Deleted files
How to recover deleted files on a Mac
You deleted a file on your Mac and now you regret it. Good news: macOS almost never erases it right away. Between the Trash, the Undo command, the Recently Deleted folders in iCloud, Photos and Notes, and Time Machine, there are several successive safety nets.
This guide goes through them in the order you should check them, then explains honestly what happens once every one of those nets has been passed. If you're not sure the file was actually deleted, start with how to find a lost file instead.
1. Undo right away
If you've just deleted the file in the Finder, press Cmd + Z or choose Edit > Undo Move. The item instantly returns to its original location. This works as long as you haven't done anything else in the Finder in the meantime.
In most apps (Pages, Mail, Photos, Notes), the same command also undoes the last deletion made inside the app. The same reflex works for text deleted in a document: pressing Cmd + Z repeatedly walks back through your edit history, and Cmd + Shift + Z redoes anything you undid by mistake.
2. The Trash: put an item back where it was
- Click the Trash icon at the right end of the Dock.
- Find the file. If the Trash is full, switch to list view (Cmd + 2) and sort by Date Added, or use the search field and choose “Trash”.
- Control-click the item and choose Put Back: it returns to its original folder. You can also drag it wherever you like.
Watch out for two traps:
- The Remove items from the Trash after 30 days option (Finder > Settings > Advanced) automatically empties older items.
- The Delete Immediately command (Cmd + Option + Delete) bypasses the Trash.
For external drives, the Trash is stored on the drive itself, in a hidden folder: the drive must be connected for its items to appear. More details in our guide to emptying the Trash safely.
3. iCloud Drive, Photos, Notes: the 30-day grace period
| Service | Where to look | Kept for |
|---|---|---|
| iCloud Drive | iCloud.com > Drive > Recently Deleted | 30 days |
| Photos | Photos app > Utilities > Recently Deleted | 30 days |
| Notes | Recently Deleted folder | 30 days |
| iCloud files, contacts, calendars | iCloud.com > Data Recovery | 30 days (files) |
In Photos, the Recently Deleted album is locked by default: unlock it with Touch ID or your password, select the photos and click Recover. An iCloud Drive file deleted on the Mac first goes to the Mac's Trash; even if you empty it, the file usually remains available on iCloud.com for 30 days.
4. Mail and deleted messages
A deleted email goes to the account's Trash mailbox. Select it and drag it to another mailbox, or use Message > Move to. How long it's kept depends on the Mail > Settings > Accounts > Mailbox Behaviors > Erase deleted messages setting and on the server's rules (Gmail keeps them for 30 days, for example).
An attachment you deleted from your disk often still exists in the original email: don't forget that lead for a document you received or sent.
5. Time Machine: recovering after emptying the Trash
If the Trash has been emptied, Time Machine is your best chance. It keeps hourly backups for 24 hours, daily backups for the past month and weekly backups for previous months, as long as the drive has room.
- Connect the backup disk.
- In the Finder, open the folder that contained the file.
- Choose Browse Time Machine Backups from the Time Machine menu in the menu bar.
- Go back in time to a date when the file existed, select it, then click Restore.
Don't have Time Machine? Turn it on now: System Settings > General > Time Machine > Add Backup Disk. It won't save today's file, but it will save every one after it.
6. The limits: Trash emptied and no backup
Here's the truth many websites leave out so they can sell you software:
- On the internal SSD of a T2 or Apple silicon Mac, a file emptied from the Trash is, in practice, unrecoverable. The TRIM command makes the SSD erase freed blocks in the background, and all storage is hardware-encrypted (with or without FileVault). No software can promise otherwise.
- On an encrypted APFS volume whose password you don't have, nothing can be recovered.
- On an SD card, a USB stick or an external hard drive (exFAT, FAT32, HFS+), recovery is realistic if you haven't written to it since. See external media recovery.
- On an iPhone or Android phone connected to the Mac, a tool only sees accessible files; no low-level scan.
Last resort without a backup: look for a copy elsewhere. Think of attachments you sent or received, Messages or WhatsApp conversations, file transfer services whose link is still valid, an old Mac or a forgotten USB stick, colleagues who received the document, or even a printed copy you can scan. It's not glamorous, but it's often what saves a project.
7. Keep it from happening again with MacNeat
MacNeat doesn't recover files erased from the internal SSD: nobody can do that reliably. It makes sure you don't need to:
- every deletion made by MacNeat goes through the Trash, never a direct erase;
- a safe trash keeps items for a delay before anything is permanently deleted;
- the deletion history lets you restore a specific item, days later;
- the last operation can be undone in one click;
- the Time Machine check warns you if your last backup is too old.
How it all works is described on the Data Protection page.