Nvme Format Secure Erase [better] -

After the process completes, the drive will report that it is unallocated. You can verify the wipe by attempting to read raw sectors or simply checking the SMART data to ensure the drive reports a clean state.

For absolute forensic-proof erase (including metadata, caches, and possibly overprovisioning area), NVMe also has a command ( nvme sanitize ), which is more thorough than format secure erase — but takes longer. nvme format secure erase

For system administrators and power users, the nvme-cli tool is the standard. After the process completes, the drive will report

The NVMe specification includes a native command specifically designed for sanitization: . For system administrators and power users, the nvme-cli

blkdiscard or nvme dsm (Dataset Management) only unmap logical blocks — data may still be recoverable via NAND reads. Secure erase via format works at the controller/firmware level.

This leaves "ghost" data in previously used blocks, creating a security hole.