My Mac’s APFS drive is no longer accessible, and I don’t have a Time Machine backup to restore from. I’m trying to figure out the safest APFS data recovery options before I risk overwriting anything or making the problem worse. What tools or steps should I try first?
If this is APFS data loss, the main thing is to stop touching the drive. Don’t install apps on it, don’t copy new files to it, don’t try a bunch of repair commands just to see what happens. Deleted files and lost partitions can still be recoverable for a while, but every write to that drive can make things worse.
I ran into this a few months back after deleting a whole project folder on my MacBook with no Time Machine backup. I figured it was gone, but I ended up getting almost all of it back.
Before using recovery software, check the easy stuff first:
- Look in the Trash.
- Check Time Machine if you have backups.
- Open Time Machine even if your backup disk was not plugged in. APFS can keep local snapshots, so macOS may still have a recent copy sitting there. They usually only stick around for about a day, depending on free space.
If that doesn’t turn anything up, I’d go straight to recovery software rather than messing with repairs first.
I used Disk Drill because it actually understands APFS and isn’t only doing basic file-signature scanning.
What I did was pretty simple:
- Downloaded Disk Drill to a different drive, not the one I was recovering from.
- Went to System Settings > Privacy & Security > Full Disk Access and gave Disk Drill permission, since APFS system volumes need that for a proper scan.
- Selected the affected APFS drive.
- Ran the full Search for Lost Data scan.
- Waited for the scan to finish instead of stopping it early.
- Previewed the recovered files before restoring them.
- Saved the recovered data to an external SSD, not back onto the Mac.
The useful part was that a lot of my folders came back with the original names and folder structure intact. That matters a lot when the alternative is digging through thousands of randomly named files. Disk Drill also has SMART monitoring, which is handy if you suspect the drive is failing. If the drive seems unstable, making a disk image first and recovering from that image is usually safer than repeatedly scanning the original drive.
If you lost an entire APFS partition, I’d still recover the files you care about before trying to fix the partition table. TestDisk can sometimes rebuild damaged partition info, but it’s text-based and not very forgiving if you don’t know exactly what you’re changing. Recover first, repair later is the safer order.
Also keep TRIM in mind if this is an SSD. Modern Macs clean up deleted blocks in the background, and once TRIM has cleared them, recovery software can’t bring that data back. That’s why shutting down or at least stopping use right away matters. Old-school hard drives don’t work the same way, so accidental deletions on HDDs often have better recovery odds.
If Disk Drill can find the files and the previews look right, that’s a good sign.
But if the Mac can’t detect the drive, it keeps disconnecting, you hear clicking, or the APFS container looks seriously corrupted, I wouldn’t keep poking at it with DIY tools. At that point a professional recovery lab is the safer route. Many of them do free evaluations and work on a no data, no fee basis, though it’ll obviously cost more than software.
Best case, this is just a deleted folder or a damaged APFS partition. Those are the cases where software recovery has a decent shot, especially if you stop using the drive quickly.
1 Like
A long scan can be the thing that finishes off a weak SSD or flaky external enclosure. If the drive is disconnecting, running hot, or mounting only sometimes, make an image/clone first and scan that with Disk Drill or whatever tool you choose. If it is stable, software recovery is fine, but if it is physically unstable, every retry is spending chances.
Do not click Initialize, Erase, or First Aid just because Disk Utility offers it. That prompt is macOS saying “I don’t understand this volume,” not “I know how to safely fix it.” First Aid can be fine on a backed-up disk, but on a no-backup APFS volume it can change metadata and make recovery messier.
The missing detail here is encryption. If the APFS volume had FileVault on, make sure you still have the Mac login password, recovery key, or whatever credential was used for that volume. Recovery software can scan all day, but encrypted APFS without the key is usually just unreadable noise. Same goes for an external APFS disk that was encrypted when formatted.
I’d treat it like this: first see whether the physical device is stable, then make a byte-for-byte image if the data matters, then scan the image. Disk Drill or similar tools are reasonable for the scan part, but they are not magic repair buttons. If the previews are good, recover to a different disk. If the files show up as junk, the folder tree is gone, or the drive drops offline during imaging, stop trying to “almost fix it” and decide whether the data is worth lab money. The worst cases are usually made worse by lots of half-repairs before the real recovery attempt.
First Aid is not recovery; it is a repair attempt. That distinction matters because a “successful” repair can still leave you with fewer recoverable files than you had before. I agree with the general advice above about imaging first, but I’d be even stricter if this is the internal drive you normally boot from.
If the Mac still boots from that same APFS disk, stop using it as your working system. macOS is constantly writing logs, swap, Spotlight data, app caches, browser files, and update junk in the background. Even “just downloading a recovery app real quick” can overwrite deleted file records or free blocks you were hoping to recover. Use another Mac, boot from an external drive if you already have one, or use Recovery/Share Disk/Target Disk Mode depending on the Mac model. The goal is to look at the bad disk without making it the active scratchpad for the operating system.
The other thing people sometimes forget is that APFS is a container with volumes inside it. Seeing one volume missing in Finder does not always mean the whole physical disk is dead. Disk Utility in “Show All Devices” mode, or diskutil list, can tell you whether the physical device, APFS container, and volumes are still visible. Don’t run repair commands from there, but the information helps you decide whether you’re dealing with deletion, a damaged APFS volume, a missing container, encryption, or actual hardware trouble.
Disk Drill is a reasonable next step for scanning, but I’d treat it as a file extractor, not a fixer. If it finds your folder tree and previews files correctly, recover the important stuff to a different drive first. Don’t waste time trying to restore the whole Mac exactly as it was. Get the irreplaceable data out in priority order: documents, photos, projects, mail exports, whatever matters. After that, you can think about reinstalling macOS or reformatting.
If this is a modern Mac with soldered internal storage and the machine itself is failing, the DIY window can be pretty small. You can’t just pull the SSD and stick it in a dock like an old laptop drive. In that case, repeated boot attempts and random repair tools are not harmless testing. If the files are worth more than the recovery bill, stop at the image-or-lab decision point rather than turning a recoverable APFS problem into a partially overwritten one.