1

An encrypted Veracrypt volume on external hdd that is 1-pass wiped (full format) with the Windows format tool. Then some data was written after the format. According to my knowledge, with hex viewer the Veracrypt volume appears full of random data, except the header which I tried to recover using Veracrypt but failed. So for me to mount the volume and retrieve the data, the full past state of the drive must be recovered as a whole.

Is recovery possible in any way?

Life Long Learner
  • 19

1 Answers1

4

An encrypted Veracrypt volume on external hdd that is 1-pass wiped (full format) with the Windows format tool.

Windows full format is effectively a zero-fill. The previous data on the volume affected by the zero-fill is now unrecoverable. No documented cases of recovery of data overwritten by a single zero pass of zeros exist to my knowledge.

See: https://superuser.com/a/1845422/705502