Skip to content 
NVMe Format und NVMe Sanitize
In brief
NVMe Format and NVMe Sanitize are commands of the NVMe standard with which an NVMe SSD erases its stored data itself. Format with an erase option removes the data of one or all namespaces; Sanitize treats all user data of the drive, including caches and spare areas. For IT asset disposition, these commands are what is colloquially called "NVMe Secure Erase" for NVMe SSDs.
What is NVMe Secure Erase?
For SATA drives there is the ATA command Secure Erase. NVMe SSDs use their own command set with two tools:
| Command | Options | Effect |
|---|---|---|
| Format NVM with erase setting | User Data Erase or Cryptographic Erase | Erases user data of one namespace or all namespaces, depending on the drive |
| Sanitize | Block Erase, Crypto Erase, Overwrite | Erases all user data in the drive, including in caches and unallocated areas; resumes after an interruption |
Sanitize was introduced in 2017 with NVMe 1.3 and is more thorough than Format. The drive itself reports which options it supports. Crypto Erase replaces the internal key, see Crypto Erase.
Use in practice
Under certain conditions, the US guideline NIST SP 800-88 assigns Sanitize commands to the "Purge" category, that is, methods intended to withstand even sophisticated recovery attempts. What matters is that the command is executed completely, the result is verified and documented for each drive. An aborted or unsupported command must not count as erasure. More on the selection of methods can be found in the guide Securely erasing hard drives and SSDs.
Second IT erases SSDs using Blancco software and issues a digitally signed erasure certificate for every device. Data carriers that cannot be erased are destroyed in-house in accordance with DIN 66399.
Frequently asked questions about NVMe Format and Sanitize
Is NVMe Format the same as formatting in Windows?
No. Formatting in the operating system only creates a new file system. NVMe Format with an erase setting is a command to the drive that erases the stored user data itself.
Which is more thorough: Format or Sanitize?
Sanitize. It covers all user data in the drive, including caches, and resumes after a power failure.
Does every NVMe SSD support Sanitize?
No, Sanitize is optional. Which erase commands are available can be read from the drive's identification data.
What is NVMe Secure Erase?
The term is used colloquially for the erase commands of the NVMe standard. It refers to NVMe Format with an erase setting and NVMe Sanitize. The counterpart for SATA drives is the ATA command Secure Erase.
What happens if an NVMe Sanitize command is interrupted?
Sanitize continues after an interruption, for example a power failure. Even so, an aborted or unsupported command must not count as erasure. Verifying the result and documenting each drive are decisive.
Securely erase NVMe SSDs – with a certificate for each device.
Send us your device list. You will receive your offer in 48 hours on average.