Recovering Data from APFS Drives on Mac
Data loss on an APFS drive can occur due to accidental deletion, corrupted volumes, or formatting errors, leaving your files inaccessible. Specialized recovery tools are essential for retrieving lost data, repairing damaged volumes, and restoring deleted files. These tools have proven reliable across various scenarios, and this guide walks you through recovering data from APFS drives, repairing volumes, and handling encryption.
Important Precautions
If you experience data loss on an APFS volume:
-
Stop using the affected drive immediately. Avoid writing new data, as it may overwrite deleted files.
-
Install recovery software on an external drive if possible, especially since APFS is often used on system volumes.
-
Act quickly—the sooner you begin recovery, the higher your chances of success.
What Is APFS and Why It Matters
Apple introduced the Apple File System (APFS) in 2017 with macOS High Sierra, replacing HFS+. APFS is optimized for modern storage, particularly SSDs, but it also works on traditional hard drives. Key advantages include:
-
Faster file access and improved performance
-
Enhanced data integrity and crash protection
-
Native encryption for strong data security
-
Space sharing between volumes and snapshots
While APFS offers superior file system management, its complexity can make data recovery more challenging:
-
TRIM on SSDs can permanently erase deleted data blocks, making recovery impossible if enabled
-
Encryption and snapshots complicate recovery, requiring specialized tools to retrieve files
-
Damaged file system metadata or container headers can render data inaccessible
The following sections explain how to recover files from APFS drives, including handling encryption, SSD-specific issues, and corrupted volumes.
Handling Data Recovery on Encrypted APFS Drives
Before recovering data from an encrypted APFS drive, the volume must be decrypted. APFS supports encryption at both the file and volume level, typically managed via FileVault, which scrambles the drive contents, including metadata.
-
Recovery software cannot interact with encrypted data until the drive is decrypted.
-
If the FileVault password or recovery key is lost, data recovery is impossible.
-
Severely corrupted encryption metadata or container headers also make recovery unattainable.
How to Decrypt an APFS Drive
-
Click the Apple menu and select System Settings (or System Preferences on older macOS versions).
-
Go to Security & Privacy.
-
Navigate to the FileVault tab. If FileVault is on, the drive is encrypted.
-
Click Turn Off FileVault and enter your administrator password when prompted.
-
The decryption process will begin. Depending on drive size, this may take several hours.
-
Once complete, the drive returns to an unencrypted state, allowing recovery software to access and scan its contents.
This approach ensures that APFS encryption doesn’t block recovery tools and maximizes the chances of successfully retrieving lost files.
Recovering Deleted Files from an APFS Drive on Mac
After completing the decryption process, you can proceed with data recovery software to restore lost files. Two reliable options are Disk Drill and PhotoRec:
-
Disk Drill – Intuitive graphical interface, ideal for everyday users
-
PhotoRec – Command-line interface, suitable for technically inclined users
Note: If your drive is an HDD or an SSD with TRIM disabled, recovery chances are significantly higher. TRIM-enabled SSDs (macOS Monterey and later) automatically erase deleted blocks, making recovery nearly impossible. Recovery is only feasible if you act quickly or if TRIM is not active.
Option 1: Disk Drill
Disk Drill is a widely trusted tool for APFS recovery. It simplifies the process while maintaining powerful recovery capabilities. Key advantages:
-
Handles APFS metadata with high accuracy
-
Rebuilds original folder structure and file hierarchy
-
Recovers files with original names and formats intact
-
Works for both deleted files and damaged APFS containers
Step-by-Step Guide: Disk Drill APFS Recovery
-
Download and Install:
Visit the official Disk Drill website and download the software. Install it on a different drive than the one containing lost data to avoid overwriting files. -
Launch and Connect Drives:
Open Disk Drill from your Applications folder. Connect the external APFS drive (if applicable).-
Grant Full Disk Access via
System Settings > Privacy & Security > Full Disk Access. -
For system disks, enable Disk Drill’s kernel extension (kext). Follow on-screen prompts and restart your Mac to activate full functionality.
-
-
Select Drive for Scanning:
Disk Drill will list all connected drives and partitions. Select the APFS drive containing lost data and click “Search for lost data.” -
Scanning Process:
Disk Drill will scan the drive for recoverable files. Depending on drive size, this may take some time. Although you can recover files during scanning, it’s recommended to wait until the scan finishes.- Each file is assigned a recovery likelihood: High, Average, or Low.
-
Review and Recover:
Once the scan completes, you can:-
Click “Recover All” to restore everything
-
Or choose “Review Found Items” to inspect files
-
Hover over files and click the eye icon to preview them and confirm integrity.
-
-
Select Files to Recover:
If selecting manually, mark files you want and click “Recover.” -
Choose Recovery Location:
Select a different drive or partition to avoid overwriting recoverable data, then click “Next” to restore the files.
Disk Drill is a highly effective solution for APFS recovery, offering a balance of user-friendliness and technical reliability, making it suitable for both accidental deletions and complex recovery scenarios.
Option 2: PhotoRec
PhotoRec is a completely free and open-source tool for recovering deleted files from APFS and other file systems. Unlike Disk Drill, it does not rely on the file system—it uses a signature-based scanning method to locate files, making it highly versatile for external drives, SSDs, and USB media.
Note: PhotoRec operates entirely through the Terminal. You don’t need to type complicated commands—on-screen prompts guide you step by step. However, it cannot recover data from your internal APFS system drive on macOS. Its recovery scope is limited to external drives.
Key Considerations
-
Completely free and open-source
-
Works with any file system, including APFS, FAT, NTFS, exFAT
-
Recoverable files do not retain original names or folder structure
-
Best for external media—USB drives, SD cards, and external SSDs
Step-by-Step Guide: Recovering APFS Data with PhotoRec
-
Install PhotoRec
-
Download it from the official website or, if you prefer, install via Homebrew (
brew install testdisk). -
PhotoRec comes bundled with TestDisk.
-
-
Launch PhotoRec with Administrator Privileges
-
Open Terminal and run:
sudo photorec -
Enter your administrator password when prompted.
-
-
Select the Target Drive
- PhotoRec will display all connected drives. Use the arrow keys to highlight the APFS drive containing the lost data.
-
Choose the Partition to Scan
- PhotoRec will prompt you to select a partition. You can scan the entire disk or a specific partition depending on where the data loss occurred.
-
Specify File System Type
- Select “Other” when prompted for the file system type (APFS is not listed, but “Other” works).
-
Select Recovery Destination
-
Choose a different drive or folder to save recovered files. Saving to the original drive risks overwriting lost data.
-
After choosing the destination, press “C” to start the scan.
-
-
Recover Files
-
PhotoRec will scan for file signatures and recover files into folders named
recup_dir.1,recup_dir.2, etc. -
Files are organized by type, but original filenames and folder hierarchy are not preserved.
-
Recovering Data from APFS Snapshots Using Time Machine
APFS volumes support snapshots, which are read-only points in time capturing the exact state of your data. macOS integrates these snapshots with Time Machine, making it possible to recover deleted or modified files even without access to your main backup drive.
When your Time Machine backup disk is disconnected, macOS creates local snapshots on your APFS system volume. These snapshots are:
-
Generated approximately once per hour
-
Stored for up to 24 hours, depending on available free space
-
Useful for restoring recently deleted or modified files without an external backup
Tip: If your Time Machine disk is connected, check it first. External backups may contain older versions of files that local snapshots no longer retain.
Step-by-Step Guide: Recovering Files from APFS Snapshots
-
Open Time Machine:
Click the Time Machine icon in the menu bar and select “Browse Time Machine Backups.” -
Access Local Snapshots:
If your main backup disk isn’t connected, Time Machine automatically displays local snapshots stored on your APFS volume. -
Navigate the Timeline:
Use the timeline on the right edge to move backward in time. Each marker represents an hourly snapshot of your system. -
Locate Your Files:
Browse folders as they appeared at the chosen snapshot. -
Restore Files:
Select the file or folder you want to recover and click Restore. Time Machine will copy it back to its original location.
How to Repair an APFS Volume on Mac
Sometimes an APFS volume may fail to mount or behave inconsistently. Symptoms can include files refusing to open, apps crashing when accessing the drive, or macOS reporting read/write errors. In many cases, Disk Utility can help repair logical issues within the file system.
Note: Disk Utility can only fix logical file system errors. It cannot repair severe structural corruption or physical disk damage. If the APFS container or partition map is badly damaged, additional recovery tools may be necessary.
Steps to Repair an APFS Volume
-
Open Disk Utility on your Mac.
-
In the sidebar, locate the APFS volume you want to repair.
-
Select the volume and click the “First Aid” button at the top of the window. First Aid will check the drive for errors and attempt repairs.
-
Confirm your choice and wait for the process to finish.
-
Once completed, Disk Utility will display the repair results:
-
If successful, you should regain access to the volume and its data.
-
If errors remain, Disk Utility will inform you, and further recovery steps may be needed.
-
Tip: If macOS prompts you to restart after the repair, follow the instructions to finalize the process.
How to Access and Recover APFS Data on Windows
APFS-formatted drives are not natively recognized by Windows. Plugging in an APFS drive will result in no response, making data recovery a bit more complicated. To read or recover files, you need software that understands the APFS file system.
Options for Windows Users
-
Paragon APFS for Windows (or similar alternatives) allows you to mount and access APFS volumes from Windows.
-
Disk Drill for Windows (v6 and later) can read APFS metadata, enabling it to rebuild original folder structures and filenames during recovery. This avoids the problem of hundreds of nameless files scattered in random folders.
Using tools that understand APFS internally (rather than just scanning raw data) gives a cleaner, more organized recovery, saving time and reducing the risk of file misplacement.
Using PhotoRec on APFS Drives in Windows
If you want a free alternative, PhotoRec is a reliable option. Unlike most software that relies on the file system, PhotoRec scans for known file signatures, allowing it to recover photos, videos, documents, and other files even from drives that Windows cannot read.
recup_dir.1). You’ll need to manually sort them after recovery.
This behavior is not unique to PhotoRec — any Windows-based recovery tool that doesn’t natively support APFS will treat the drive as if it has no file system and will attempt recovery based on its file-signature database.
How to Recover Data from a Dead MacBook
When a MacBook fails unexpectedly, it may seem like all your files are gone, but in most cases, the data still exists on the internal storage. The recovery approach depends heavily on your MacBook model and how the storage is installed.
1. MacBooks with Removable Drives
If your MacBook has a removable internal drive:
-
Carefully remove the drive following guides specific to your MacBook generation (YouTube tutorials are often helpful).
-
Connect the drive to another Mac or Windows PC using a compatible adapter.
-
Use data recovery software, such as Disk Drill or PhotoRec, to scan and recover your files, following the steps described earlier.
2. MacBooks with Soldered SSDs
Modern MacBook models have SSD chips soldered directly onto the motherboard. In these cases:
-
Do not attempt DIY recovery, as opening or manipulating the motherboard can permanently destroy the drive and your only copy of the data.
-
The safest approach is to contact a professional data recovery service. For example, CleverFiles Data Recovery Center specializes in Mac and APFS recovery.
-
You can ship your MacBook to a reputable service center, where engineers will attempt to safely extract your data and return it on a new drive if recovery succeeds.
Choosing a Recovery Service
When selecting a professional recovery service, look for one with a “no data — no fee” policy. This ensures you aren’t charged if the recovery attempt fails and guarantees the service has a real incentive to deliver results.
Conclusion
Recovering data from APFS drives can be challenging, thanks to strong encryption and TRIM commands on modern Macs. That said, recovery is not impossible. The key principles to follow are:
-
Stop using the affected drive immediately. Any new write operations reduce your chances of recovery.
-
Act before TRIM executes. Once TRIM clears deleted blocks, recovery is virtually impossible.
-
Choose the right recovery tool. Use software that fully supports APFS, like Disk Drill, rather than tools that only claim to.
-
Have a plan. Panicking is your worst enemy — know the steps you’ll take if data loss occurs.
-
Check your MacBook’s storage type. Removable drives can be scanned on another computer, but soldered SSDs should only be handled by professionals.
-
Recovering on Windows? Use software that understands APFS metadata, like Disk Drill 6, to rebuild folders correctly.
-
Backups are your best defense. Time Machine offers automatic, reliable backups. Investing in an external drive is far cheaper than losing important files.
By following these steps, you’ll be better prepared for data loss and maximize your chances of recovery.
FAQ
Q: Can I recover deleted files from an APFS drive?
A: Yes. Tools like Disk Drill can scan your APFS drive and restore deleted files, as long as the data hasn’t been overwritten.
Q: What is the best APFS recovery tool?
A: Disk Drill is widely recommended due to its deep scanning capabilities and ability to recover a broad range of file types, including entire APFS volumes and partitions.
Q: Is it possible to recover an APFS partition?
A: Yes. Disk Drill and PhotoRec can undelete APFS partitions. However, if the partition was encrypted and its metadata is severely damaged, recovery may not be possible without the decryption key.
Q: How do I recover a deleted APFS volume?
A: Use APFS recovery tools to scan and restore the volume. Utilities like TestDisk can help detect and rebuild lost APFS containers for further recovery.
Q: Can I repair an APFS volume without losing data?
A: Yes. First, recover your files using a recovery tool, then repair the volume using Disk Utility or a similar utility.
Q: How can I recover deleted APFS files?
A: Disk Drill can locate traces of deleted data and restore your files, even after the trash has been emptied.
Q: Is it possible to undelete APFS data?
A: Yes. Specialized recovery software can undelete files permanently removed from APFS drives.
Q: Can I recover data from a formatted APFS partition?
A: Yes, if the partition was not encrypted. Disk Drill can perform deep scans to restore lost files. Encrypted partitions that have been formatted are generally unrecoverable without the original keys.
Q: What should I do if I can’t access an APFS drive?
A: Start by using a recovery tool to secure your data. Once your files are safe, attempt to repair the APFS volume with Disk Utility or equivalent tools.