Secure Empty Trash on a Mac: Where It Went and What Works Now

Quick answer: Secure Empty Trash no longer exists on a Mac. Apple removed it in OS X El Capitan because it could not guarantee secure deletion on flash storage, which every current Mac uses. The replacement is FileVault encryption, plus Erase All Content and Settings when the Mac leaves your hands.

You remember the option. Finder > Secure Empty Trash, and your files were overwritten before they left. Then one day it wasn't there.

It didn't move to another menu, and there is no hidden setting that brings it back. Apple took it out on purpose, and the reason explains how deleting works on a Mac now.

What happened to Secure Empty Trash on a Mac?

Apple removed it in OS X El Capitan (10.11) in 2015, as a security fix. The El Capitan security notes list it under Finder as CVE-2015-5901: "Secure Empty Trash" may not securely delete files placed in the Trash. Apple's description says there was "an issue in guaranteeing secure deletion of Trash files on some systems, such as those with flash storage."

The fix was blunt. Apple addressed the issue "by removing the 'Secure Empty Trash' option." A feature that promised your files were gone, but couldn't keep that promise on SSDs, was worse than no feature at all.

Plenty of guides still describe the Command-click method or an "Empty Trash securely" setting in Finder preferences. Those steps are for Macs running OS X Yosemite or earlier. On anything newer, the menu item simply isn't there.

Why doesn't overwriting work on an SSD?

Because an SSD decides where data physically goes, not the Mac. A hard disk writes new data over the exact spot the old file occupied. An SSD's controller spreads writes across its flash chips to stop any one area wearing out, so "overwrite this file" often lands somewhere else and leaves the original blocks intact for a while.

Researchers at the University of California, San Diego tested this in a 2011 paper, Reliably Erasing Data From Flash-Based Solid State Drives. Their conclusion was direct: "none of the existing hard drive-oriented techniques for individual file sanitization are effective on SSDs."

Secure Empty Trash was exactly that kind of technique: overwrite one file several times, then delete it. On the storage inside every current Mac, the overwriting part couldn't be trusted.

Can you still securely delete files on a Mac with Terminal?

Not with the old commands. Older guides point to srm, the secure remove tool, and to rm -P, which used to overwrite a file before deleting it. Neither does that job on a current Mac.

• srm is gone. It was removed from macOS years ago (the CIS benchmark for macOS 10.12 dates it to Sierra), and typing it in Terminal on macOS Tahoe returns "command not found".
• rm -P does nothing extra. On macOS Tahoe the rm manual page says of -P: "This flag has no effect. It is kept only for backwards compatibility." It deletes the file like plain rm.

Third-party builds of srm still float around, but they run into the same SSD problem as the Finder option did. Treat any app or script promising to "shred" single files on an SSD with suspicion, especially one that also wants Full Disk Access.

What should you use instead of Secure Empty Trash?

FileVault. With FileVault on, everything on your startup disk is encrypted with a key tied to your login password. A deleted file's leftover blocks are encrypted gibberish to anyone who doesn't have that password.

Apple's FileVault guide shows how to turn it on in System Settings > Privacy & Security > FileVault. Apple's Disk Utility guide recommends the same for SSDs, suggesting you "consider turning on FileVault encryption when you start using your SSD drive."

On a Mac with Apple silicon or a T2 chip, the internal storage is encrypted even with FileVault off. Apple's Platform Security guide explains that the key is then protected only by the hardware, so anyone who gets into the Mac itself gets the data. FileVault adds your password to that lock, which is the part that matters if the laptop is stolen.

For everyday deleting, emptying the Bin is enough once FileVault is on, because the disk is protected if the Mac is lost or stolen. It won't protect files from malware or from someone using your Mac while you're logged in. Our guide to what happens when you delete a file on a Mac covers what the Bin and Empty Bin actually do.

How do you securely erase a Mac before selling it?

Use Erase All Content and Settings. On a Mac with Apple silicon, or an Intel Mac with a T2 chip running macOS Monterey or later, Apple's Erase Assistant guide puts it in System Settings > General > Transfer or Reset.

It erases all volumes and all user accounts, signs you out of iCloud and turns off Find My and Activation Lock. Because the storage is encrypted, erasing the keys is enough to make the old data unreadable, with no overwriting pass. Apple's reset guide covers older Macs, which need Disk Utility and a reinstall instead.

External drives are different. Apple's Disk Utility erase guide says that "with a solid-state drive (SSD), secure erase options are not available in Disk Utility." For an old spinning hard disk, the Security Options button in the erase dialogue still offers multi-pass overwrites. For an external SSD, encrypt it from the start and erase it when you're done.

Is a file gone once you empty the Bin?

It is gone from Finder, not always from the disk. Emptying the Bin removes the file's entry, and the space is marked free. On an unencrypted external hard disk, recovery software can sometimes find the data until something overwrites it.

Delete Immediately isn't a secure erase either. Option-Command-Delete skips the Bin, but it removes the file the same way emptying the Bin does. And a copy can survive elsewhere: in Time Machine backups and local snapshots, or in iCloud Drive's Recently Deleted.

Our guide to recovering deleted files on a Mac covers when that works. On an encrypted Mac, the same leftover blocks are unreadable without your password, which is the whole point.

Deleting sensitive files properly, in order

1. Turn on FileVault in System Settings > Privacy & Security, and keep the recovery key somewhere that isn't the Mac.
2. Delete the file and empty the Bin. With FileVault on, the leftovers are protected if the Mac is lost.
3. Check your backups and iCloud. Time Machine snapshots and iCloud Drive's Recently Deleted can still hold a copy.
4. Encrypt external drives before you put anything sensitive on them.
5. Use Erase All Content and Settings before the Mac is sold, traded in or given away.

A cauldron, not a shredder

If you like your deleting with a bit more ceremony, Spellbin is our own small paid Mac app: a pixel-art cauldron that sits in the Dock beside the Bin. Drop a file on it and a green flame carrying the file's thumbnail rises out and dissolves. By default the file goes to the real Bin underneath, so Put Back still works.

To be clear about what it isn't: Spellbin's Dissolve forever mode deletes outright, like Delete Immediately, but it doesn't overwrite anything. It is a nicer way to send files off, not a secure erase. FileVault does that job. If a cauldron still appeals, download Spellbin.

On a modern Mac, secure deletion is not something you do to a file. It is something you set up once, with FileVault.

Frequently Asked Questions

Why did Apple remove Secure Empty Trash?

Apple removed Secure Empty Trash in OS X El Capitan because it could not guarantee secure deletion on some systems, such as Macs with flash storage. Apple's security notes list it as CVE-2015-5901 and say the issue was fixed by removing the option. Every current Mac uses flash storage, so it never came back.

How do I securely empty the Bin on a Mac?

The macOS Bin has no secure empty option on current versions. Turn on FileVault instead, then empty the Bin as normal. With FileVault on, the deleted file's leftover data is encrypted and unreadable without your password. To securely erase the whole Mac, use Erase All Content and Settings.

Does srm still work on macOS?

The srm command is not included in current macOS. Typing srm in Terminal on macOS Tahoe returns "command not found", and rm -P, which once overwrote files, now has no effect. Third-party versions exist, but single-file overwriting is unreliable on SSDs, so FileVault is the better protection.

Is emptying the Trash on a Mac permanent?

Emptying the Bin on a Mac permanently removes files from Finder, and Put Back no longer works. On an unencrypted hard disk, recovery software can sometimes find the data until it is overwritten. On a Mac with FileVault on, leftover data is encrypted, and Time Machine backups may still hold a copy.

Do I need FileVault on an Apple silicon Mac?

An Apple silicon Mac encrypts its internal storage even with FileVault off, but the key is then protected only by the hardware. Turning FileVault on ties the key to your login password, so someone with the Mac but without your password can't read the disk. It is worth turning on for any laptop.

Final Takeaways

• Secure Empty Trash is gone for good. Apple removed it in El Capitan because it didn't work on flash storage.
• srm and rm -P won't help. One is missing and the other does nothing extra on current macOS.
• Turn on FileVault. It protects deleted data if the Mac is lost or stolen.
• Erase All Content and Settings is the secure erase for a Mac you're passing on.