LinuxCommandLibrary

wipe

Securely erase files from storage devices

SYNOPSIS

wipe [options] file1 file2 ... directory1 directory2 ...

PARAMETERS

-q
    Quiet mode; suppress most output.

-r
    Recursively wipe directories.

-f
    Force; disable confirmation prompts and continue even if errors occur.

-i
    Interactive; prompt for confirmation before wiping each file or directory.

-c
    Character to use for writing over the file. The default is 0.

-Q
    Use quick mode. A very fast wiping technique (write one pass with random data).

-V
    Show version information and exit.

-h
    Show help message and exit.

DESCRIPTION

The wipe command is a command-line utility designed to securely erase files and directories from storage devices.
It overwrites the data multiple times with different patterns to make data recovery extremely difficult, if not impossible. Unlike a simple deletion, which only removes the file's entry from the file system's index, wipe physically alters the data stored on the disk.
This is particularly important when dealing with sensitive information that needs to be permanently removed to prevent unauthorized access. Wipe supports various overwriting methods, from simple single-pass overwrites to more complex multi-pass algorithms based on the Gutmann method, ensuring a high level of data security.
While disk encryption provides security at rest, wipe handles the case when you need to decommission a device or securely delete individual files beyond recovery. Using wipe is a proactive measure to protect your data and prevent potential data breaches.

CAVEATS

Wipe only works on filesystems where the operating system has direct access to the underlying storage.
It may not be effective on solid-state drives (SSDs) due to wear leveling algorithms.
Data can be still recoverable using advanced techniques even after using wipe.

SSD CONSIDERATIONS

Due to wear leveling and other complexities of SSDs, standard wiping methods may not be fully effective. Overwriting data might not consistently write to the exact physical location where the original data resided. Consult your SSD manufacturer's documentation for secure erasure tools or consider using full disk encryption.

SECURITY CONSIDERATIONS

While wipe can significantly reduce the likelihood of data recovery, it is not a guaranteed solution.
Sophisticated data recovery techniques may still be able to recover remnants of the original data.
For extremely sensitive data, physical destruction of the storage device may be the most secure option.

HISTORY

The wipe command has been available for many years as a tool for ensuring data security.
Its development was driven by the need to securely erase sensitive data from magnetic storage devices before disposal or reuse.
Over time, the command has been refined and improved to incorporate various overwriting algorithms to increase the difficulty of data recovery.
While modern storage technologies like SSDs present new challenges for secure deletion, wipe remains a useful tool, particularly for older hard drives where it provides a reasonable level of data security.

SEE ALSO

shred(1), rm(1)

Copied to clipboard