I accidentally lost access to important files on my Mac hard drive after it stopped showing up properly in Finder. I need help figuring out the safest way to recover Mac hard drive data without making the problem worse.
First thing: stop using the drive as much as you can. Deleted files usually are not wiped right away. A normal delete or quick format often just removes the file-system pointers, while the actual data may still be sitting there until something writes over it, the controller clears it, or the drive has physical damage.
That “something” can be pretty ordinary stuff: browser cache, system logs, swap files, app updates, temp files, and background processes. So if this is an external drive, unplug it for now. If it is your Mac’s internal drive, keep usage to a minimum and do not install recovery software onto that same volume.
Start with the easy, low-risk checks before scanning anything. Look in the macOS Trash. If the files were on an external drive, that drive may have its own hidden trash folder. Open the drive in Finder, press Shift + Command + Period to show hidden files, then check the .Trashes folder. If the files are there, you may be able to restore them with “Put Back.”
After that, check Time Machine if you had it enabled. Go back to a backup from before the deletion, pick the files you need, and restore them. A real backup is usually safer and cleaner than trying to rebuild deleted data from the live disk.
If there is no backup, then a recovery tool is the next step. Something like Disk Drill can scan common Mac formats like APFS and HFS+. These tools usually try two approaches: reading deleted file-system records when they still exist, and doing a raw scan for known file signatures. Raw scans can find files even when the folder structure is damaged, but you may lose original names and folder paths.
Be more careful if the drive seems unstable. Slow reads, random disconnects, I/O errors, or the drive only showing up sometimes can mean the media or hardware is failing. In that case, it is better to make a sector-by-sector or byte-for-byte image first, then scan the image instead of hammering the original drive over and over.
If the drive is clicking, grinding, spinning oddly, or repeatedly trying to recalibrate, stop. Do not keep powering it on and do not run long recovery scans. Those symptoms can point to mechanical problems like bad heads, motor issues, bearing failure, or platter damage. If the data matters enough, disconnect it and send it to a professional clean-room recovery service.
Whatever you recover, save it somewhere else. Do not write recovered files back to the same drive, because that can overwrite other data that might still be recoverable.
Once you get through this, set up backups so you are not stuck doing recovery again. Time Machine is good for local versioned backups, but it is worth having cloud or off-site backup too in case the Mac, drive, or whole location has a problem. Until then, keep the original drive untouched as much as possible and work from the least risky option toward the more advanced ones.
3 Likes
If the drive is encrypted with FileVault or it was used as a Time Machine/APFS volume, the “easy recovery” part depends a lot on whether macOS can still unlock and mount it. Before running any scanner, open Disk Utility and see whether the volume is listed but unmounted. If it asks to initialize, erase, repair, or reformat, cancel that. Trying “Mount” or “Unlock” is fine, but First Aid is a judgment call because it can change the file system while attempting repairs. I agree with @mikeappsreviewer about not writing to the drive, but I’d be even more cautious with a drive that only half-appears in Finder. Finder being confused does not always mean the files are gone. Sometimes the partition map, enclosure, cable, or USB hub is the problem. Try a different cable/port or direct connection first, then if it stays unstable, image it or get help before using Disk Drill or any other recovery app on the original disk.
Do not let macOS “initialize” the disk just because it offers to make the drive usable again. That dialog is basically macOS saying it cannot read the structure it expected, and accepting the wrong prompt can turn a recoverable mess into a worse one.
The missing piece here is that “not showing in Finder” is a pretty vague symptom. If Disk Utility still shows the physical device with a size that looks correct, that is a better sign than if the drive appears as 0 bytes, disconnects every few seconds, or only shows the enclosure name. Finder is the last layer. The drive can fail to show there because the volume is not mounted, the APFS container is damaged, permissions are weird, the enclosure is flaky, or the file system is actually corrupted.
I’d be a little more skeptical than @mikeappsreviewer about jumping straight to recovery software if the files are on an internal SSD. On modern Macs, deleted-file recovery from the internal SSD can be poor because of encryption and TRIM behavior. In that case, Time Machine, iCloud Drive/Desktop/Documents, local APFS snapshots, or another synced copy may beat any scanner. For an external HDD, recovery software has a better shot, especially if the disk is healthy and the problem is logical damage.
If you do scan, save the results to a different disk and expect some mess: duplicate files, missing names, broken folders, and previews that work for some files but not others. Disk Drill or similar tools can be useful, but they are not magic and they should not be used as a “repair” button. The safest path is still: confirm the drive is physically stable, make an image if the data matters, then scan the copy rather than the original.
Don’t treat a successful mount as permission to start “fixing” the disk. If it suddenly appears once after several failed attempts, the first job is not First Aid, permissions changes, Spotlight indexing, or cleaning up folders. Copy the most important files to another drive immediately, starting with the stuff you cannot replace. A lot of people burn their one good chance trying to make the drive look normal again.
A small thing that gets missed: don’t try to recover everything in perfect order at first. Grab the critical documents, photos, project files, keychains, accounting files, whatever matters most. Big media folders can wait. If the drive is dying, copying 500 GB of movies before your tax folder is a bad trade.
Disk Drill is fine once you are past the simple copy stage, but I’d use it as a recovery scanner, not as a repair tool. If the disk is stable and the problem is file-system damage, recovery may be fairly easy, though messy. If it is clicking, vanishing, showing the wrong size, or tied to an encrypted internal Mac SSD, “easy” may not be realistic. In that case, the safest move is still to clone or image first, then scan the copy, or stop and use a recovery shop if the files are worth more than the drive.