There is no single best way to destroy data. There is a right method for each device, and the wrong one can leave data behind or scrap value needlessly. Wiping, degaussing and shredding each do a specific job on specific media. This guide compares them plainly, so you can see which suits what, and how to choose the right one for your business.
It depends on three things: the type of storage, whether you want to reuse the device, and how sensitive the data is. Software wiping destroys data while keeping the device usable, so it suits equipment you want to resell, but it must match the media. Degaussing erases magnetic hard drives with a strong magnetic field, and does nothing on solid-state drives. Physical shredding destroys the drive itself and works on any media, but ends the asset's life. There is no universally best method; there is the right one for each device. A good process uses more than one: certified wiping to a recognised standard such as NIST 800-88 for reusable equipment, and physical destruction for drives that cannot be verifiably wiped or that held the most sensitive data. Every method should end with a certificate. See data destruction services for how they are applied.
The reason this comparison matters is that the wrong choice fails quietly. Degaussing an SSD looks like a completed job but leaves the data intact. Shredding everything is secure but throws away resale value that a wipe would have preserved. Matching the method to the media and the goal is what gets you both security and value, which is the whole point. This guide walks through each method, what it suits, and the factors that decide between them.
The fastest way to choose is to see how each method behaves across the things that matter.
| Software wiping | Degaussing | Physical shredding | |
|---|---|---|---|
| How it works | Overwrites data, or issues a sanitise or crypto-erase command | Applies a strong magnetic field to erase the drive | Physically destroys the drive into small particles |
| Works on hard drives (HDD) | Yes | Yes | Yes |
| Works on solid-state (SSD) | Only with a verified SSD sanitise or crypto-erase | No, flash is not magnetic | Yes, at a smaller particle size |
| Device reusable after? | Yes | No, it destroys the drive electronics | No |
| Value recovery possible? | Yes, the drive can be resold | No | No |
| Best for | Reusable equipment you want to resell | Bulk magnetic hard drives and tapes past reuse | Any media past reuse, or the most sensitive data |
Read across the rows and the trade-offs are clear. Wiping is the only method that preserves the device for reuse, so it is the one that lets you recover value, but it has to match the media, particularly for SSDs. Degaussing is effective and fast on magnetic media but useless on flash and destructive to the drive. Shredding is the universal fallback that works on anything, at the cost of ending the asset. No single column wins outright, which is exactly why a real disposal blends them.
The only method that destroys the data while keeping the device usable, which is what makes value recovery possible.
Software wiping destroys the data on a drive while leaving the hardware intact and reusable. For a traditional hard drive that means overwriting the data, and for a solid-state drive it means a verified cryptographic erase or the drive's own firmware sanitise command, because a simple overwrite is not reliable on flash. Done to a recognised standard such as NIST 800-88 and verified, wiping renders the data unrecoverable, and because the device still works, it can be refurbished and its value recovered through buyback. This is the method of choice for recent, working equipment, where destroying the drive physically would throw away real resale value for no additional security. The one thing wiping demands is that the method matches the media: the reliable route for an SSD is different from the one for a hard drive, which our SSD data destruction guide covers in detail.
Fast and effective on magnetic media, and completely ineffective on flash. Knowing the difference is everything.
Degaussing erases a magnetic storage device by exposing it to a strong magnetic field, which scrambles the magnetic domains that hold the data and renders it unrecoverable. It is quick and thorough on the media it suits: traditional hard drives and magnetic tapes. It also destroys the drive's electronics in the process, so a degaussed drive cannot be reused, which is fine when the drive is past value. The critical limitation is that degaussing does nothing to solid-state drives, because flash memory stores data electrically, not magnetically, so there is no magnetic domain for the field to disturb. Applying a degausser to an SSD produces a drive that looks processed but retains all its data, which is one of the most dangerous mistakes in data destruction. Degaussing has a clear place, for bulk magnetic drives and tapes, but only when you are certain the media is magnetic. Our explainer on what degaussing is goes deeper.
The universal method. It works on any media, ends the asset, and its only variable is particle size.
Physical shredding destroys a drive by breaking it into small particles, so the storage medium itself, the platters of a hard drive or the flash chips of an SSD, is physically destroyed. It is the most universally reliable method, because it does not depend on the media being magnetic or on a sanitise command succeeding; a destroyed chip cannot be read. The one variable that matters is particle size. Hard-drive platters can be reduced at a larger particle size, but SSD flash chips are small, so an SSD must be shredded finer to be certain every chip is destroyed. A shredder set for hard drives can leave SSD chips intact, so the equipment and the particle size have to suit the media. Shredding ends the asset, which is why it is reserved for drives past reuse, drives that cannot be verifiably wiped, or the most sensitive data where physical destruction gives the greatest assurance. It corresponds to the Destroy level of NIST 800-88.
Four questions settle which method a given device needs. In practice a mixed fleet uses more than one.
Start with the media, then the goal. The path leads to the method that protects the data and recovers value where it exists.
A working fleet typically uses wiping for reusable drives and shredding, or degaussing for magnetic media, for the rest.
The four factors are, in order: what media is it, do you want to reuse it, how sensitive is the data, and how much of it is there. Media comes first because it rules methods in or out, degaussing is only for magnetic drives, and SSDs need a wipe or shred designed for flash. Reuse decides whether wiping is on the table, since it is the only method that preserves value. Sensitivity pushes the most critical data toward physical destruction for maximum assurance. And volume shapes the practicalities: a large batch of identical magnetic drives may suit degaussing, while a mixed fleet is handled device by device. The upshot is that a real disposal is rarely one method; it is the right method applied to each device, which is how you protect the data on everything while recovering value where it exists.
The recognised standard frames destruction not as one technique but as levels of assurance. It is a useful lens.
The value of the NIST 800-88 framework is that it stops the argument about which method is "best" and reframes it as which level of assurance a given piece of data needs. Clear, purge and destroy are levels, not brands, and the right one depends on the sensitivity of the data and what will happen to the device. Reusable equipment holding ordinary business data may need a purge-level wipe; a drive that held the most sensitive records, or that will not be reused, is destroyed. A good provider does not push a single method; it selects the level appropriate to each device and documents which was applied, with a certificate for every one. That is what turns a method into proof.
The questions people ask most when deciding how to destroy their data.
Both are secure when done correctly; they suit different situations. Certified wiping to a recognised standard renders data unrecoverable while keeping the device usable, so it suits equipment you want to resell. Shredding physically destroys the drive and gives the highest assurance, but ends the asset. For the most sensitive data, or drives past reuse, shredding is preferred; for reusable equipment, verified wiping protects the data and preserves the value.
Both work on magnetic hard drives and both destroy the drive. Degaussing is fast for bulk magnetic drives and tapes; shredding gives visible physical destruction and works on any media. The important caveat is that degaussing does nothing to solid-state drives, so if any of your drives are SSDs, they must be wiped with an SSD method or shredded, never degaussed. When in doubt about the media type, shredding is the safe universal option.
Because degaussing only works on magnetic media. Solid-state drives store data in flash memory, which is not magnetic, so a degausser has no effect on the data. A drive comes out looking processed but with its data intact. Since most recent business machines use SSDs, degaussing alone is no longer a safe blanket method, and the media has to be identified before choosing it.
Only software wiping, because it destroys the data while leaving the device usable. A wiped, working drive can be refurbished and resold, with the value recovered through buyback. Degaussing and shredding both destroy the drive, so no resale value remains. This is why matching the method to the device matters: wiping reusable equipment recovers value that shredding it would throw away.
NIST 800-88 does not prescribe a single method; it defines three levels of assurance, Clear, Purge and Destroy, and leaves you to select the level appropriate to the sensitivity of the data and the fate of the device. Clear is a standard overwrite or reset, Purge is stronger sanitisation such as a verified crypto-erase, and Destroy is physical destruction. It is a framework for matching assurance to need rather than a one-size rule.
Yes. Whatever method is applied, the destruction is only provable with a certificate for each device recording what was destroyed and how. Without it you have a method but no evidence, and for a business that may be asked to demonstrate a specific device was cleared, the certificate is what turns a completed job into a defensible one. A proper process certifies every device regardless of the method used.
Tell us what you are retiring and we will match the method to each device: certified wiping where value can be recovered, degaussing or shredding where it cannot, and a certificate for every one.
Destroy it properly
Knowing the right method is only half of it. The other half is being able to prove what happened to each serial number. ITC works to the NIST 800-88 standard under ISO/IEC 27001:2022, records chain of custody from your desk to the shredder, and issues a Certificate of Data Destruction listing the devices processed.
