FileX › Tools › Securely erase files with a certificate
100% client-side · no upload

Securely erase files with a certificate

Deleting a file usually just unlinks it — the bytes stay on disk until overwritten, and recovery tools can bring them back. The Eraser overwrites a file's bytes first, then removes it, and hands you a signed certificate of what was done.

Open this tool in FileX →
Free · runs 100% in your browser · no upload, no account

How it works

  1. Open the Eraser tool and grant access to the folder whose contents you want to erase (via the File System Access API in Chrome or Edge).
  2. Pick an overwrite standard — from a single NIST 800-88 "Clear" pass to multi-pass DoD, Gutmann, and others.
  3. FileX overwrites each file in place, then deletes it, and generates a certificate (PDF + JSON) recording the files, standard, and passes.

What in-browser erasure can and cannot do

This is a best-effort logical wipe — NIST SP 800-88 "Clear". It defeats ordinary undelete and file-recovery tools. It cannot guarantee the old bytes are physically gone on SSDs and flash, where wear-leveling may keep copies out of the operating system's reach — and the certificate says exactly that. The downloadable FileX Eraser desktop app does the same Clear-class wipe, but on any folder on the machine and with no browser needed — useful on servers. Neither performs "Purge"; for that you need firmware-level tooling from a drive-erasure vendor.

Honest note on multi-pass standards

On modern SSD/flash a single pass is sufficient per NIST 800-88. The multi-pass DoD/Gutmann standards are offered for policy and compliance recognition, not extra real-world security.

Frequently asked questions

Can the file be recovered after erasing?

Not by ordinary undelete tools — the bytes are overwritten before deletion. On SSD/flash, wear-leveling means a physical remnant can theoretically survive, and no software running through the operating system can rule that out — the desktop app included. Guaranteeing it needs firmware-level "Purge" from a drive-erasure vendor, or destroying the drive.

What browser do I need?

The in-browser Eraser uses the File System Access API, available in Chrome and Edge. The desktop app runs on Windows, macOS, Linux, and servers, offline.

What is the erasure certificate?

A tamper-evident record (PDF + JSON) listing the files erased, the standard used, pass counts, and a SHA-256 integrity hash — identical in format to the one the desktop app produces. You can optionally sign it with your FileX ID (ML-DSA-65) for forge-resistant proof of authorship.

Related tools

Verify an erasure certificateRemove hidden metadata from a PDFRemove EXIF metadata and GPS from photos