My Mac hard drive stopped showing up after a sudden shutdown, and I need to recover important files before trying anything that might overwrite the data. What are the safest Mac hard drive recovery methods or tools to try first?
First thing: stop using that drive as much as you can. That matters more than which recovery app you pick.
When files disappear on macOS, they are not always gone right away. A deleted file, or even some files lost after formatting, may still be sitting on the drive. macOS often just marks that space as free. The problem is that anything you do afterward can write over it, including downloads, app launches, browser activity, and background stuff. If it is an external drive, unplug it for now. If it is the Mac’s internal drive, keep use to the bare minimum.
I’ve been in a similar mess before. I almost lost a thesis years ago because I thought I had copied it to a flash drive, but I hadn’t. So yes, it feels awful, but it is worth checking the boring stuff before assuming the files are permanently erased.
Start with the Trash. If the files were on an external drive, that drive may have its own hidden trash folder. Plug it in, open it in Finder, then press Shift + Command + Period to show hidden files. Look for a folder called .Trashes. If the files are there, right-click them and choose “Put Back.”
After that, check Time Machine if it was already enabled before the files vanished. Open Time Machine from the menu bar, go back to a point where the files still existed, select them, and hit “Restore.”
If there is no backup and the Trash does not have them, then recovery software is usually the next reasonable step. Something like Disk Drill can scan Mac drives, including APFS and HFS+, and may find files even if the original folder structure or filenames are missing.
Deep scans usually work by looking for file signatures instead of depending only on the drive’s directory records. That can help with photos, videos, documents, archives, and similar file types. If the drive is acting flaky, taking forever, or disconnecting on its own, make a byte-for-byte image first and scan that image instead of hammering the original drive over and over.
Internal SSDs are trickier. Many modern SSDs use TRIM, which can clear deleted blocks automatically. Once that happens, normal software recovery may not have anything left to recover. That is another reason to avoid using the Mac until you have a plan.
If the drive is making clicking, grinding, repeated spin-up sounds, or any other weird mechanical noise, do not run recovery software on it. That is a hardware problem, not a software problem, and scanning can make things worse. Disconnect it and consider a professional recovery service if the data is worth the cost.
Once you get through this, set up two backups. Time Machine is fine for a local backup, and a solid cloud backup gives you a second copy somewhere else. For now, keep it simple: stop writing to the drive, check Trash and Time Machine, then recover from another drive or from a disk image if needed. Careful handling gives you a much better shot at getting the files back.
11 Likes
Do not click “Initialize,” “Erase,” or run First Aid if Disk Utility suddenly says the drive is unreadable, because those “fixes” can change the disk enough to make recovery harder.
If it appears in Disk Utility at all, I’d make an image/clone first and recover from that with a tool like Disk Drill or similar. If it does not appear there, or only appears sometimes, stop messing with software and treat it like a hardware issue.
Do not keep power-cycling the drive to see if it magically appears. First check System Information under USB/Thunderbolt/SATA and see whether the Mac detects the actual device, not just whether Finder mounts it. If it does not show there, recovery apps are mostly wasting time and the enclosure, cable, port, or drive hardware is the issue. If it shows there but will not mount, then I agree with the cloning-first advice: make an image to a different disk and scan that copy with something like Disk Drill, R-Studio, etc. Small caveat people forget: if the Mac drive used FileVault or APFS encryption, you’ll need the password/recovery key for any useful recovery. Without that, “found files” may just be unreadable blobs.
Do not install Disk Drill or any recovery app onto the same drive you’re trying to recover from. If it’s the internal Mac drive, boot from an external macOS drive or use another Mac in Target Disk Mode, then save recovered files to a separate disk.