Security Feature

Securely Delete Files.
No Recovery Possible.

CleanMachine's File Shredder overwrites file contents with zeros and random data before deleting โ€” making recovery impossible for most threat models. Available in 3-pass (fast) and DOD 7-pass (thorough). Drag-and-drop interface, no Terminal required.

Download Free โ†’ Unlock Shredder โ€” $19.99

macOS 13+  ยท  Apple Silicon & Intel  ยท  Honest about APFS + SSD limitations

๐Ÿ”ด 3-pass: zeros โ†’ random โ†’ zeros
๐Ÿ›ก๏ธ 7-pass DOD shredding
๐Ÿ“‚ Drag-and-drop or file picker
โœ“ Confirmation before shredding
๐Ÿ”’ Recommends FileVault for true security

File shredding on APFS + SSD:
what works, and what doesn't.

The APFS Copy-on-Write Problem

On modern Macs with APFS (Apple File System) and SSD storage, file shredding has a fundamental limitation that most shredder apps don't tell you about โ€” but CleanMachine does.

APFS uses copy-on-write semantics: when you modify a file, the new data is written to a different location on the SSD, and the old location is marked as free. This means even if CleanMachine overwrites a file's current location, the previous version may still exist at the old physical location.

Additionally, SSDs use wear-leveling technology to distribute writes across the NAND flash. This means the OS doesn't have direct control over which physical cells receive which writes โ€” making it impossible to guarantee that an overwrite reaches the original NAND cell containing the sensitive data.

The honest answer: On a modern Mac (APFS + SSD), file shredding provides a meaningful layer of security against casual recovery tools and typical adversaries โ€” but it cannot provide forensic guarantees against sophisticated attackers with direct NAND access.

When File Shredding Still Makes Sense

For most realistic threat models, CleanMachine's shredder is effective:

  • Selling or donating a Mac (use Erase All Content and Settings instead โ€” more thorough)
  • Deleting files from a machine before someone else uses it temporarily
  • Removing sensitive files when you're confident previous versions don't need protection
  • Compliance with basic data security policies that require overwrite-before-delete

When FileVault Is the Real Answer

For true forensic resistance, FileVault full-disk encryption is far more effective than file shredding on APFS/SSD. When FileVault is enabled:

  • All data on disk is encrypted with your password
  • Even if NAND cells are physically read, the data is unintelligible without the key
  • When you erase an encrypted volume, destroying the key makes all data irrecoverable instantly

CleanMachine's FileVault view checks your encryption status and opens directly to the FileVault settings pane if it's off.

The 3-Pass and 7-Pass Options

3-Pass: zeros โ†’ random data โ†’ zeros. Fast and sufficient for most use cases. Works well on mechanical hard drives (where it is effective) and provides a reasonable layer of protection on SSDs against basic recovery tools.

7-Pass DOD: follows the DoD 5220.22-M standard with 7 passes of alternating data patterns. Slower and causes more SSD wear โ€” appropriate for high-sensitivity compliance scenarios.

โœ“ Download free, shredder in $19.99 unlock

Secure deletion, drag-and-drop simple.

Download CleanMachine free to explore all features. The File Shredder (and every other cleaning feature) unlocks with the one-time $19.99 purchase.

macOS 13+ ยท No subscription ยท 30-day money-back guarantee

Common questions.

Is 3-pass secure enough for most people?

For the vast majority of use cases โ€” deleting sensitive documents you don't want casual recovery of โ€” 3-pass is more than sufficient. The 7-pass option is for users with specific compliance requirements or higher security needs who accept the additional SSD wear.

Should I use File Shredder or just erase the whole Mac?

If you're selling or passing on a Mac, use macOS "Erase All Content and Settings" (System Settings โ†’ General โ†’ Transfer or Reset). This erases the FileVault key, making all data on the encrypted volume cryptographically irrecoverable โ€” and it's much faster and more thorough than shredding individual files. File Shredder is for targeted deletion of specific sensitive files on a Mac you're keeping.

Does it work on external drives or USB drives?

Yes โ€” you can drag any file to the shredder regardless of which volume it's on. Note that the APFS/SSD limitations discussed above apply only to internal APFS-formatted SSDs; external mechanical hard drives don't have these limitations and benefit fully from file shredding.

Delete sensitive files the right way.

3-pass or 7-pass DOD. Honest about what it can and can't do. $19.99 once.

Get CleanMachine โ€” $19.99 โ†’