Skip to content

ShredOS

A bootable stick whose entire purpose is erasing the disks in the machine you booted it on.

Direct download

What it does

ShredOS is a minimal Linux image built around nwipe, the maintained descendant of the wiping engine DBAN used. It boots on BIOS and UEFI, lists every attached drive, and offers the usual pattern choices — zero fill, random, DoD and Gutmann sequences — plus verification and a PDF certificate of what it erased.

Because it runs from RAM, every internal disk is unmounted and fair game, which is the difference between this and anything you run from inside macOS.

Notes

  • Understands SSDs and NVMe devices rather than pretending they are platters, and can ask the drive to sanitise itself where the firmware supports it.
  • Write the image to a stick with balenaEtcher or macUSB, or drop it on a Ventoy stick.
  • x86-64 only. It will not boot on an Apple Silicon Mac — for those, discard the keys instead with Erase All Content and Settings.
  • The certificate matters if you are wiping machines for anyone other than yourself.

Alternative to

AlternativeTypeTrade-off
DBANOpen sourceThe famous predecessor, abandoned in 2015 and blind to SSDs
nwipeOpen sourceThe same engine as a package, if you already have a Linux live image
Parted MagicPaidFirmware sanitise across ATA, NVMe, SAS and eMMC, plus a rescue toolkit
Blancco Drive EraserPaidAudited certificates for compliance regimes, licensed per drive
diskutil secureEraseBuilt inNo USB stick needed, but it cannot touch the running system disk

Install

brew install --cask balenaetcher

Download the ShredOS image from the releases page, flash it to a USB device, then boot the target machine from it.

Links

This post is licensed under CC BY 4.0 by the author.
Last updated on