- Untick the quick format box. In the formatting window, the quick option is often ticked already: untick it. If your system does not call it that, look for “security options” or an entry that mentions overwriting or writing zeros. If the description only talks about checking for errors, look for a tool that genuinely overwrites.
- Let the computer do its work. It can take hours: do not interrupt it, do not unplug the device, and keep a laptop connected to the mains.
- For solid-state drives, USB sticks and cards, add one more step. These memories move data between their cells on their own, to wear them evenly, and keep spare areas that the system cannot see: overwriting may not reach all of them. The most reliable approach is encryption from the start — data readable only with a key — followed by secure erasure. Both topics are covered in encrypting your personal devices and in the recommendation on wiping your data before passing on a device.
The detailed steps, device by device, are in the guide on how to do a full format.
Common mistakes to avoid
- Thinking “formatted” means “erased”. After a quick format the device looks empty, but the data is still there.
- Choosing the quick option because you are in a hurry. It is the option offered first, and the most convenient. For a device that stays with you, that is fine; for one that is leaving, it is not.
- Emptying the recycle bin and considering it enough. Deleting files only removes the reference to them, exactly like a quick format.
- Stopping a full format halfway. The job remains partial: part of the device is overwritten, part of it is not.
- Relying on formatting alone for a solid-state drive. It helps, but it does not give the same assurance as on a traditional hard drive.
- Forgetting about cards and USB sticks. Precisely because they are small, they get handed over along with a camera, a car stereo or an old laptop without anyone giving them a thought.
How this connects to the Cyber Welfare Framework
R21 turns an absent-minded click into a conscious choice: security also depends on the boxes we leave ticked out of habit.
| Pillar | How this contributes |
|---|---|
| Skills | Telling a quick format from a full format and recognising the type of device |
| Awareness | Understanding that a device that looks empty may still contain everything |
| Secure Behaviour | Always choosing a full format, or secure erasure, before a device changes hands |
Digital maturity levels.
- FL1 — Basic. You delete files or run a quick format, convinced that it is enough. It is the most common starting point, not a fault.
- FL2 — Beginner. Before passing on a drive, a USB stick or a card, you choose a full format and let it finish.
- FL3 — Autonomous. You choose the method according to the device: a full format for hard drives, encryption and secure erasure for solid-state drives and electronic memory.
- FL4 — Skilled. You keep track of all the storage devices at home or in the office, including the ones forgotten in drawers, and you know when physical destruction is needed.
- FL5 — Expert-Guide. You help other people — in your family, among colleagues, in your business — pass on their devices without passing on their data.
R21 is an FL2 recommendation, and it prepares the step towards FL3: from the right option to the right method for each device.
How to check you are applying it properly
Three questions, to be answered honestly.
- The last time I formatted a device I was passing on, did it take seconds or hours?
- Do I know whether the drive I am about to pass on is a traditional hard drive or a solid-state drive?
- Are there USB sticks or memory cards in my drawers whose contents I no longer remember?
Quick checklist
- ☐ Before formatting, I copy what I need elsewhere and check that it opens
- ☐ I check that I have selected the right device
- ☐ I untick the quick format box when the device is about to leave my hands
- ☐ I let the full format run all the way to the end
- ☐ For solid-state drives, USB sticks and cards, I use encryption and secure erasure
- ☐ I take memory cards out of devices I pass on, or give them a full format
If a box stays empty, you already have your next step. If you would like a broader measure of how prepared you are, you can take the digital resilience self-assessment.
In short
A quick format creates a new index but leaves the data where it was: fine for a device that stays with you, not for one that is leaving. A full format, on the most widely used systems, overwrites the whole device and defeats ordinary recovery programs.
The sequence is simple: copy what you need, select the right device, untick the quick option, and be patient until the end. For solid-state drives, USB sticks and modern cards, it is better to add encryption and secure erasure.
This is not about distrusting whoever receives your old drive. It is about handing them free space, not your archive.
Something to think about. The last drive or USB stick you passed on: how long did it take to format?
Explore this recommendation
This recommendation is the pivot of a content unit. Each post looks at a different aspect.
- Risks of a quick format — what gets hit, in terms of the confidentiality, integrity and availability of your data
- Data recovered after formatting — the concrete effects on the operational, financial, legal, reputational and personal levels
- How to do a full format — the mitigations, step by step, for hard drives, solid-state drives, USB sticks and memory cards
- Signs a format was not complete — the indicators to check and what they mean
- Quick format vs full format — the technologies involved, their advantages and limits
- Recovering files from formatted drives — the ways people try to take advantage of data left on a device formatted in a hurry
Related resources
Short reads from the Resources section, for anyone who wants to focus on a single aspect:
- Data Backup: The Only Protection That Works Afterwards
- Data Encryption: Already On, and Worth Understanding
Start with the first step: the Cyber Welfare Programme guides you free of charge, one recommendation at a time.
