Photos, passwords, browsing history, saved logins, work documents — your Mac holds years of personal data. Before it goes to a new owner, make absolutely sure none of it goes with it. CleanMachine helps you do it right.
CleanMachine's Sensitive File Finder scans your Desktop, Downloads, Documents, and ~/.ssh for files matching patterns for SSNs, credit card numbers, private keys, API credentials, and more. Find them before the next owner does.
For any files you want gone forever, the File Shredder overwrites content with random data before deletion (3-pass or DOD 7-pass). Standard deletion just removes the reference — the data stays on disk until overwritten. Shredding makes recovery impossible.
If you're selling a Mac with FileVault enabled, the new owner gets encrypted data they can't read. When Apple's "Erase All Content and Settings" destroys the encryption key, every byte on that drive becomes unreadable instantly — much faster and more thorough than any manual wiping. CleanMachine's FileVault view shows your current status and links directly to the setting if it's off.
The Keychain Audit shows what's stored — class counts and any items with empty or unusual account fields. Before wiping, make sure you've noted or exported any passwords you'll need to set up on your new Mac.
Run a Smart Scan to clear caches, logs, and junk before doing the final wipe. A clean Mac is faster for the next owner and means less data sitting on the drive when you erase it.
The final step is always Apple's built-in Erase All Content and Settings (System Settings → General → Transfer or Reset). With FileVault on, this destroys the encryption key and makes every byte of data on the drive cryptographically irrecoverable. CleanMachine helps you prepare — this is the final step you do yourself in System Settings.
Overwrite files before deletion so recovery is impossible. 3-pass (fast) or DOD 7-pass (thorough). Drag-and-drop or use the file picker.
Scans for files containing SSNs, credit card patterns, private keys, and API credentials. Find them before the next owner does.
Verifies full-disk encryption is enabled. With FileVault on, "Erase All Content and Settings" makes data instantly irrecoverable.
Clean up caches, logs, and junk before the final wipe. Leave the next owner with a clean, fast Mac.
CleanMachine helps you find and shred sensitive files before handover. Download free to see what's there, $19.99 once to clean it all up.
macOS 13+ · No subscription · 30-day refund
With FileVault enabled: yes — it destroys the encryption key, making all data cryptographically irrecoverable. Without FileVault: the erasure is less thorough and data may be partially recoverable with forensic tools. Enable FileVault first, then erase — or use CleanMachine's File Shredder on sensitive files before erasing.
On modern Macs with APFS + SSD, file shredding provides meaningful protection against typical recovery tools but can't guarantee forensic-level irrecoverability due to SSD wear leveling. For the strongest protection, enable FileVault and use "Erase All Content and Settings" — that's the Apple-recommended path and it's the most thorough.
Use CleanMachine before erasing — specifically to shred sensitive files and check FileVault status. The final "Erase All Content and Settings" in System Settings is the last step you do after you've dealt with anything important.