Recover Permanently Deleted Files with Windows File Recovery
Yes, you can often recover permanently deleted files with Windows File Recovery, a free command-line tool from Microsoft for Windows 10 and 11. It works on files removed from the Recycle Bin, deleted via Shift+Delete, or lost after a format or corruption, provided the disk space hasn’t been overwritten. This guide explains how the tool works, how to use it, and what to do when it fails.
What Is Windows File Recovery?
Windows File Recovery (WinFR) is a command-line utility published by Microsoft in 2020. It is designed to recover files from NTFS, FAT, exFAT, and ReFS file systems. Unlike typical “undelete� programs, it uses multiple recovery modes that scan the disk at a low level to find file signatures and metadata. It does not have a graphical interface; you run it from Command Prompt or PowerShell with specific flags. The tool is free, but it requires administrative rights and is only available from the Microsoft Store.
How Does Windows File Recovery Work?
The program uses three main recovery modes: Default, Segment, and Signature. Each mode targets different file systems and scenarios.
- Default mode uses the Master File Table (MFT) on NTFS drives to locate deleted files. It works when the file was recently deleted and the MFT entry is still intact.
- Segment mode also works on NTFS but scans for file segments, which helps when the MFT entry is partially overwritten. It is slower but more thorough.
- Signature mode scans the entire drive for file headers (signatures) of known file types. This works on FAT, exFAT, and ReFS and is useful when the file system is damaged or the drive was formatted.
All modes require that the deleted file’s data clusters have not been overwritten by new data. If you continue using the drive after deletion, the chances of recovery drop quickly.
How to Use Windows File Recovery (Step-by-Step)
Before you start, stop using the drive where the file was deleted. Install the tool from the Microsoft Store, then open Command Prompt as Administrator. The basic syntax is:
winfr source-drive: destination-drive: [/mode] [/switches]
- Open the Microsoft Store, search for “Windows File Recovery,� and install it.
- Press Win + X and select Terminal (Admin) or Command Prompt (Admin).
- Type
winfr C: D:to recover files from C: to D:. Use a different drive for the destination to avoid overwriting the deleted data. - Add the mode and switches. For example, to recover JPEG files from an NTFS drive using signature mode:
winfr C: D: /r /n *.jpg. - Wait for the scan to finish. The tool will create a folder on the destination drive (e.g.,
D:\Recovery_20250101_123456) with the recovered files.
If you don’t know the file type, use winfr C: D: /x to recover all files in signature mode. For NTFS, /n lets you specify a file name or extension, like /n \Users\YourName\Documents\report.docx.
Choosing the Right Mode and Switches
Picking the wrong mode can waste hours or prevent recovery. Here is a quick guide:
- NTFS + recent deletion: Use default mode (
winfr C: D:). - NTFS + corrupted or formatted drive: Use segment mode (
/r) or signature mode (/x). - FAT/exFAT drives (USB, SD cards): Use signature mode (
/x). - Know the file extension: Add
/n *.jpgto limit the scan. - Know the file path: Add
/n \Users\Name\Documents\file.docxto target a specific folder.
You can combine switches. For example, winfr C: D: /r /n *.pdf /n *.docx recovers both PDF and Word files in segment mode. The tool also supports /y to recover “deleted� files that are still partially present, and /k to recover files that have been overwritten but still have remnants (NTFS only).
Common Problems and What to Do
Many users report that Windows File Recovery “doesn’t work.â€� Here are the most frequent issues and fixes:
- “The system cannot find the path specified.� You must run the command as Administrator. Right-click Command Prompt and choose “Run as administrator.�
- “The parameter is incorrect.� Check that the source and destination drives are correct and that the destination has enough free space. The destination must be a different drive.
- Recovery is too slow. Signature mode on a large drive can take hours. Limit the scan with
/n *.extto reduce the time. - Files are recovered but corrupted. This happens when the file was partially overwritten. Try a different mode (e.g., segment instead of default) or use a third-party tool with more advanced carving.
- Tool does not support the file system. Windows File Recovery supports NTFS, FAT, exFAT, and ReFS. For other file systems (e.g., ext4), you need a different tool.
If the tool cannot find your files, stop using the drive immediately and consider a professional recovery service, especially if the data is critical.
Comparison with Other Recovery Options
Windows File Recovery is not the only option. Here is how it compares with common alternatives:
- Recycle Bin: The easiest method, but only works if you haven’t emptied it. Right-click the file and select “Restore.â€�
- File History / Backup: If you have a backup, restore from it. This is the most reliable method and always preferred.
- Third-party GUI tools (e.g., Recuva, TestDisk): These often have a friendlier interface and may offer more advanced features like deep scans and preview. Some are free, others are paid. They can work on file systems that Windows File Recovery doesn’t support.
- Professional data recovery: For physically damaged drives or severe corruption, a professional service can open the drive in a cleanroom and recover data, but this is expensive.
Windows File Recovery is a good free starting point, but it is not the most user-friendly. If you are not comfortable with the command line, a GUI tool may be easier.
Safety Tips and Limitations
Recovery is never guaranteed. The most important rule is: stop using the drive immediately after deletion. Every new file, even a temporary one, can overwrite the deleted data. Also, do not install Windows File Recovery on the same drive you are trying to recover from; install it on another drive or use a portable version.
Windows File Recovery cannot recover files from a drive that has been securely wiped (e.g., with a data-shredding tool) or from an SSD after TRIM has been executed. On SSDs, TRIM immediately marks deleted blocks as unused, making recovery nearly impossible. For SSDs, you should rely on backups.
Finally, the tool does not preserve the original file names in signature mode; it names recovered files based on their file type and a number. You may need to manually identify the files.
Frequently Asked Questions
Can I recover files after emptying the Recycle Bin?
Yes, Windows File Recovery can often recover files emptied from the Recycle Bin, as long as the disk space hasn’t been overwritten. Use the appropriate mode for your file system (default or segment for NTFS, signature for FAT/exFAT).
Does Windows File Recovery work on SSDs?
It can work, but the chances are much lower because SSDs use TRIM, which permanently erases deleted data blocks. If you have an SSD, you should immediately stop using it and try recovery, but expect limited success.
How long does a recovery take?
It depends on the drive size, mode, and number of files. A small USB drive in signature mode might take 10 minutes, while a 1TB HDD in segment mode could take several hours. You can speed it up by specifying file extensions with /n.
Is Windows File Recovery safe to use?
Yes, it is a Microsoft official tool. It only reads from the source drive and writes to the destination drive, so it does not modify the source data. However, you should always use a different destination drive to avoid overwriting.
What if Windows File Recovery doesn’t find my file?
If the tool fails, try a different mode (e.g., switch from default to segment or signature). If that still fails, the data may be overwritten or the drive may be physically damaged. Consider using a third-party tool or a professional service.
Related
Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.