- Chicago | Dallas | Phoenix
- sales@hobi.com
- Client Portal
- Request a Pickup
- 877-814-2620
ITAD Glossary
What is cryptographic erase?
Cryptographic erase sanitizes a self-encrypting drive or device by destroying the key that encrypts its data. Without the key, the data left on the media cannot be read. NIST SP 800-88 treats cryptographic erase as a purge method when it is implemented and verified correctly.
Cryptographic erase
Why it matters for IT and security teams
It takes seconds to minutes and works on SSDs and phones, where overwriting cannot reliably reach every storage cell. The device stays usable, so it can be resold or redeployed.
Cryptographic erase
How it works
- The device must encrypt all stored data by default, as most current smartphones and many SSDs do.
- An erase command destroys or replaces the encryption key.
- The result is verified and recorded.
- On mobile devices it is usually paired with a reset to a clean state.
Cryptographic erase
How HOBI handles it
HOBI Shield gives preference to each drive’s built-in firmware sanitize commands, such as ATA Sanitize and NVMe Sanitize, and confirms the result rather than relying on the drive’s own report. Mac computers with the Apple T2 chip or Apple Silicon are erased with dedicated HOBI Shield software that runs through macOS.
Questions
Frequently asked questions
Is cryptographic erase as secure as shredding?
Done correctly and verified, NIST treats it as a purge method. Shredding is a destroy method, used when the media will not be reused or cannot be erased.
Does cryptographic erase work on every drive?
No. It only applies to media that encrypt all user data with a key the device can destroy.
How long does it take?
Usually seconds to a few minutes per device.
Keep learning
Related terms and services
Need help retiring IT equipment?
Talk to HOBI about secure data destruction, value recovery and certified recycling, or call 877-814-2620.