Here's a number that surprises almost everyone who just formatted the wrong drive: 90-95%. That's roughly how often data survives a standard Quick Format, because — despite what the confirmation dialog implies — formatting a drive doesn't actually erase your files. It erases the index that tells your computer where those files are. The photos, documents, and folders are usually still sitting there on the physical storage, invisible to Windows or macOS, but very much recoverable with the right tool.
This is a fundamentally different problem than recovering individually deleted files (which we cover in a separate guide). When you delete a single file, the operating system just marks its entry as free space. When you format an entire drive, the whole file-system table gets rebuilt from scratch — every file's index entry disappears at once. The recovery approach has to change accordingly: instead of "undelete" tools that read the existing file table, you need tools that either rebuild the table (TestDisk) or bypass it entirely and scan the raw data for file signatures (PhotoRec).
Stop using the drive right now
Before you read another word: if you just formatted a drive by accident, do not save anything else to it, do not install an operating system on it, and do not download your recovery software onto it. The data is only recoverable because it hasn't been overwritten yet. Every write operation from this point forward — even a single new file — risks permanently destroying data you could otherwise get back. Set the drive aside and keep reading.
What Formatting Actually Does to Your Data
To understand why recovery is possible at all, it helps to know what a hard drive or SSD actually stores. Every storage device keeps two separate things: the raw data (the bits that make up your photos, documents, and videos, written into physical blocks or sectors) and a file-system table — an index that maps human-readable file names and folder structures to the physical locations where that data lives. On NTFS-formatted Windows drives, this index is called the Master File Table (MFT). On FAT32 or exFAT drives (common on USB sticks and SD cards), it's the File Allocation Table (FAT).
When you format a drive, Windows and macOS default to touching only that index, not the raw data underneath. The operating system builds a brand-new, empty file-system table and essentially tells the drive "as far as I know, none of your space is in use." Your files are still physically sitting in their old sectors — the drive itself has no concept that anything was "deleted." Nothing gets overwritten until the operating system decides to write new data into those now-marked-as-free sectors, which is exactly why recovery software can go in, ignore the empty-looking file table, and reconstruct what used to be there.
| Format Type | What It Actually Does | Recovery Odds |
|---|---|---|
| Quick Format (Windows default) | Rewrites only the file-system table (MFT/FAT); data blocks untouched | ~90-95% if no new data written since |
| Full Format (unchecked "Quick Format") | Overwrites data in passes across the entire partition | Poor to none on overwritten regions |
| macOS Disk Utility Erase (default) | Rewrites APFS/HFS+ metadata; data blocks generally untouched | Similar to Windows Quick Format, ~85-95% |
| Format then continued daily use | New files progressively overwrite old data blocks | Drops sharply with every hour of continued use |
This is the single most important fact in this entire guide: Windows' Format dialog defaults to "Quick Format" checked. Most people who accidentally format a drive never even see the checkbox — they right-click, choose Format, click OK, and it's done in under a minute. That speed is itself a clue: a real, destructive full overwrite of a multi-terabyte drive takes hours, not seconds. If your format finished almost instantly, that's actually good news — it strongly suggests only the file table was touched.
Quick Format vs. Full Format — the real difference
A Quick Format only recreates the file-system table. It's the default in Windows' Format dialog and typically completes in seconds to a couple of minutes regardless of drive size. A Full Format (achieved by unchecking "Quick Format," or running format /p:1 from an elevated command line) writes over the data in one or more passes across the entire partition — a genuinely destructive overwrite that can take hours on a large drive and makes recovery far less reliable in the areas it touches. If you're not sure which one happened, the completion time is your biggest clue.
Can't fix it yourself? Skip the trial-and-error.
Our certified bilingual tech remotes in, reads your system logs, and resolves it on the spot — same day, from $119.99. No fix, no fee.
File System Matters: NTFS vs. FAT32/exFAT vs. APFS
Not every file system leaves behind the same amount of forensic trace after a format, and that affects both which tool you should reach for and your realistic odds. NTFS (the default for internal Windows drives) keeps a relatively rich Master File Table with metadata that recovery tools can often partially reconstruct even after a format, including original file names and folder structure in many cases. FAT32 and exFAT (common on USB flash drives, SD cards, and external drives meant to be cross-compatible with Mac) use a simpler table structure — recovery is still very possible, but tools more often fall back to "raw carving" (recovering file content without the original name or folder path) rather than a full clean restore. APFS and HFS+ (Mac's file systems) sit somewhere in between; modern recovery tools including PhotoRec, Disk Drill, and R-Studio all support them, but APFS's copy-on-write design can behave slightly differently under the hood than the file systems Windows recovery tools were originally built around.
In practice, this means: if you formatted an internal NTFS drive, tools like TestDisk have a genuinely good shot at restoring the original folder structure and file names intact. If you formatted a USB stick or SD card (FAT32/exFAT), be mentally prepared for PhotoRec-style raw recovery, where you get your files back but in generic folders named by file type, with original names lost. Either way, the content itself — the actual photo, document, or video — is just as recoverable in both scenarios.
First-Response Checklist — Do This Before Anything Else
Stop all writes to the formatted drive immediately
Unplug the drive if it's external, or if it's your only internal drive, shut the computer down rather than continuing to use it. Do not install Windows or macOS onto it "just to get going again" — that overwrites exactly the sectors you need intact.
Identify whether it was a Quick Format or a Full Format
Think back to how long the format took. Under a couple of minutes on a large drive almost always means Quick Format — good news. Several minutes to hours strongly suggests a Full Format, meaning data has genuinely been overwritten in at least some regions.
Do not run "repair" or "check disk" tools on the drive yet
Windows' chkdsk and similar disk-repair utilities can write changes to the drive while attempting to fix it, which can interfere with recovery. Save any disk-repair steps for after you've either recovered your data or created a full image of the drive.
Prepare a second, healthy drive with enough free space
You will need this both to install your recovery software on (never install it on the formatted drive) and to save any files that get recovered. As a rule of thumb, have free space at least equal to the formatted drive's total capacity.
Decide if the drive is valuable enough to image first
If the data matters a great deal, or the drive shows any signs of physical trouble (clicking noises, not spinning up, disappearing and reappearing in Disk Management), create a full sector-by-sector disk image before running any recovery software, and work from the image copy instead of the original.
Step-by-Step: Recovering Files With TestDisk and PhotoRec
TestDisk and PhotoRec are both free, open-source tools developed by CGSecurity, and together they're the most widely used combination for formatted-drive recovery — used by data recovery professionals as a first-pass tool as well as home users. TestDisk specializes in rebuilding partition tables and file systems, meaning it can sometimes "undo" a format almost entirely, restoring your original folder structure and file names. PhotoRec specializes in raw file carving — it ignores the file system completely and scans the drive sector by sector for the binary signatures that identify known file types (JPEG headers, PDF headers, Office document structures, and hundreds more), which means it works even when the file system is too damaged for TestDisk to rebuild.
Download TestDisk/PhotoRec onto a different drive
Go to the official CGSecurity website and download the TestDisk & PhotoRec bundle (they ship together in one download). Extract and run it from your computer's main drive or a spare USB stick — never from the formatted drive you're trying to recover.
Launch TestDisk and select the formatted drive
Run testdisk_win.exe (Windows) or the equivalent binary on Mac/Linux. Choose "Create" for a new log file, then select the formatted drive from the list by its size and model — double-check you have the right one, since TestDisk can write changes to whichever drive you pick.
Choose the correct partition table type and run Analyse
TestDisk will usually auto-detect the correct type (Intel/PC for most Windows drives, EFI GPT for many modern drives, Mac for HFS+/APFS). Select "Analyse," then "Quick Search." TestDisk scans for the previous partition structure and lists what it finds — if it locates your old partition, you can attempt to write the recovered structure back, effectively undoing the format.
If TestDisk can't rebuild it, switch to PhotoRec
From the same TestDisk menu, select "File List" while the found partition is highlighted to browse and copy files directly if TestDisk located a usable structure. If it didn't find anything usable, exit to the main menu and launch PhotoRec instead — it works independently of whatever TestDisk found.
Run PhotoRec and select the file types you need
Select the formatted drive, choose the partition (or "Whole disk" if unsure), select the destination file system type of the drive being scanned (not where you're saving to), and optionally narrow the file types to speed things up — but when in doubt, leave all types enabled to avoid missing anything.
Point the recovery destination to your separate healthy drive
PhotoRec will ask where to save recovered files. This must be a different physical drive than the one being scanned — saving recovered data back onto the drive you're recovering from will overwrite the very sectors PhotoRec is still trying to read.
Let it run, then sort and verify recovered files
Depending on drive size and speed, a full scan can take anywhere from 20 minutes to several hours. PhotoRec saves recovered files into numbered folders (recup_dir.1, recup_dir.2, etc.) grouped by file type, without their original names — use a file preview tool or sort by file size and date to identify and verify the ones you actually need.
GUI alternatives if the command-line feels intimidating
TestDisk and PhotoRec run in a text-based interface that can feel unfamiliar. If you'd rather use point-and-click software, Recuva (Windows, free tier available) handles simpler formatted-drive scenarios with a friendly wizard. Disk Drill and EaseUS Data Recovery Wizard (Windows and Mac) offer previews before recovery and paid tiers with higher recovery limits. R-Studio is the choice many professionals reach for on more complex or damaged file systems. The underlying principle is identical across all of them: install on a different drive, scan the formatted one, and save recovered files somewhere else.
Windows: Check Previous Versions / File History First
Before diving into third-party recovery tools, it's worth 60 seconds to check whether Windows already has a copy of your files stashed elsewhere. If File History was enabled on this PC before the format (Settings > Update & Security > Backup, or the legacy Control Panel > File History), Windows may have already been backing up your folders to a separate drive or network location. Since File History snapshots live on a different destination than the drive that got formatted, formatting doesn't touch them at all.
To check: right-click the folder where your files used to live (if you're restoring to the same drive after reformatting it properly) or open File History directly and browse available snapshots by date. Note that this only helps if File History or a similar backup tool was actively configured and pointed at a separate destination drive before the format happened — it cannot recover data from a drive that was never being backed up in the first place. If nothing was configured, this step will come up empty and you'll need to proceed with TestDisk/PhotoRec instead.
Mac: Check Time Machine Before Anything Else
The Mac equivalent is even more likely to save the day if it was set up: Time Machine backs up to a separate physical or network drive on a rolling schedule, completely independent of whatever happens to your main drive. If Time Machine was running before you erased a drive in Disk Utility, open Time Machine (or connect the Time Machine backup drive and use Finder's "Enter Time Machine" from the menu bar) and browse snapshots from just before the format. You can restore individual files or entire folders directly from there — no recovery software required.
If the drive you formatted was the Time Machine backup drive itself, unfortunately this doesn't apply — in that case, follow the TestDisk/PhotoRec (or Disk Drill, which has particularly good APFS/HFS+ support) path described above, treating the Time Machine drive like any other formatted drive.
How to Verify a Recovered File Is Actually Intact
Recovery software reporting "success" and a file actually being usable are two different things — this trips up a lot of people who assume the job is done the moment PhotoRec finishes its scan. Because raw carving tools like PhotoRec identify files by their header signature (the first few bytes that mark, say, a JPEG or a Word document), it's possible to recover a file that starts correctly but got cut short or partially overwritten further in, especially on a drive that saw some activity between the format and the recovery attempt.
Before you consider the job finished, spot-check a representative sample of what came back. For photos and videos, open a handful from different points in the recovered file list — not just the first few — since carving quality often varies by file type and original location on the disk. For documents and spreadsheets, open them in their native application rather than just checking the file size looks reasonable; a truncated Word document can sometimes still open with the visible text intact even if formatting or embedded images are damaged. For anything business-critical, this verification pass is worth doing before you report success to a client, a boss, or your own peace of mind — and it's exactly the kind of check a professional lab builds into their process by default.
If a meaningful percentage of recovered files come back corrupted or truncated, that's a signal the drive saw more write activity after the format than you initially assumed — or that a Full Format, not a Quick Format, actually happened. At that point, further DIY attempts on the same drive are unlikely to improve results, and it may be worth stopping to avoid additional wear, particularly on a mechanical hard drive.
Solid-State Drives Are a Different Game: Why TRIM Changes Everything
Everything above holds true for traditional spinning hard drives by default, but SSDs introduce a wrinkle that catches a lot of people off guard: a background housekeeping feature called TRIM. On a mechanical hard drive, a block marked "free" by a format just sits there unchanged until the operating system happens to write new data into it — which could be days, weeks, or never, if the drive isn't used much. On an SSD, TRIM proactively tells the drive's controller which blocks are now free, and many SSD controllers use that signal to actually erase those blocks in the background almost immediately, as part of normal garbage collection that keeps write speeds fast over the drive's lifespan.
The practical consequence: on a TRIM-enabled system (the default on modern Windows, macOS, and Linux with SSDs), the window for successful software recovery after a format can be measured in minutes rather than the days or weeks you'd have on a hard drive. If you catch it immediately — drive gets formatted, you realize the mistake within a minute or two, and the system hasn't had a chance to issue TRIM commands yet — recovery odds remain reasonably good. If hours have passed, or the SSD was used normally afterward, DIY recovery odds on an SSD drop substantially compared to the 90-95% figure that applies to hard drives.
This is one of the clearest cases where professional lab tools earn their cost: some specialized recovery hardware can, in certain controller models, access flash memory at a lower level than TRIM operates at, occasionally recovering data that consumer software simply cannot see anymore. If you know or suspect the formatted drive is an SSD (internal system drives in laptops made since roughly 2015, and most external drives marketed as "portable SSDs"), factor that into how much time you spend on DIY attempts before deciding to call a lab.
When to Stop DIY and Call a Professional Lab
DIY software recovery works well when the drive is logically healthy — meaning it spins up, is recognized by the computer, and the format was the only thing that happened to it. There's a different category of situation where continuing to run consumer software risks making things worse rather than better:
- The drive makes clicking, grinding, or beeping noises. This points to a mechanical failure inside a hard drive (a failing read/write head or motor), not a software issue. Running recovery software on a mechanically failing drive can cause further physical damage and reduce the data that's ultimately recoverable.
- The drive isn't recognized at all, or disconnects/reconnects repeatedly. This can indicate a failing controller board, connector damage, or firmware corruption — problems that require specialized equipment to diagnose safely.
- It's an SSD, not a spinning hard drive. SSD recovery is fundamentally different from HDD recovery because of a background process called TRIM, which proactively erases marked-as-free data blocks for performance reasons — often within minutes of a format, not months. If TRIM is enabled (the default on most modern systems) and the format happened more than a short time ago, DIY software recovery odds on an SSD drop substantially, and professional lab tools that can sometimes bypass TRIM behavior become the better option.
- The data is business-critical, irreplaceable, or you only get one shot at it. If a failed DIY attempt would be catastrophic, the safer move is to stop, image the drive (or have a professional do it), and let a lab attempt recovery from the image so the original is never put at further risk.
For a logically formatted drive that is otherwise mechanically healthy, professional data recovery labs in Canada typically charge somewhere in the range of $300 to $700 CAD. When physical failure is involved — requiring cleanroom disassembly, platter transplants, or component-level board repair — pricing across the industry commonly runs from $700 up to $1,500 CAD or more, depending on complexity, drive capacity, and turnaround speed. These are general market ranges, not a quote for any specific service — a reputable lab will always diagnose first and quote before doing any chargeable recovery work.
Feels risky? Don't DIY it
If you're not confident distinguishing a logical format from a physically failing drive, or the data is simply too important to risk a wrong move, it's reasonable to stop here. IT Cares offers remote diagnostic support to assess whether your situation is DIY-safe, and can point you toward the right next step — including professional lab recovery — before any further action is taken on the drive.
Formatted a Drive and Not Sure What to Do Next?
IT Cares can remotely walk through your situation, confirm whether it's a safe DIY recovery or one that needs lab-grade tools, and guide you through the safest next step. Most diagnostics completed same-day.
Preventing This Next Time: A Realistic Backup Habit
Almost nobody sets out to format the wrong drive — it happens in the gap between two similarly named drives in a list, a muscle-memory click during a late-night cleanup, or a formatting utility that defaults to the wrong target. The fix isn't "be more careful" (everyone already thinks they are); it's making sure a single formatting mistake can never again mean total data loss, regardless of how it happens.
The most reliable version of this is the well-known 3-2-1 rule: keep at least three copies of anything that matters, on two different types of storage media, with one copy stored somewhere physically separate (cloud storage, or a drive kept at a different location). In practice, for most home and small-business users, that means: the working copy on your main drive, an automatic local backup (Windows File History or Mac Time Machine, both of which run quietly in the background once configured), and a cloud sync folder (OneDrive, Google Drive, iCloud, or similar) for anything irreplaceable. None of this requires much effort to set up, and both File History and Time Machine, once turned on, mean a future formatting accident becomes a five-minute restore instead of an hours-long recovery project.
If you manage external or USB drives that get reformatted occasionally for legitimate reasons — reusing a drive for a new project, repurposing an old backup disk — get in the habit of double-checking the drive letter or volume name in the format dialog before confirming, and consider renaming drives with clear, specific labels ("OLD-Photos-DoNotFormat" beats "New Volume") so the one you actually mean to wipe is unmistakable at a glance.
Frequently Asked Questions
Can I really recover data from a formatted drive?
Yes, in most cases. A Quick Format — the Windows default — only rewrites the file-system table, not the actual data. As long as you stop using the drive immediately, tools like TestDisk and PhotoRec can typically restore 90-95% of files. A Full Format is far more destructive because it overwrites data across the partition.
What is the difference between Quick Format and Full Format?
Quick Format only recreates the file-system table and takes seconds to minutes. Full Format writes over data across the entire partition in passes, taking hours on a large drive, and significantly reduces recovery odds on the sectors it overwrites.
Does formatting a Mac drive with Disk Utility work the same way?
Largely yes. Disk Utility's Erase with default settings for APFS or HFS+ rewrites file-system metadata while leaving underlying data blocks generally intact until overwritten. Tools like Disk Drill, PhotoRec, and R-Studio all support Mac file systems.
What's the single biggest mistake people make after formatting a drive by accident?
Continuing to use the formatted drive — installing an OS on it, saving new files, or installing recovery software directly onto it. Always install recovery software on a separate, healthy drive, and consider imaging the formatted drive first.
How much does professional data recovery cost if DIY tools don't work?
For a logically formatted but mechanically healthy drive, expect roughly $300-$700 CAD from a professional lab. Physically failing drives requiring cleanroom or board-level work commonly run $700-$1,500+ CAD, depending on complexity.
Can Windows File History or Mac Time Machine recover formatted files without special software?
Only if a backup existed on a separate drive before the format. Both tools back up to a different destination, so formatting the original drive doesn't affect those backups. If no backup was ever configured, you'll need dedicated recovery software instead.

Comments (3)
Formatted my external drive instead of the USB stick I meant to wipe — classic mistake. Ran TestDisk following steps 6 through 9 here and it found the old partition structure within a couple minutes. Got back three years of client invoices with folder names intact. Wish I'd known this was even possible before panicking for an hour.
The quick vs full format explanation finally made sense of why my SD card recovery worked but my brother's laptop drive (he unchecked the quick format box without knowing what it did) didn't. PhotoRec pulled back most of my card's photos with generic filenames, exactly as described. Took about 40 minutes for a 64GB card.
My drive was making a faint clicking noise so I stopped right after reading the warning about physical failure and called IT Cares instead of running PhotoRec myself. Good thing — turned out to be a failing read head. Glad this guide flagged that before I made it worse trying to DIY it.
Leave a Comment