The short answer: Formatted does not automatically mean erased. A quick format removes the file table and root directory, while the actual file contents usually remain in place. A full format is different: since Windows Vista, it has written zeros across the entire volume, dramatically reducing the chances of recovery. Ultimately, however, the outcome depends less on the type of format than on what happened to the device afterwards. Disconnect it, do not write anything to it, and perform recovery from a sector-by-sector image rather than the original device.
Formatting usually happens in one of two situations. Either someone selects the wrong drive letter from a list, or the system itself prompts them to format a drive and they click OK before they have time to read what the message refers to. Within seconds, the process is complete and the drive appears „empty." The following explains what actually happened and how much data may still be recoverable.
First, an overview: what each scenario means
| What happened | What physically changed | Realistic chance |
|---|---|---|
| Quick format on an HDD or SD card | only the file system metadata was overwritten | high, provided nothing else was written |
| Quick format on an SSD | metadata plus, usually, subsequent block deallocation through TRIM | significantly lower, often zero |
| Full format in Windows (Vista and later) | zeros written across the entire volume | virtually none |
| Formatting to a different file system (NTFS → exFAT, etc.) | different metadata layout and cluster size | moderate, but without the original names and folders |
| Formatting followed by normal use | new data overwrites the old data | decreases with every hour of use |
| Windows asks to format the drive, but you did not click | nothing changed | a different scenario (RAW state) — see the final section |
Quick format: what exactly disappears
Microsoft’s documentation for the format command describes the /Q switch plainly: it performs a quick format, deletes the file table and root directory of a previously formatted volume, but does not scan individual sectors for bad areas. That is the full extent of the operation.
In practical terms, the index disappears, not the content. The file system is a directory that says, “the file invoice-2025.pdf starts here and is this long.” A quick format discards that directory and creates an empty one. The data itself is not overwritten at that moment—it simply becomes inaccessible through the original path, and the system considers the entire space available.
That is why recovery software can still find files after a quick format. It searches the raw data for recognisable file headers (%PDF, JPEG headers, Office document structures) and reconstructs files from them. The trade-off is the loss of filenames: without the file table, the original names and folder hierarchy are often lost, leaving you with several thousand files named something like file0001.jpg. A fragmented file—typically a large video or database scattered across the drive—may not be recoverable from its signature at all.
Full format: where the chances truly collapse
The difference between a quick and full format is not merely how long it takes, but what is written during the process.
Microsoft explains this in a separate article about changes to the behaviour of the format command: in Windows Vista and later, a full format writes zeros across the entire disk by default. Windows XP and earlier did not work this way, which is where the widespread myth that „formatting does not erase anything" originated. That is no longer true on modern systems.
There is another difference: unlike a quick format, a full format checks individual sectors. This is why it can take hours on a large drive, and if you allowed it to finish, it covered the entire surface.
After a completed full format on an HDD, there is no point in buying recovery software or bringing us the drive expecting a miracle. The honest answer is that the data was overwritten, and overwritten data cannot be recovered. If you are unsure which format was performed, there is a useful practical clue: a quick format takes only a few seconds, while a full format takes tens of minutes or even hours.
Formatting to a different file system
Situations such as „I only wanted to prepare the card for my camera„ or „the drive reported an error, so I reformatted it from NTFS to exFAT" follow their own logic. The format command supports FAT, FAT32, exFAT, NTFS, and ReFS, each of which stores metadata in different locations and uses a different allocation unit size.
The new file system therefore writes its structures over areas previously occupied by the old file system’s structures. Recovery prospects decline wherever those areas overlap—and those areas usually contain the file table, including filenames and the folder hierarchy. Most of the remaining space containing the files themselves stays untouched, so signature-based recovery may still be worthwhile. However, expect to receive a large collection of unnamed files that will need to be sorted.
SSDs, cards, and TRIM: when formatting ends your chances sooner
On a conventional hard disk drive, deleted or reformatted content physically remains in place until something overwrites it. This is not true of SSDs.
Windows uses a mechanism that Microsoft’s fsutil behavior documentation calls delete notification, better known as TRIM or unmap. The file system tells the storage device which blocks have been released. For NTFS, these notifications are enabled by default unless an administrator disables them. The SSD controller then discards the released blocks and returns zeros when they are read again, regardless of how quickly the user reacts.
The practical consequence is that after formatting an SSD, even seconds work against you. However, this does not automatically apply to every device without spinning platters:
- SSDs inside a computer (both SATA and NVMe) — TRIM is commonly used, so recovery prospects after formatting are the lowest of all scenarios.
- SD and microSD cards — TRIM is typically not passed through a card reader, so data often remains available after a quick format. This is explained in detail in SD card data recovery.
- USB flash drives — these behave similarly to memory cards, although the result depends on the specific controller; the procedure is covered in the article about USB flash drive data recovery.
- External SSDs in USB enclosures — the outcome depends on whether the bridge passes the command through. This cannot be determined in advance without checking.
The documentation also notes another limitation: if a device reports that it does not support TRIM, notifications are not sent to it. For this reason, it is better not to guess about a particular device and instead have its condition checked.
„I formatted it and then used it for a day"
In practice, this is the most common reason why a quick format—a situation with good prospects—turns into permanent data loss.
The format itself marked the space as available. Every subsequent write to that space actually modifies it, overwriting content that was still present. This includes more than deliberate file copying. Data can also be overwritten by processes that run automatically:
- installing an operating system or applications on the newly formatted drive,
- automatic synchronisation by a cloud client downloading content again,
- a backup job writing a new archive to the drive,
- content indexing, restore points, and downloaded updates,
- a camera taking another series of photos on the formatted card,
- drive optimisation (which triggers TRIM on an SSD).
That is why the first step is always the same and has nothing to do with software: stop using the device and disconnect it. If it is a system drive, shut down the computer using the power button and do not boot from it again.
The correct order of steps
- Stop writing to the device. Do not think, „I’ll just save the recovery program there"—the installer will write directly into the free space where your data remains.
- Disconnect the storage device and do not reconnect it to a system that may automatically write to it.
- Create a sector-by-sector image of the entire device on different storage. Imaging reads from the original rather than writing to it, and it is the only operation that should be performed on the original device.
- Perform recovery exclusively from the image. If the first attempt fails, you can try again using a different method while the original remains unchanged.
- Save recovered files to a third storage device, never back to the formatted one.
Anyone who wants to ensure that a similar incident ends with restoring a backup rather than visiting a laboratory can find a suitable backup arrangement in our article about using an external drive for backups under the 3-2-1 rule.
When recovery software is enough—and when the device belongs in a laboratory
A DIY recovery attempt makes sense when all three of the following conditions are met: a quick format was performed, the device is physically healthy (it does not click, reads consistently, and reports the correct capacity), and nothing has been written to it since formatting. The data must not be critical—recovery from an image may be your only good opportunity, and a second attempt could be working with a more degraded state.
DIY attempts do not make sense when:
- the drive makes unusual noises, disappears during reading, or reports an implausible capacity,
- a full format was performed and you need confirmation of whether anything can still be done,
- the device contained data whose loss would bring a company to a halt—accounting records, projects, or databases,
- the device was used for an extended period after formatting and you first need to determine what remains intact,
- you are unsure exactly what happened and want to avoid making matters worse with another attempt.
In a laboratory, work is performed on a sector-by-sector image, searching both for remnants of the original metadata and for files identifiable by their signatures; the two sets of results are then compared. Diagnostics also answer a question you cannot resolve at home: whether the device still contains the original data or only zeros.
For an overview of what makes recovery more expensive, see our disk data recovery price guide. An exact price can only be determined after diagnostics, not merely from the type of format.
Caution: a format prompt is not the same as formatting
Windows may report that a drive needs to be formatted before anyone has changed it—most commonly when the volume is in a RAW state. This is not an instruction to follow, but a prompt you should decline: at that point, the data is usually still intact, and formatting would make the situation worse. This scenario has its own procedure in the article Windows asks to format the drive (RAW): do not click. This article covers situations in which formatting has already taken place.
What to include in your enquiry
It helps us to know what type of device it is (internal HDD, external drive, SSD, SD card, or USB flash drive) and its approximate capacity; whether a quick or full format was performed and how long it took; which file system was used before and which one is present now; what happened to the device after formatting; and, most importantly, what you need recovered as a priority—specific folders, date ranges, or file types.
Keep the device disconnected and contact us or call 775 556 063. We perform diagnostics and recovery in our own laboratory in Brno.
Frequently asked questions
I performed a quick format on my drive—can the data be recovered?
In most cases, yes, provided nothing has been written to the drive since formatting. According to Microsoft’s documentation, a quick format removes the file table and root directory, not the contents of the files. However, the original filenames and folder structure are often not preserved.
What is the difference between a quick format and a full format?
A quick format discards only the file system structure and takes a few seconds. In Windows Vista and later, a full format writes zeros across the entire volume and also checks the sectors, so it takes tens of minutes or even hours. Once a full format is complete, the data has been overwritten.
I formatted an SSD—is recovery still worthwhile?
The chances are significantly lower with an SSD than with a hard disk drive. When blocks are released, Windows sends the storage device a delete notification (TRIM), and the SSD controller discards those blocks; subsequent reads then return zeros. Keep the drive disconnected and have its condition assessed through diagnostics—the outcome cannot be determined conclusively without checking the device.
I formatted an SD card in my camera—can the data be restored?
Cameras and card readers usually perform a quick format, and TRIM is typically not passed through this interface, so the prospects are often good. The crucial point is to stop taking photos on the card—each new series will overwrite some of the original images.
Can I install recovery software directly on the formatted drive?
No. Installing software writes data directly into the free space where recoverable content remains, permanently overwriting some of the files. The program should be installed on another computer or storage device, and recovery should be performed from a sector-by-sector image.