Encrypting the drive ensures, presuming the key is otherwise lost, that any data recovery methods which might exist could only get an [apparent] stream of random bits
That said … there's really no legitimate reason to do this, because doing
dd if=/dev/zero of=/dev/<dev-in-question>
is pretty damn good! (on UNIX/macOS/Linux/*BSD)
And if you're really worried, run
dd if=/dev/urandom of=/dev/<dev-in-question>
after you've zeroed it (or before – either is fine)
If you're on Windows, it's not quite as simple – so encrypting then formatting is good enough (for anyone but a nationstate – and if they're your threat model, encrypt, format, encrypt, format (with a different filesystem))
April 07, 2020 at 08:38AM
via reddit https://www.reddit.com/r/cybersecurity/comments/fwje8u/encrypt_before_erasing/fmom3ed?utm_source=ifttt