1. How data is stored on a hard drive
A hard drive stores data as magnetised regions on a thin, rigid platter spinning at 5,400 to 7,200 revolutions per minute. The platter is coated with a high-coercivity magnetic material. A write head switches the magnetisation of tiny areas between two directions, and that direction is read back as a 1 or a 0.
Two properties of this arrangement drive everything else:
- The data is physical, not logical. It exists as a magnetisation pattern on a surface. Software commands can only ask the drive to change that pattern; they cannot make the pattern stop existing.
- The medium is engineered to resist strong fields. That is the point of high-coercivity materials — they hold their magnetisation against stray fields, heat and time. Which is precisely why a degausser has to be stronger than a normal erase, and why field strength is the headline specification.
2. Why delete, format and secure-erase fall short
All three software approaches depend on the drive's own controller and firmware doing exactly what they are told. That is the weakness:
- Delete / recycle bin. Removes the directory entry. The data stays on the platters, often for months, until something else overwrites it. Trivially recovered with any file-carving tool.
- Full format. Rewrites the surface, but historically left residual data in slack space, host areas, reallocated sectors and the backup boot sector. Modern formats are better; forensic recovery of formatted drives is still a routine commercial service.
- Secure erase (ATA Sanitize, Parted Magic, vendor tools). Issues overwrite or block-erase commands. It is a good practice, but it requires the drive to be healthy and the firmware to be honest.
3. What the degaussing pulse does
Inside the machine is a coil driven by a high-voltage capacitor bank. On a cycle, the capacitor discharges through the coil, generating a magnetic field far stronger than any write head inside the drive — 1 Tesla (10,000 Gauss) on the Proton T-1, rising to 2 Tesla (20,000 Gauss) on the T-5.
That field overwhelms the coercive threshold of the platter material. The magnetised regions are re-randomised: domains that pointed one way are now scattered in arbitrary directions. The original bit pattern, and any pattern layered over it, no longer exists as an organised sequence. The drive will not spin up, will not be detected, and will not re-format into anything.
It is worth being precise about what "randomised" means. It does not mean the drive is blank — it means the magnetic orientation of every domain is now uncorrelated, so there is no longer a signal to read. A forensic lab reading that platter gets noise, not data.
4. Why bi-directional beats single-pulse
A single-polarity pulse pushes every domain the same way. That is a strong sanitisation, but it leaves the media sitting in a strong, uniform field state. A bi-directional pulse alternates: a strong positive field, then a strong negative field, of comparable magnitude. Domains are driven in both directions, which produces far better decorrelation for the same cycle time.
This is what the Proton T-4's patented "Reverse Polarity" design does — 20,000 Gauss positive and 20,000 Gauss negative, fully automatic. The T-4 is the NSA EPL-listed machine built on that principle.
5. Anatomy of a degauss cycle
- Load. Media goes into the drawer (T-1, T-1.2, T-1.5) or the slot (T-4, T-5). The T-1.2 and T-1.5 drawers accept multiple drives at once, including server drives with sleds still fitted. The wand models are swept over the media by hand.
- Close and interlock. The drawer closes or the slot is occupied, so the cycle cannot run with the coil exposed. On the drawer models the machine will not pulse with the drawer open.
- Pre-cycle check. The control electronics verify capacitor voltage, switch state and interlock status. On the T-1.5, any parameter that would compromise the pulse prevents the "Go" indicator from appearing, so a weak cycle cannot be approved.
- Discharge. The capacitor bank dumps its energy through the coil, producing the field. The pulse is what performs the destruction; the cycle time is how long it takes to do it properly.
- Report. The LCD shows cycle progress, then a success notification. The T-1.2 reports field strength per cycle on a touchscreen; the T-4 reports it from an internal Gaussmeter; the T-5 increments a digital cycle counter.
- Unload and log. The media comes out, now sanitised. Record the asset tag, serial number, date, machine, verification result and operator in the destruction register.
- Destroy (if policy requires). Feed the sanitised drive into a PDS-30, PDS-75 or PDS-100 for physical destruction, so it cannot be re-assembled or re-imaged.
6. Verification and reporting
Because a degausser that has drifted out of specification will still cheerfully report success, verification is the difference between a compliant process and a false assurance. Proton's range offers four levels of evidence:
| Model | Evidence produced per cycle | Suitability for audit |
|---|---|---|
| T-1 | LCD progress and success notification with Gauss / Tesla rating | Adequate for commercial use |
| T-1.2 | LCD touchscreen reporting field strength of every cycle | Strong |
| T-1.5 | Pre-cycle software interlock; "Go" only appears when all parameters are in tolerance | Strong — an under-strength cycle cannot be approved |
| T-4 | Internal Gaussmeter with LCD field-strength readout per cycle | Strongest — removes the need for a separate instrument or re-certification programme |
| T-5 | Digital cycle counter plus LCD status display | Strong — a running destruction log |
| 1100 wand | Operator procedure and register entry | Adequate with a disciplined register |
7. Tapes and other magnetic media
Anything with a magnetic recording layer can be degaussed, and the drawer and slot models are sized to take it: LTO, DLT, DAT and DDS cartridges, 9-track tape, floppy disks, magnetic cards, and on the wand models, disk packs and drum memories up to 5,000 Oersteds.
Backup tape deserves particular attention in Indian organisations. It is a complete copy of production, it routinely sits off-site in racks nobody audits, and its retention is usually "forever" because nobody owns it. See tape degaussing in India.
8. Where it does not work
A degausser has exactly one limitation, and it is a large one: it does nothing to flash memory. SSDs, M.2 and NVMe modules, pen drives, memory cards, smartphones, SIM cards, credit cards and optical media store data in non-magnetic layers. A degauss cycle leaves them completely readable.
For those, physical destruction is the only answer — the Proton PDS-88 shredder, or the PDS-30 with the SSD kit for low volume. This is why we now recommend a two-machine cell rather than one: a degausser for magnetic media, a shredder for everything else. The SSD destruction methods page covers this in detail.