You realise a folder is missing, your laptop asks to format a drive, or an external hard drive starts clicking just when you need an invoice or family photos. The next few minutes can make a real difference. Knowing what to do before data recovery helps protect the files that may still be recoverable and prevents a small problem from becoming permanent data loss.
The first rule is simple: stop using the affected device or drive where practical. Do not keep saving files, installing recovery software, or repeatedly restarting a device that is behaving strangely. Data recovery is often possible because deleted or inaccessible files have not yet been overwritten. Continued use reduces that chance.
What to do before data recovery: stop and assess
Before trying fixes, take a moment to identify what has happened. The right response depends on whether files were deleted, a drive has been formatted, the computer will not start, or the storage device has physical signs of failure.
If you have simply deleted files, check the Recycle Bin or Trash first. Also check whether the files are stored in a cloud service with a deleted-items folder or version history. This is the safest outcome because restoring from there does not involve recovery tools or work directly on the affected drive.
If a USB drive, external hard drive or memory card has suddenly appeared empty, do not format it when prompted. A format may be useful later in some cases, but it is not the first step when the contents matter. Likewise, do not accept messages that offer to repair, scan or initialise a disk until you know what they will change.
For a small business, establish whether the missing information exists elsewhere before treating it as a recovery job. A staff member may have a local copy, an email attachment may contain an earlier version, or a cloud backup may be available. Restoring a clean copy is usually quicker, safer and more affordable than recovering data from a failing device.
Stop writing new data to the affected drive
When a file is deleted, the computer often removes its reference to the file rather than immediately erasing every part of it. The space is marked as available for new data. Saving even a few files can overwrite that space.
This is why installing recovery software on the same drive is risky. If your Windows laptop has lost files from its internal drive, downloading and installing a recovery program there could overwrite the very data you are trying to retrieve. If you decide to use recovery software, use another working computer where possible, and save any recovered files to a separate external drive.
The same principle applies to phones, cameras and memory cards. Stop taking photos, recording video, downloading apps or updating the device. On modern solid-state drives and many phones, deleted data can become unrecoverable more quickly due to background storage management. Acting promptly matters, but rushing into random fixes does not help.
Do not keep restarting a failing device
A drive that makes clicking, grinding, beeping or repeated spin-up noises may have a mechanical fault. A laptop that freezes during startup, an external drive that disconnects repeatedly, or a device that becomes unusually hot can also indicate hardware trouble.
In these situations, switch it off and disconnect it safely. Repeated power cycles can place extra stress on a failing drive and may make recovery more difficult. Do not open the drive casing, put it in a freezer, tap it, or try online tricks involving cables and improvised repairs. These methods can cause additional damage and are unlikely to produce a reliable result.
A quiet drive can still be faulty, so noise is not the only warning sign. If a drive is slow, folders take a long time to open, files are corrupted, or the system asks to initialise it, treat it carefully. Avoid running repair utilities such as CHKDSK until you have considered recovery. Repair tools can make changes to the file system, which may complicate later recovery work.
Check your backups without changing the original
Backups are the best-case scenario, but check them carefully. Confirm that the backup contains the specific files you need and that they open correctly. It is easy to assume a backup has run successfully when it has not included a particular folder, user profile or external drive.
Look in your usual backup locations, such as a separate external drive, cloud storage, email attachments or business software exports. If you use Microsoft 365, Google Drive, iCloud or another cloud platform, check file history and deleted-item retention. For business records, also check whether your accounting, point-of-sale or customer management system has its own backup or export option.
Do not overwrite the affected files with an older backup until you know exactly what is missing. It may be better to copy the backup to a different location first, then compare dates and versions. This protects both the original device and the backup while you decide the next step.
Record what happened
A few clear notes can save time and help a technician choose the safest approach. Write down when you last saw the files, what happened immediately before the issue, and every action already taken. For example, note whether a drive was dropped, whether a power cut occurred, whether files were deleted accidentally, or whether the computer displayed a specific error message.
Take photos or screenshots of error messages if you can do so without repeatedly opening the affected drive. Record the device type, operating system, drive size and connection type if known. For an external drive, keep its cable and power adaptor with it. A faulty cable can sometimes look like a failed drive, and having the original accessories makes testing easier.
For a workplace device, note whether the data may include customer information, financial records or confidential documents. This affects who should approve access, where recovered data can be stored and how it should be handled. Recovery should not create a privacy problem while solving a data problem.
Choose the right recovery route
There is no single answer for every loss event. A recently deleted document from a healthy drive may be suitable for a cautious software-based recovery attempt. A drive with physical symptoms is better assessed before anyone tries to scan it. A laptop that will not boot may still have intact data, but the drive should be checked rather than assuming the files are gone.
Be particularly careful with encrypted devices. BitLocker, FileVault and encrypted external drives may require a recovery key, password or access to the original user account. Find these details before recovery begins, but do not share passwords casually. A trusted technician can explain what is needed and use an appropriate secure process.
RAID systems, NAS devices and business servers need extra care. Removing disks, changing their order or allowing the system to rebuild automatically can make matters worse. If business-critical data is involved, pause work on the system and seek help before attempting repairs.
Prepare for a safe handover
If you need assistance, keep the affected device, its charger, cables and any relevant backup drive together. Tell the technician what data matters most. Perhaps it is the latest job quotes, a photo library, a MYOB file, email archives or a particular project folder. Priorities help focus the assessment and can reduce downtime.
Ask where recovered files will be saved and whether you need to supply a new external drive. Recovered data should normally be written to a different device, not back onto the drive being recovered. It is also reasonable to ask about likely costs, timeframes, privacy handling and whether recovery is a best-effort process. No honest provider can guarantee every file will be restored, especially after physical damage or extensive overwriting.
For Wellington, Hutt Valley and Porirua households and small businesses, Tech Experts can assess common data-loss situations on-site or through suitable remote support. The goal is to give you a clear next step without adding unnecessary risk or disruption.
When data matters, resist the urge to keep trying things until something works. Preserve the device, protect your backups and get a careful assessment. That calm first response often gives your files their best chance of coming back.