How to extract data from a laptop hard drive: a step-by-step guide for all cases

When a laptop stops working and important documents, photos or projects remain on its hard drive, panic is a natural reaction. But even if the device does not turn on, is broken or blocked, the chances of saving the data remain high. In this article we will look at all possible ways to extract information from a laptop HDD or SSD - from basic (connecting to another computer) to advanced (restoring after formatting).

It is important to understand: the method depends on the condition of the drive and the cause of the malfunction. For example, if the laptop simply won’t boot due to a Windows crash, all you need to do is connect the drive as an external one and copy the files. And if the HDD is physically damaged (knocking, not detected in the BIOS), you will need special tools or professional help. We will consider all scenarios - from the simplest to the most complex, with step-by-step instructions and warnings about common errors.

1. Preparation: what to do before extracting data

Before you begin manipulating your hard drive, follow a few critical steps. This will protect you from data loss or additional damage.

Determine the drive type on your laptop:

• 🔍 HDD (hard drive) - mechanical, with rotating plates. Sensitive to shock and vibration.
• 💾 SSD (solid state drive) - no moving parts, but can fail due to overheating or power surges.
• 🔌 M.2 NVMe - a compact SSD connected via a connector on the motherboard (often in ultrabooks).

The type of drive affects the connection method and the risks of damage. For example, HDD should not be shaken or dropped, but M.2 SSD requires careful removal from the slot.

⚠️ Attention: If the laptop has been spilled with liquid or has been subjected to physical impact (shock, fall), do not turn it on or connect the drive to another PC without first drying it (at least 48 hours in rice or silica gel). A short circuit can permanently damage the drive board.

Also prepare your tools:

• ⚒️ Screwdriver (usually Phillips PH0 or PH1 for laptops).
• 🔌 Adapter SATA-to-USB (for HDD/SSD 2.5") or M.2-to-USB (for NVMe).
• 🖥️ A second working computer (PC or other laptop) with a free USB port.
• 📦 Container for screws (if the disk is removed from the case).

If you plan to recover deleted files, download programs like R-Studio, Recuva or TestDisk (more about them in the section on recovery).

2. Method 1: Connect the drive to another computer

The simplest and safest method is to connect the laptop hard drive to another PC as an external drive. This will work if:

• 💻 The laptop does not turn on, but the disk is physically intact.
• 🔄 Windows does not boot (blue screen, cyclic reboot).
• 🔒 The laptop is locked with a password (if the files are not encrypted BitLocker).

Instructions for HDD/SSD 2.5":

1. Disconnect the laptop from power and remove the battery (if it is removable).
2. Unscrew the back cover (usually it is enough to remove the HDD bay panel).
3. Carefully remove the disk by disconnecting it from the connector SATA.
4. Connect the drive to the adapter SATA-to-USB and insert it into the USB port of another PC.

For M.2 NVMe:

1. Remove the bottom cover of the laptop (you may need to disconnect the cables).
2. Find a slot M.2 (usually next to the RAM) and carefully remove the SSD by unscrewing the screw.
3. Insert the disk into the adapter M.2-to-USB (make sure the adapter supports the protocol NVMe, and not just SATA).

⚠️ Attention: If after connecting the disk is not detected in the system (Disk management on Windows or Disk Utility on macOS), do not format it! This may be due to file system corruption. Try using utilities like CrystalDiskInfo (will show the health status of the disk) or DiskPart (command list disk on the command line).

If the disk is recognized, but files cannot be opened due to access rights (especially true for system folders like Users), take ownership of the folder:

icacls "Путь_к_папке" /takeown /T /C /Q
icacls "Путь_к_папке" /grant Администратор:F /T

This command must be executed in Command line as administrator.

3. Method 2: Using Live-CD/USB (if the disk cannot be ejected)

If the laptop turns on but does not load the OS, or you cannot physically remove the disk (for example, in ultrabooks with a sealed SSD), this will help Bootable USB flash drive with Live system. This is a temporary OS that runs from USB and allows you to access files on the internal drive.

Popular Live systems for data recovery:

• 🐧 Ubuntu Live CD - simple interface, supports NTFS/ext4.
• 🔧 Hiren’s BootCD PE — a set of utilities for diagnostics and recovery.
• 🛠️ SystemRescue - a specialized distribution for working with disks.

Download the image from the official website and burn it to a flash drive using Rufus or BalenaEtcher.

Step by step instructions:

1. Insert the flash drive into the laptop and log in BIOS (usually the key F2, Del or Esc when turned on).
2. In the section Boot Set USB boot to first.
3. Save the settings and reboot. Select mode Live Session (without installation).
4. After loading, the desktop will open. Connect an external drive (flash drive or HDD) to copy files.
5. Locate the laptop's internal drive (usually mounted as /media/ubuntu/...) and copy the data.

⚠️ Attention: If the disk is encrypted BitLocker (relevant for Windows 10/11 Pro), the Live system will not be able to read it without a recovery key. The key can be found in your Microsoft account (if the laptop has been linked) or on the printout generated when you enable encryption.

4. Method 3: Recovering deleted or damaged files

If files have been deleted, the disk is formatted, or the file system is damaged, you will need recovery programs. They scan the disk at the sector level and recover data using signatures (for example, .jpg, .docx).

Top 3 programs for recovery:

Program	File system support	Scan depth	Price
R-Studio	NTFS, FAT32, exFAT, ext4, APFS	Complete (including damaged partitions)	From $79.99
Recuva	NTFS, FAT32, exFAT	Fast/deep	Free (Pro - $19.95)
TestDisk	Any (works with partition tables)	Low level	Free

Instructions for R-Studio (most powerful tool):

1. Connect the problematic drive to a working PC.
2. Run R-Studio and select your drive from the list.
3. Click Scan and specify the parameters:
   • Scan Type: Complete (longer, but more effective).
   • File systems: check NTFS And FAT.

After scanning, the program will show the found files. Mark the ones you need and click Restore.

Save the data to another drive (not the one you are scanning!)

What to do if the program does not find files?

If the scan does not produce results, try:

• 🔄 Repeat scanning with other parameters (for example, enable search by signatures).
• 🔧 Check the disk for bad sectors (chkdsk /f on Windows or badblocks on Linux).
• 💽 Connect the drive to another controller (for example, via USB-SATA docking station).

If the drive makes clicking noises or is not detected, further repair attempts may worsen the damage. In this case, contact the laboratory (recovery costs start at $300).

5. Method 4: Retrieving data from a damaged or faulty drive

If the disk not detected in BIOS, knocking, getting hot, or making unusual noises are signs of physical damage. In such cases, standard methods will not work, but there are several options:

Option 1: Freezing HDD (only for mechanical drives)

• ❄️ Place the disc in an airtight bag and put it in the freezer for 2-3 hours.
• 🔌 Quickly connect it to your PC and try to copy the data.
• ⏳ You will have 10-20 minutes until the disk warms up.

⚠️ Attention: This method only works for HDD with jammed heads or overheating of the board. For SSD it is useless and can cause harm. Also, do not use it if there is moisture on the disc - this will lead to corrosion.

Option 2: Replacing the controller board (for HDD)

If the disk shows no signs of life, but has not been subject to physical damage, the problem may be in the controller board. In this case:

1. Find an identical board from the donor disk (the model must match completely, including the revision).
2. Carefully re-solder the chip ROM from the original board to the donor one (this is critical, since it stores unique adaptive data).
3. Connect the drive and try reading the data.

This method requires soldering skills and is only suitable for HDD (y SSD the controller is sealed and non-removable).

Option 3: Contact the laboratory

If the disk contains critical data (for example, corporate documents or family archives), and attempts on your own are unsuccessful, contact a specialized laboratory. The cost depends on the complexity:

• 💰 Logical damage (deleted files, formatting): $100–$300.
• 🛠️ Physical damage (head replacements, clean rooms): $500–$2000+.

Large laboratories (eg. DriveSavers, Ontrack) provide a guarantee of recovery and confidentiality.

6. Method 5: Extract data from an encrypted drive (BitLocker, FileVault)

If the laptop used encryption (BitLocker on Windows or FileVault in macOS), simply connecting the drive to another PC will not help - the data will be inaccessible without the key. Here's what to do in such cases:

For BitLocker (Windows):

• 🔑 Find the recovery key:
  • In your Microsoft account: link.
  • In a printout (if saved during setup BitLocker).
  • B Active Directory (for corporate PCs).
• 🖥️ Connect the drive to another PC running Windows 10/11 Pro. When prompted for a password, select Additional options → Enter recovery key.

For FileVault (macOS):

• 🔐 If you remember your account password, connect the drive to another Mac, and the system will automatically unlock it after entering the password.
• 📝 If your password is lost, but you have recovery key (24-digit code), use it in Disk Utility.
• 🚫 Recover data without key or password impossible - even in laboratories.

⚠️ Attention: If the laptop is stolen or lost and the drive is encrypted, the likelihood of third parties retrieving the data is minimal. However, in case BitLocker with a key in a Microsoft account, an attacker can gain access by resetting the account password. For maximum security, disable your device from the trusted list in Microsoft Settings.

7. Common mistakes and how to avoid them

When trying to save data, users often make critical mistakes that lead to irretrievable loss of information. Here are the most common:

Error 1: Formatting the disk when prompted by the system

If Windows or macOS prompts you to format the drive when connecting, never agree. This erases the file system table and makes recovery more difficult. Instead:

• 🛠️ Use TestDisk to restore the partition.
• 🔍 Check your disk for errors via chkdsk /f (Windows) or fsck (Linux/macOS).

Error 2: Saving recovered files to the same drive

When restoring data, always save it to another physical drive. Writing to the same disk may overwrite files that have not yet been recovered, reducing the chances of success.

Mistake 3: Using dubious programs

Avoid pirated versions R-Studio, EaseUS and other utilities. They can:

• 🦠 Contain viruses or mining software.
• 🔧 It is incorrect to restore files (for example, trim them).
• 📉 Limit functionality (for example, do not show files larger than 1 GB).

Use either official versions or proven free analogues (PhotoRec, TestDisk).

Mistake 4: Ignoring Signs of Physical Damage

If disk:

• 🔊 Makes repeated clicks ("cry of death").
• 🌡️ It gets very hot or smells like burning.
• 🖥️ Not detected in BIOS, but the LED is on.

Turn it off immediately and contact the laboratory. Further attempts to turn on will worsen the damage.

8. Prevention: how to avoid data loss in the future

The best way to avoid losing data is regular backups. Here is a minimum set of rules for protecting information:

Rule 1: 3-2-1 Principle

• 💾 3 copies data: original + 2 backup.
• 🖥️ 2 media types: for example, external HDD + cloud.
• 🌍 1 copy outside the home (fire/theft protection).

Suitable for automation Acronis True Image, Macrium Reflect or built-in tools (File source on Windows Time Machine on macOS).

Rule 2: Monitor disk health

Use utilities to monitor HDD/SSD status:

• 📊 CrystalDiskInfo (Windows) - shows S.M.A.R.T.-parameters.
• 🍎 DriveDX (macOS) - analyzes SSD wear.
• 🐧 smartctl (Linux) - command utility from the package smartmontools.

Critical parameters for HDD:

• Reallocated Sectors Count - if it grows, the disk will soon fail.
• Current Pending Sector — bad sectors awaiting reassignment.

For SSD pay attention to:

• Wear Leveling Count — cell wear.
• Program Fail Count - recording errors.

Rule 3: Protection against encryption ransomware

• 🛡️ Install an antivirus with ransomware protection (Kaspersky Internet Security, Bitdefender).
• 🔒 Disable macros in office documents from unverified sources.
• 📂 Keep your backups in read-only (for example, on NAS with write protection).

FAQ: Frequently asked questions about data extraction

🔹 Is it possible to extract data from the disk if the laptop does not turn on at all (even the indicators do not light up)?

Yes, if the problem is with the motherboard and not with the drive itself. Remove the drive and connect it to another PC via an adapter SATA-to-USB or M.2-to-USB. If the disk is not detected, check it on another controller or contact a laboratory.

🔹 The laptop asks for a BIOS password, and I don’t remember it. How to get around?

There are several ways to reset the BIOS password:

• 🔋 Remove the battery CMOS on the motherboard for 10–15 minutes (the laptop must be disconnected from the network).
• 🔧 Use universal passwords for your BIOS model (for example, for Phoenix BIOS it could be phoenix or BIOS).
• 💻 Connect the drive to another PC - the BIOS password does not block access to data at the file system level.

Attention: On some laptops (eg Lenovo ThinkPad) BIOS reset may lock the drive due to the function Secure Boot. In this case, you will need an official key from the manufacturer.

🔹 The disk is detected, but the files cannot be opened - it says “The file or folder is damaged.” What to do?

This is a sign of file system corruption. Try:

1. Run disk check:
   • On Windows: chkdsk X: /f (where X — drive letter).
   • On Linux/macOS: fsck /dev/sdX.

If the test does not help, use R-Studio to recover files based on signatures.

For documents (.docx, .xlsx) try opening them through LibreOffice - it copes better with damaged files than Microsoft Office.

🔹 Is it possible to recover data from an SSD after the command secure erase?

No. Team secure erase (or ATA Secure Erase) completely erases all cell-level data, including spare areas. This is an irreversible process, and no program can restore the files. The function works similarly Trim on Windows/macOS - it clears deleted files without the possibility of recovery.

Exception: If secure erase was interrupted (for example due to a power failure), some data may remain. In this case, low-level scanning will help R-Studio.

🔹 How much does data recovery cost in a laboratory?

The cost depends on the type of damage and urgency:

Type of damage	Cost (USD)	Deadlines
Logical errors (deleted files, formatting)	$100–$300	1–3 days
File system corruption	$300–$600	3–5 days
Replacing HDD heads	$600–$1200	5–10 days
Restoration after fire/flood	$1000–$3000+	1–2 weeks

Large laboratories (eg. DriveSavers, Ontrack) provide free diagnostics and a guarantee on results. Popular in Russia Data Recovery And Kaspersky Lab.