How to Recover Deleted Files on Windows 11

Stop using the drive. Right now. Every file you save, every browser tab you open, every background Windows process that writes to disk is potentially landing on the exact blocks where your deleted data was sitting. Recovery success drops from above 80% in the first hour to under 30% after a week of normal use. If the files matter, power off that machine and read the rest of this on your phone.

If you just deleted something seconds ago and haven’t done anything else, press Ctrl+Z in File Explorer. It reverses the most recent action including deletions. File reappears instantly. Only works if you haven’t performed other file operations since.

Check the Obvious Places

About six in ten “deleted files” tickets I handle turn out to still be recoverable from somewhere the person didn’t think to look. Recycle Bin first — open it from the desktop, right-click the column headers and add “Date Deleted” if it’s not showing, sort by it. If your file is there, right-click and Restore. It goes back to its original location.

OneDrive has its own separate Recycle Bin that most people don’t know about. If the deleted folder was in a OneDrive-synced location, go to onedrive.com, click Recycle bin in the left sidebar. Files sit there for 30 days. A customer last month thought she’d permanently lost her entire Documents folder — turned out OneDrive sync had been on the whole time and every file was sitting in the cloud trash.

File History is Windows’ built-in versioning system, but it’s off by default and most people never turned it on. If you did — right-click the folder where the file used to be, Properties, Previous Versions tab. Pick a date before the deletion and restore. Worth checking even if you’re not sure it was enabled, because some OEMs ship laptops with it turned on.

One more: check your antivirus quarantine. Windows Defender silently moves files it flags as suspicious. Windows Security, Virus & threat protection, Protection history — look for “Quarantined” entries. I get this roughly once a week where someone downloads a legitimate portable app from GitHub and Defender eats it.

Why SSDs Make This Harder

On a traditional hard drive, deleting a file just marks the space as available. The actual data stays on the magnetic platters until something overwrites it — could be weeks or months. Recovery tools read those orphaned blocks directly and success rates are high.

SSDs are different. Windows 11 has TRIM enabled by default, which tells the SSD controller to physically wipe freed blocks. The garbage collection process zeroes them out within 5-30 minutes usually. Once those NAND cells are wiped, no software on earth can read what’s gone. That’s why I opened with “stop using the drive” — on an SSD, your recovery window might be minutes, not days.

Check if TRIM is on: open Terminal as admin, run fsutil behavior query DisableDeleteNotify. If it says DisableDeleteNotify = 0, TRIM is active. You can’t realistically disable it long-term without hurting your SSD, but knowing the state sets your expectations.

Recovery Software

If the easy checks came up empty and the file is genuinely gone, two free tools I actually use on customer sessions:

Recuva from Piriform — download the portable version to a USB stick, not to the drive with the deleted files. Run it from the USB. The wizard asks file type and location, scans, shows results with green/orange/red indicators for recoverability. Green means high confidence. Save recovered files to a different drive than the one you scanned. The portable version matters — installing Recuva to the affected drive could overwrite the data you’re recovering.

PhotoRec is the heavier option, part of the TestDisk package. Command-line interface, slower, but it ignores the filesystem entirely and scans raw disk blocks for known file headers. This is what you use after a format or partition deletion where Recuva finds nothing. A customer accidentally deleted the wrong partition in Disk Management — wiped his entire photo archive from 2010 to 2024. PhotoRec ran overnight, recovered over 70,000 files. He’d called within 15 minutes of the mistake and stopped using the machine immediately, which is why it worked.

Photos are the easiest file type to recover because JPEG and PNG have strong format headers that recovery tools identify reliably. Modern Office documents (.docx, .xlsx) are harder — they’re actually ZIP archives, so partial recovery usually produces corrupted files. Encrypted files and databases are the hardest, often needing every single block intact to function.

When Software Won’t Work

The drive makes clicking or grinding sounds — that’s mechanical failure on a hard drive and running recovery software makes it actively worse. The failing read head scratches new tracks with every pass. This needs a professional clean-room service. Drivesavers, Ontrack, Gillware are reputable. Pricing runs $300-3000 depending on damage severity.

BitLocker encryption is the other wall. Windows 11 enables Device Encryption by default on many laptops and you might not know your drive is encrypted until recovery tools refuse to read it. Find your recovery key at account.microsoft.com/devices/recoverykey — Windows usually backs it up automatically. Without that key, the data is gone by any practical means.

If free tools failed but the drive isn’t physically damaged, we can run commercial recovery tools remotely that aren’t available for consumer download — and if we can’t recover what you need, you pay nothing. If the drive itself isn’t being detected at all, our hard drive not detected guide covers the Disk Management and BIOS checks — and if it’s an external drive it might just be a cable or port issue, and our backup guide walks through setting up File History and OneDrive sync so you never need recovery software again.