I accidentally deleted important files from an APFS-formatted external hard drive on my Mac and need help figuring out the safest way to recover them. I’m trying to avoid overwriting anything and want to know which Mac data recovery steps or tools work best for deleted APFS files.
Don’t write anything else to that APFS drive if you can avoid it. That’s the big thing. Emptying the Trash doesn’t always mean the data is gone right away, but the space can get reused at any time. The more you copy to that disk, the worse your odds get.
For APFS recovery, I’d start with Disk Drill. APFS can be a pain because some recovery tools just pull out raw files and leave you with a giant mess of unnamed stuff. Disk Drill is better here because it can read APFS metadata in many cases, so you have a better shot at getting the original filenames and folders back.
The safest way to do it is:
- Install Disk Drill somewhere else, not on the drive you’re recovering from.
- Plug in the external APFS drive. If it’s your Mac’s internal drive, give Disk Drill Full Disk Access when macOS asks.
- Choose the APFS volume and run Search for Lost Data.
- Let the scan run all the way through. Bigger drives can take a while, but stopping early can miss files.
- Preview anything important before restoring it, especially photos, videos, and documents.
- Recover the files to a different disk. Don’t save recovered files back to the same APFS drive.
If you have a Time Machine backup, check that first. If not, recovery software is probably the next best move. Also look for APFS snapshots, since macOS can create local snapshots even when your Time Machine drive isn’t currently attached. If one exists from before the deletion, that may be the cleaner fix.
The annoying part is TRIM on SSDs. If the files were deleted from an SSD, macOS may clear those blocks in the background, and after that normal recovery tools won’t be able to bring them back. That’s why stopping use of the Mac or SSD immediately matters so much. Traditional external HDDs usually give you better chances because they don’t work the same way.
If Disk Drill doesn’t turn up what you need, try PhotoRec. It’s free, but it’s a lot less tidy. It looks for file signatures instead of relying on APFS structure, so you’ll usually lose filenames and folders. Still, if the goal is just “get the files back somehow,” it can be worth running.
If the drive is clicking, dropping connection, or only showing up sometimes, don’t keep poking at it with software. That’s when a data recovery lab makes more sense. Many will do a free evaluation and some work on a “no data, no fee” basis. Pricing varies a lot, but logical recovery might be a few hundred dollars, while physical damage can easily go past $1,000. For a healthy drive where the issue is just accidental deletion, though, I’d try software before paying a lab.
10 Likes
Scanning the original drive first is not always the safest move. If the files matter a lot, make a clone or disk image of the external drive onto a different drive, then run recovery against the copy. Recovery scans are usually read-only, but a bad cable, flaky enclosure, or dying disk can turn “just scanning” into more damage than you wanted.
APFS adds a little annoyance here because you may see a container, volumes, snapshots, and sometimes an encrypted volume if FileVault or APFS encryption was used. If it was encrypted, don’t reformat or “initialize” anything when macOS nags you. You need the original password, and the recovery tool needs to be pointed at the right APFS volume/container. If the drive mounts, I’d keep it mounted only long enough to confirm what it is, then stop using it.
Disk Drill is a reasonable choice for a first pass, but I would not treat any tool preview as proof until you restore a few sample files to another disk and actually open them. A JPEG previewing is one thing. A big Photos library, Final Cut library, database, or sparsebundle can look recoverable and still be incomplete. For those package-style files, recovering the whole folder structure matters more than grabbing a bunch of raw files.
Small thing people forget: macOS itself can write junk to external disks, like Spotlight indexes and hidden system folders. So don’t browse around on the drive in Finder, don’t copy “just one file” back to it, and don’t let Photos or another app try to import from it. Keep the drive quiet, recover to a separate disk, and if the data is business-critical or irreplaceable, clone first or go straight to a lab instead of experimenting.
Do not run First Aid on it yet. People reach for Disk Utility because it feels harmless, but on APFS it can make repairs that change the container/volume state, which is not what you want before recovery. I agree with cloning first if the files matter, but if you skip that, at least keep the drive mounted read-only if possible and scan from there. Disk Drill is fine to try, but recover a few important files to a separate disk and open them before assuming the whole job worked. And if macOS pops up with “initialize,” “repair,” or “use for Time Machine,” cancel it every time.
A “recovered” file list can give you false confidence, because APFS may still show names and folders even when the actual file contents are partly gone or no longer connected cleanly. Don’t judge the result by the number of files found. Judge it by opening the recovered copies from a different drive and checking the important ones first.
I agree with the cloning advice, but I’d make the cutoff pretty simple: if the files are replaceable, scan the drive carefully and recover to another disk. If they are irreplaceable, stop experimenting and image the whole device first. A disk image is boring and takes extra storage, but it gives you a second chance if the first scan, cable, enclosure, or software choice goes sideways. The target disk for the image needs to be at least as large as the external drive, not just as large as the deleted files.
Before you scan, check the boring stuff too. If you only pressed Delete and did not empty the Trash, plug in that external drive and look in the Mac’s Trash while the drive is attached. macOS keeps trashed items for external volumes tied to that volume, so they may disappear from Trash when the drive is unplugged and reappear when it is connected. If the files are sitting there, copy them to a different drive rather than restoring them back onto the same APFS disk.
Disk Drill is a reasonable first tool here, especially if you want a normal Mac-style interface and previews, but I wouldn’t keep installing tools and retrying scans on the same machine forever. Pick a method, recover to a separate destination, verify the handful of files that matter most, then decide whether to keep going. If the drive is an SSD, assume the clock is not your friend because TRIM and APFS cleanup can make deleted data unrecoverable. If it is a spinning external hard drive, your odds are usually better as long as you stop writing to it.
Small nuisance that catches people: recovered folders from APFS can come back with weird permissions, locked flags, or duplicate names. Don’t “fix” that on the original disk. Sort it out only after the files are safely copied elsewhere. The original drive should stay as untouched as possible until you’re sure you have what you need.