Do not format a drive before data recovery

You plug in a work drive, a camera card or a family backup disk and Windows says: "You need to format the disk before you can use it." In a Warsaw office or on a trip through Poland, that button can look like the first step to fixing the problem. For data recovery, it is usually the opposite: formatting writes new structures to media that may still contain recoverable file traces.

What the Format button actually changes

A quick format usually rebuilds file-system structures and marks the old space as available. On NTFS it may reset parts of the MFT; on FAT or exFAT media it can overwrite allocation information that helps us rebuild folders, file names and the original order of photos or documents.

A full format is riskier. Depending on the operating system and device, it may write across large areas or force long reads on a drive that is already unstable. On a weak HDD with pending sectors, that extra stress can make a clean lab image harder to obtain.

SSD and NVMe: TRIM changes the situation

On SSD and NVMe drives, formatting or deleting files can trigger TRIM. TRIM tells the drive that blocks are no longer needed, and the controller may clear them internally without another visible warning. Leaving the SSD powered for hours after the mistake can reduce options further.

If this is an SSD/NVMe case, read TRIM and deleted files on SSD before assuming recovery software can bring everything back later.

Cards, USB drives and external disks after a format prompt

A format prompt often appears because the file system is damaged, RAW, interrupted during writing or unreadable through the current adapter. Clicking Format may make the device look usable again, but it also places a fresh file-system layer over the damaged one.

On camera cards and USB drives, that can erase clues about folder structure and file order. On external HDDs, the same prompt may point to a damaged partition table, bad sectors, a failing USB bridge or a drive that was disconnected during writing. For RAW or format-request cases, use RAW drive: do not format and avoid saving anything to the same device.

What to do instead of formatting

• Cancel the format prompt.
• Stop using the device and prevent new writes.
• Photograph the exact message and note when it appeared.
• Do not install recovery software on the same drive.
• If the device clicks, disconnects or freezes the computer, do not run long scans.

If someone suggests CHKDSK, Disk Utility First Aid, automatic repair or a "deep scan" directly on the only copy of the drive, pause first. Read do not use CHKDSK if the drive is damaged.

When formatting has already happened

Stop immediately. Do not copy files back, reinstall apps, create a new partition layout or run several recovery tools one after another. The less new data is written after the format, the more options may remain.

For SSDs, note whether the drive stayed powered and connected after formatting. For memory cards and USB drives, write down the device type, previous file system if known, and whether new photos or documents were added afterwards. These details help the lab judge whether the remaining data should be cloned, carved or treated as a partially overwritten case.