b2KIT

Secure File Shredder

Overwrite file contents with random data before deletion to prevent recovery, using client-side processing.

Tested tool guide Tested browser tools Checked August 16, 2026

What Secure File Shredder does and how it behaves

Shredding replaces a file's contents with meaningless bytes before deleting it, so programs that recover deleted files find nothing left to rebuild. This tool does that entirely in the browser: you select a file through its picker, it overwrites the data with random bytes, then removes the file. Nothing is uploaded. The surprise is how little of the disk a browser can reach: the tool only touches the file you hand it, some browsers grant only read access to picked files, and overwriting the live file never reaches its copies in backups, snapshots, or sync folders. Treat it as a strong software-level deletion, not physical destruction.

How the result is produced

1

How the overwrite runs

The tool reads the selected file, replaces its bytes with random data one or more times, then asks the operating system to remove the file's entry. One pass already defeats undelete software; extra passes add little on modern storage. The overwrite itself depends on the access the browser grants: with a read-only selection, the file can be examined but not rewritten, so the shred cannot run as intended.

2

Why the disk can still hold the old data

Overwriting works on the file's current allocation, not the disk's history. Copy-on-write and journaling filesystems can write the new version to fresh blocks; solid-state drives relocate data through wear leveling and may never touch the original cells, while TRIM simply marks blocks as free. The tool also cannot reach copies held in backups, snapshots, version history, cloud sync, or memory.

Good uses

  • Clearing sensitive files such as bank statements, ID scans, or password exports from a computer before selling, donating, or returning it.
  • Removing a confidential document from a shared or family machine, where someone might run undelete software on the drive.
  • Retiring one sensitive file without installing a desktop shredder, when the browser can reach it and the file is small enough to overwrite quickly.

Limits and checks

  • The picker is the only entry point: you cannot type a path, drag a folder, or touch files the browser has not shown you, and a read-only selection means no overwrite can occur.
  • Shredding on an SSD is not physical erasure: wear leveling, TRIM, and garbage collection can leave the original bytes in cells the operating system no longer addresses.
  • The result covers one file's live contents only: backups, snapshots, cloud copies, and the file's name in filesystem metadata survive, and an open copy may still sit in memory.

Common questions

Is one pass enough, or should I use several?

One pass defeats every software undelete tool, because recovery programs rebuild files from leftover content, and none is left. Extra passes were designed for old magnetic disks and change nothing on modern drives. What matters more is what you do not control: copies in backups and sync folders, and the SSD's own behavior. Check the file is gone from everywhere you expect.

Why can't I enter a file path instead of using a picker?

Browsers are sandboxed: a web page cannot open arbitrary filesystem paths, so the picker is the only way a file becomes visible, and it may grant read-only rights. That is the trade-off of client-side shredding: nothing uploads, but the tool can only work with what you explicitly select. If you need to shred many files or entire folders, a desktop utility with direct filesystem access is the right tool.

References and verification

The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.

Related Tools