I accidentally deleted important files from an APFS-formatted Mac drive and realized I don’t have a Time Machine backup. I need advice on the safest way to recover deleted APFS files without overwriting data, including any reliable macOS recovery tools or steps to try first.
First thing: stop using that drive. Don’t save anything to it, don’t reinstall macOS on it, and don’t try to “fix” it with First Aid or partition tools yet. Deleted APFS files, and even formatted volumes sometimes, can still be recoverable until new data gets written over them. The more you use the Mac, the worse your odds get.
If it’s an external drive, unplug it for now. If it’s the internal drive, avoid doing anything unnecessary on that Mac until you’re ready to recover the files.
Check Time Machine first if you have it. That’s the cleanest route. Also, even if your backup disk isn’t plugged in, open Time Machine anyway because macOS may have local APFS snapshots with recently deleted stuff.
If there’s no backup
At that point, recovery software is probably the next move. I’d try Disk Drill first, mainly because it can work with APFS instead of only doing a raw signature scan. When APFS metadata is still intact, that can mean you get back actual filenames, folders, and file details instead of a giant pile of files with random names.
The basic approach would be:
- Install Disk Drill somewhere other than the drive you’re recovering from, if you can.
- Connect the problem APFS drive, or select the internal disk if that’s where the files were.
- Give it Full Disk Access in macOS Settings so it can scan properly.
- Choose the drive and run Search for Lost Data.
- Let the scan finish. Stopping early can miss recoverable files.
- Use preview to check whether your documents, photos, videos, etc. are actually intact.
- Recover the files to a different drive. Never restore them back onto the same APFS volume.
If the disk seems flaky, make a disk image first and scan that instead of hammering the original drive over and over. Disk Drill can also show S.M.A.R.T. health information, which is useful for telling the difference between normal file system damage and a drive that may be physically failing.
Other tools worth knowing about
PhotoRec is free and can work really well, especially for photos, videos, and common document types. The catch is that it usually recovers by file signature, so you may lose original filenames and folder paths. It’s useful, but sorting the results can be a pain.
TestDisk is more for damaged partition structures. If the APFS partition itself is messed up, it might help rebuild things, but I wouldn’t make it the first thing you run. Get the important files copied out first if possible, because changing partition data can make a bad situation harder to recover from.
One big caveat: if this was an internal SSD, TRIM matters. Once deleted blocks have been cleared, software recovery can’t bring them back. And if a FileVault-encrypted APFS volume was formatted and the encryption keys are gone, recovery is usually not realistic.
When to stop and use a recovery lab
Don’t keep running scans if the drive is acting physically sick. I’d skip DIY recovery if it:
- keeps disappearing or reconnecting,
- clicks, grinds, or beeps,
- disconnects during scans,
- freezes the Mac whenever you touch it,
- or shows serious S.M.A.R.T. warnings.
Those are hardware-failure signs, and repeatedly powering it up can make things worse. A decent recovery lab will usually do a free evaluation, and many are no data, no fee. Logical recovery often starts around $300–500, while physically damaged drives can easily be $1,000+, depending on the problem.
If this was just an accidental delete or format, you’ve got a much better shot. Just don’t write anything new to the drive, recover to another disk, and move quickly.
1 Like
Don’t install the recovery app on the same Mac drive you deleted from.
For an internal APFS SSD, the safer move is to shut it down and scan it from another Mac using an external boot drive, Target Disk Mode, or a disk image if you can make one. Disk Drill is fine for that, but the destination drive matters more than the tool: recover to a separate disk or you may overwrite the files you’re trying to save.
Losing files from an external APFS drive is a different problem from losing them on the Mac’s boot SSD. With an external drive, you can unplug it and think. With the internal SSD, macOS may keep writing logs, caches, Spotlight data, iCloud changes, browser junk, and swap files while you are “just checking something.” That background activity is the quiet killer.
Before running recovery software, I’d check the low-effort places that don’t touch the damaged volume much: Trash, iCloud Drive on the web, Photos Recently Deleted, Notes recently deleted, and any app-specific history if the files belonged to something like Lightroom, Final Cut, Word, or Scrivener. People jump straight to disk scanning and sometimes the file is sitting in a cloud/app safety net that isn’t called Time Machine.
If you do scan, I agree with the earlier advice about not installing Disk Drill or anything else onto the same APFS volume. Boot from another disk, use another Mac, or at least run the recovery tool from an external drive and save recovered files to a separate disk. I’d be especially cautious with “repair” buttons and partition tools before the files are copied out. Recovery is about reading first, not fixing first. Disk Drill is reasonable for APFS because it may preserve names and folders when metadata is still around, but no software beats TRIM or missing encryption keys, so don’t take a preview list as a guarantee until the recovered files actually open.
