New comment on reddit

Encrypting the drive ensures, presuming the key is otherwise lost, that any data recovery methods which might exist could only get an [apparent] stream of random bits

That said … there's really no legitimate reason to do this, because doing

dd if=/dev/zero of=/dev/<dev-in-question> 

is pretty damn good! (on UNIX/macOS/Linux/*BSD)

And if you're really worried, run

dd if=/dev/urandom of=/dev/<dev-in-question> 

after you've zeroed it (or before – either is fine)

If you're on Windows, it's not quite as simple – so encrypting then formatting is good enough (for anyone but a nationstate – and if they're your threat model, encrypt, format, encrypt, format (with a different filesystem))

April 07, 2020 at 08:38AM
via reddit https://www.reddit.com/r/cybersecurity/comments/fwje8u/encrypt_before_erasing/fmom3ed?utm_source=ifttt