Secure Data Destruction

Overview

How It Works

A simple 4-step process to securely destroy data on any computer

Create Boot Media

Download our bootable ISO or USB image below. Write it to a USB drive or burn it to a CD/DVD. This creates a portable tool you can use on any computer.

Boot the Computer

Insert the USB/CD into the target computer and boot from it. You may need to press F12, F2, or Del during startup to access the boot menu and select your media.

Select Wipe Method

Choose your preferred data destruction method from the menu. Options range from quick single-pass erasure to DoD 7-pass or Gutmann 35-pass for maximum security.

Get Certificate

Once complete, you'll receive a certificate of destruction with a unique verification code. This can be verified online for audit and compliance documentation.

Step 1

Download Boot Media

Choose the format that works best for your needs. All options contain the same software.

ISO Image

Best for CD/DVD burning or mounting as virtual media in VMs and server management consoles (iLO, iDRAC, etc.)

HTTPS Enabled • 894 KB

USB Image

Raw disk image for USB flash drives. Write directly to the drive using dd (Linux/Mac) or Rufus (Windows).

HTTPS Enabled • 400 KB

EFI Binary

For modern UEFI systems. Copy to a FAT32-formatted USB drive as /EFI/BOOT/BOOTX64.EFI

HTTPS Enabled • 1.1 MB

How to Create Bootable Media

USB Drive on Linux/Mac: Open Terminal and run: sudo dd if=ipxe.usb of=/dev/sdX bs=4M status=progress
Replace /dev/sdX with your USB drive (use lsblk to find it). This will erase the USB drive.
USB Drive on Windows: Download Rufus (free), select the ISO file, choose your USB drive, and click Start. Use "DD Image" mode if prompted.
CD/DVD: Right-click the ISO file and select "Burn disc image" (Windows) or use Disk Utility (Mac). Any CD/DVD burning software will work.
Virtual Machine: Attach the ISO as a virtual CD/DVD drive in your VM settings (VMware, VirtualBox, Hyper-V, etc.)
Server Remote Console (iLO/iDRAC): Mount the ISO as virtual media through your server's management interface, then boot from virtual CD.

Step 3

Available Wipe Methods

Choose the appropriate method based on your security requirements and available time

Quick Erase

Writes zeros to the entire drive once. Fast but provides basic security. Suitable for non-sensitive data or when time is critical.

1 Pass Fastest

Recommended

DoD 5220.22-M

US Department of Defense standard. Writes patterns of zeros, ones, and random data. Widely accepted for compliance requirements.

3 Passes Compliant

DoD 5220.22-M ECE

Enhanced version with 7 passes for highly sensitive data. Exceeds standard DoD requirements. Used by government and defense contractors.

7 Passes Enhanced

Gutmann Method

Peter Gutmann's 35-pass method designed for older magnetic media. Maximum theoretical security but very time-consuming.

35 Passes Maximum

Which method should I choose?

For most business and personal use, DoD 5220.22-M (3-pass) provides excellent security and is widely accepted for compliance. It balances thoroughness with reasonable completion time. Quick Erase is fine for non-sensitive equipment being recycled internally. The 7-pass and 35-pass methods are primarily for organizations with specific regulatory requirements or handling classified data.

Step 4

Certificates of Destruction

Verifiable proof of secure data destruction for compliance and audit purposes

What's Included

Each certificate includes:

Unique certificate number
Verification code for online validation
Device serial number and MAC address
Drive model and serial number
Wipe method used and number of passes
Start and completion timestamps
SHA-256 verification hash

Verify & Download Certificate

After a successful wipe, you'll receive a verification code displayed on screen. Create an account and verify your certificate to download an official PDF:

Verify Certificate

Enter your verification code and device serial number to authenticate and download your official Certificate of Data Destruction.

Sample Certificate of Data Destruction

Advanced

Network Boot (iPXE)

For IT professionals with existing PXE infrastructure

If you already have an iPXE environment or want to chain-load from your existing PXE server, use this command to access the ITAD Tools boot menu:

                            iPXE Command (HTTPS)
                            chain https://www.itadtools.com/pxe/boot.ipxe
                        

Secure by default: Our boot images include full HTTPS/TLS support. All communication with itadtools.com is encrypted. The target computer will securely connect to register the device, download the wipe environment, and report completion status.

HTTP fallback: If your iPXE build doesn't support HTTPS, you can use: chain http://itadtools.com/pxe/boot.ipxe

Important: Data Destruction is Permanent

Once a wipe begins, the data cannot be recovered. This process is designed to be irreversible. Before proceeding, ensure you have:

Backed up any data you need to keep
Verified you're wiping the correct device
Obtained any necessary approvals from data owners
Allowed sufficient time for the wipe to complete (may take several hours for large drives with multi-pass methods)

Support

Frequently Asked Questions

Does this work on SSDs?

Yes. The software works on both traditional hard drives (HDDs) and solid-state drives (SSDs). For SSDs, the wipe overwrites all accessible sectors. Note that some SSD controllers may have reserved areas that standard wipe methods cannot reach - for maximum SSD security, consider using the drive manufacturer's secure erase utility in addition to our software.

How long does a wipe take?

It depends on the drive size and wipe method. A quick single-pass wipe of a 500GB drive typically takes 1-2 hours. A 3-pass DoD wipe takes 3-6 hours. The 35-pass Gutmann method can take 24+ hours for large drives. SSDs are generally faster than HDDs.

Does the computer need internet access?

Yes. The boot media connects to itadtools.com to download the wipe environment and report results. This enables certificate generation and verification. The computer needs a working Ethernet connection (WiFi is not supported in the boot environment).

Can I wipe multiple drives at once?

The software will detect and wipe all internal drives in the system. You'll see a list of detected drives before the wipe begins. All drives are wiped using the same method you select.

Is this compliant with HIPAA/GDPR/PCI-DSS?

Our DoD 5220.22-M wipe method meets or exceeds the data sanitization requirements of most regulatory frameworks including HIPAA, GDPR, PCI-DSS, and SOX. The generated certificates provide documentation for compliance audits. Always verify specific requirements with your compliance officer.

What if the wipe is interrupted?

If power is lost or the process is interrupted, the wipe will be incomplete and the data may be partially recoverable. No certificate will be issued. You'll need to restart the wipe process from the beginning. We recommend using a UPS for critical wipes.