How to Recover Deleted Files and Photos — and When You Genuinely Can't

Check the bins — all of them

Obvious, but there are more layers than people realise, and each is separate:

• The desktop Recycle Bin or Trash. Note that files deleted from a USB stick or network drive usually bypass it entirely, as do files deleted with Shift+Delete.
• The app's own bin. Photos, Mail, Notes, and most note-taking and document apps keep their own separate recently-deleted area, typically for 30 days. Something deleted in Photos is not in the system Trash.
• The cloud service's bin — Google Drive, OneDrive, Dropbox, iCloud each have their own, and they're separate again from the local one.
• The email trash and spam folders, if you're looking for an attachment.

Work through all of these before doing anything more technical. It resolves most cases in under a minute.

Cloud services keep more than you think

If the file ever lived in a synced folder, this is your best chance — and it also covers the case people find hardest: a file that wasn't deleted but was overwritten with a worse version.

• Version history. Google Drive, OneDrive, and Dropbox all keep previous versions of a file for a period. Right-click the file in the web interface and look for "Version history" or "Manage versions". This is how you undo "I saved over the good draft."
• Google Docs, Sheets, and Slides keep an unusually detailed revision history — File → Version history → See version history — going back a long way. You can restore any point.
• Deleted-file recovery windows. Most services keep deleted items for around 30 days, sometimes longer, and some offer an admin or support-assisted recovery slightly beyond that. If you're just outside the window, it's worth asking support before giving up.
• Check the web interface, not just the synced folder. Items can exist in the account while being absent locally.

On a phone

• Photos: iPhone → Photos → Albums → Recently Deleted (around 30 days). Google Photos → Library → Bin (around 60 days for backed-up items). Samsung Gallery has its own separate Trash as well — check both the gallery app and Google Photos, because they're independent.
• Files: the Files app on iPhone and most Android file managers have a Recently Deleted folder.
• Messages: recent iOS versions keep a Recently Deleted section in Messages. Otherwise, a message recovered from a backup means restoring the whole backup.
• Backups: if you have an iCloud or Google backup from before the deletion, restoring it will bring the files back — but it replaces the phone's current state, so anything created since that backup is lost. Weigh which set of data matters more before you start.

Be sceptical of phone "recovery apps" in the app stores. Modern phones use encrypted storage and don't grant apps raw access to freed space, so a normal app fundamentally cannot scan for deleted files the way desktop software can. Most of these apps recover only thumbnails and cached copies — which is occasionally useful, but not what they advertise.

Previous versions and backups

• Windows — File History. If it was ever switched on, right-click the folder that held the file → Properties → Previous Versions. Many people have this enabled without knowing.
• Windows — restore from an older backup image, if you made one.
• macOS — Time Machine. Open the folder the file was in, then enter Time Machine and travel back to before the deletion. If you've ever plugged in a Time Machine drive, snapshots may also exist locally on the internal drive even when that external disk isn't connected.
• Check any external drive you've used for backups, even one you'd forgotten about.

Recovery software: when it works

If none of the above worked, scanning software is next. It works by reading the raw drive and reconstructing files whose space hasn't yet been reused.

Where it works well: memory cards, USB sticks, external hard drives, and internal mechanical hard drives — especially after an accidental format or a deletion you noticed immediately.

Rules that determine whether you succeed:

1. Never install the software onto the drive you're recovering from. Install it on a different drive, or run a portable version from a USB stick. Installing onto the target drive is the single most common way people destroy their own files.
2. Never save recovered files back to the same drive, for the same reason. Recover to a different disk.
3. If the drive is failing rather than just erased, image it first. Make a full sector-by-sector copy to another disk, then run recovery against the copy. Every additional read on a dying drive is a risk you don't need to take twice.
4. Expect imperfect results. Recovered files often lose their original names and folder structure, and partially overwritten files come back corrupted. Photos recovered half-overwritten typically show the top portion and grey below.

There are reputable free and paid tools in this category; free ones are usually enough for a straightforward deletion from a hard drive or memory card. Download only from the developer's official site — this is a search category absolutely full of malicious lookalikes preying on people in a panic.

The honest part: why SSD recovery usually fails

Most guides don't tell you this, and it's the most important thing on the page if your computer was made in the last several years.

Solid state drives use a command called TRIM. When you delete a file, the operating system tells the SSD which blocks are no longer in use, and the drive erases them in the background — usually within minutes, as part of routine housekeeping. This is what keeps SSDs fast over time.

The consequence: on a modern SSD with TRIM active, deleted data is genuinely gone, not merely marked free. Recovery software will scan and find nothing, and that isn't a failure of the software — there is nothing left to find.

What this means in practice:

• If the file was on an internal SSD and you deleted it hours ago, recovery is very unlikely. Concentrate entirely on bins, cloud version history, and backups. Don't spend money on recovery software or a service on the strength of an optimistic advert.
• If you noticed within seconds and can shut down immediately, there's a narrow chance — but powering down fast is the only lever you have.
• External SSDs over USB often don't receive TRIM, which makes recovery meaningfully more likely on them than on an internal drive.
• Mechanical hard drives don't do this at all. Recovery odds there remain good, which is why the classic advice still circulates — it was written when hard drives were what everyone had.

Knowing this in advance saves you from paying for a service that cannot succeed, which is a real and common outcome.

When to pay a professional

A data recovery lab is worth it in a narrow set of cases:

• The drive is physically damaged — dropped, clicking, grinding, water-damaged, or not detected at all. Do not run software against it and do not keep power-cycling it; every attempt causes more damage. Labs open drives in clean rooms.
• The data is genuinely irreplaceable — a business's only records, the only photos of someone who has died.

Expect it to be expensive, expect it to take weeks, and choose a firm that offers a free evaluation and charges only on success. Be direct with them about the drive type: a reputable lab will tell you honestly if it's a TRIM-erased SSD and decline the job rather than take your money.

Conversely, don't pay a lab for a straightforward deletion from a working mechanical drive. That's a job free software handles.

Never again

The reason recovery is so unreliable is that it's the wrong layer to solve the problem at. The standard approach is worth the twenty minutes it takes to set up:

• Three copies of anything you'd be upset to lose.
• On two different kinds of storage — for example the computer plus an external drive.
• One of them somewhere else — cloud storage, or a drive at a different address. This is what covers fire, theft, and flooding, which local backups don't.

Two specific points people get wrong:

• Sync is not backup. If you delete a file in a synced folder, it deletes everywhere. Sync protects against device failure, not against mistakes or ransomware. You need actual versioned backups as well.
• Test the restore. An untested backup is a hypothesis. Once, pick a file, restore it, and confirm it opens. People discover their backup was silently broken for two years at exactly the wrong moment.