What you will achieve

Understand why “Secure Empty Trash” disappeared and how to actually protect data on modern SSDs and APFS.

“Secure Empty Trash” vanished because it gave false confidence on SSDs and wore flash cells. Modern threat models need encryption and proper erase before sale — not multiple overwrite passes invented for 1990s hard disks. Understand what delete means on APFS.

1) The myth

Older macOS offered Secure Empty Trash — overwrite deleted files. Apple removed it because SSDs use wear levelling and TRIM — overwrites do not reliably hit physical blocks and harm drive life.

2) What delete really does

Empty Trash unlinks files on APFS. Blocks are marked free and eventually trimmed. Forensic recovery is hard on encrypted volumes, easier on unencrypted SSDs shortly after delete.

3) Real protection

FileVault — encrypt entire volume; deleted file blocks remain encrypted garbage.
Encrypted sparse images for sensitive scratch work — delete the image when done.
Full erase before selling: Erase Mac in Recovery with secure settings where offered.

4) External drives

For HDDs, Disk Utility secure erase still has meaning on older USB disks. APFS SSD externals: encrypt with FileVault-style encryption or format encrypted APFS.

5) Compliance contexts

Regulated data may require physical destruction or degaussing of spinning rust — software overwrite on SSD is not auditable. Use organisational policy, not folklore.

6) Erase free space is gone

Disk Utility removed “Erase Free Space” for SSD/APFS — do not hunt third-party “secure delete” tools promising DoD wipes on APFS; they cannot guarantee block overwrite and may corrupt filesystem metadata.

7) Selling or recycling workflow

Sign out iCloud and disable Find My.
Erase All Content and Settings or Disk Utility erase internal volume in Recovery.
On T2/Apple Silicon, erase uses hardware crypto key destruction when FileVault was on.

8) HDD externals still sold

Spinning USB drives benefit from one-pass erase in Disk Utility if disc contained contracts — still not NSA-grade; physical destruction for high threat models.

Verify

FileVault on for internal disk; sensitive workflows use encrypted containers; you know Recovery erase procedure before disposal.

Additional troubleshooting notes

If steps above do not resolve the issue on the first attempt, reboot once, confirm System Settings → General → Software Update is current, and retry with a second administrator account to rule out profile or keychain corruption in your daily user. Document exact error text from Console.app with timestamp — vague “it still fails” without logs wastes support time. On Apple Silicon, re-test after full shutdown (not just restart) because firmware and Thunderbolt controllers reset only on cold boot. Intel Macs should repeat test in Safe Mode to bypass third-party login items. Before erase or keychain reset, verify Time Machine or clone backup completed — batch 3 guides assume Monterey/Ventura/Sonoma/Sequoia paths in System Settings; search Spotlight for renamed panes if your macOS version labels differ slightly.