Securely erase files with a certificate
Deleting a file usually just unlinks it — the bytes stay on disk until overwritten, and recovery tools can bring them back. The Eraser overwrites a file's bytes first, then removes it, and hands you a signed certificate of what was done.
Open this tool in FileX →How it works
- Open the Eraser tool and grant access to the folder whose contents you want to erase (via the File System Access API in Chrome or Edge).
- Pick an overwrite standard — from a single NIST 800-88 "Clear" pass to multi-pass DoD, Gutmann, and others.
- FileX overwrites each file in place, then deletes it, and generates a certificate (PDF + JSON) recording the files, standard, and passes.
What in-browser erasure can and cannot do
This is a best-effort logical wipe — NIST SP 800-88 "Clear". It defeats ordinary undelete and file-recovery tools. It cannot guarantee the old bytes are physically gone on SSDs and flash, where wear-leveling may keep copies out of the operating system's reach — and the certificate says exactly that. For forensic-grade "Purge", cryptographic erase, whole drives, or servers, use the downloadable FileX Eraser Tool desktop app.
Honest note on multi-pass standards
On modern SSD/flash a single pass is sufficient per NIST 800-88. The multi-pass DoD/Gutmann standards are offered for policy and compliance recognition, not extra real-world security.
Frequently asked questions
Can the file be recovered after erasing?
Not by ordinary undelete tools — the bytes are overwritten before deletion. On SSD/flash, wear-leveling means a physical remnant can theoretically survive; the desktop FileX Eraser Tool offers Purge and cryptographic-erase for those cases.
What browser do I need?
The in-browser Eraser uses the File System Access API, available in Chrome and Edge. The desktop app runs on Windows, macOS, Linux, and servers, offline.
What is the erasure certificate?
A tamper-evident record (PDF + JSON) listing the files erased, the standard used, pass counts, and a SHA-256 integrity hash — identical in format to the one the desktop CLI produces.