Overwrite unused space on an ntfs volume
ntfswipe [options] device
ntfswipe clears all or part of unused space on an NTFS volume by overwriting with zeroes or random bytes.
Below is a summary of all the options that ntfswipe accepts. Nearly all options have two equivalent names. The short name is preceded by - and the long name is preceded by --. Any single letter options, that don't take an argument, can be combined into a single command, e.g. -fv is equivalent to -f -v. Long named options can be abbreviated to any unique prefix of their name.
Wipe all unused space. This may take significant time.
-b, --bytes BYTE-LIST
Define the allowed replacement bytes which are drawn randomly to overwrite the unused space. BYTE-LIST is a comma-separated list of values in range 0-255 expressed in octal, decimal or hexadecimal base.
-c, --count NUM
Define the number of times the unused space is to be overwritten.
Wipe all the directory indexes, which may contain names of deleted files.
This will override some sensible defaults, such as not using a mounted volume. Use this option with caution.
Show a list of options with a brief description of each one.
Display details about unused space.
Overwrite the logfile (update journal).
Overwrite the unused space in the MFT (main file table, which contains the file names, and the contents of short files).
Executes the wiping process without writing to device.
Overwrite the Windows swap space.
Suppress some debug/warning/error messages.
Overwrite the space which had been allocated to a file which has been deleted recently and is still undeletable.
Overwrite the space at the end of files which is unused, but allocated because the allocations are always done by full clusters.
Overwrite the space which is currently not allocated to any file (but may have been used in the past).
Overwrite the space which is currently not allocated to any file, trying not to overwrite the space not written to since the previous wiping.
Display more debug/warning/error messages.
Show the version number, copyright and license of ntfswipe.
Wipe out all unused space in an NTFS volume.
ntfswipe -a /dev/sda1
Wipe out all deleted file names from an NTFS volume.
ntfswipe -dms /dev/sda1
There are no known problems with ntfswipe. If you find a bug please send an email describing the problem to the development team:
ntfswipe was written by Richard Russon, Anton Altaparmakov and Yura Pakhuchiy. It was ported to ntfs-3g by Erik Larsson.
ntfswipe is part of the ntfs-3g package and is available from: