While we believe that this content benefits our community, we have not yet thoroughly reviewed it. If you have any suggestions for improvements, please let us know by clicking the “report an issue“ button at the bottom of the tutorial.
Today we’ll be going over the best Linux data recovery tools to help you recover any data that you might have lost. If you recently deleted the files, the possibility of recovering those files increases a lot.
But don’t lose hope if you’ve deleted the files long ago. There’s still a possibility that the file data is still present on your hard drive. So read on, you might as well be able to recover all the files that you’ve lost before!
There are very few things that you need to consider because most of the data recovery tools work in a similar manner by accessing the fragmented bits on your hard drive.
The major differences are usually in the ease of use, user interface, and features. So let’s go over the features and functionality of the top 20 best Linux data recovery tools in this article.
This is one of my favorite utilities. It’s a command-line based tool but is really easy to use and very interactive. The utility runs and starts working its magic by simply running the command.
We wrote a recent tutorial on the testdisk utility which walks you through the installation and the steps to recover files.
Some of the features of TestDisk:
Another really good command-line utility is Mondo Rescue which has a few unique features which are really helpful for people working on multiple different types of file systems. This is the one utility that has been used for decades to backup/restore/recover data from all types of storage devices tape drives too!
Some features of Mondo Rescue:
We’re still sticking with command-line utilities. This is a utility that was developed by GNU. This is a free and open-source utility like all the other utilities by GNU.
Some of the features of ddrescue:
This can work as a regular utility or as a bootable CD/USB that you can plug into any device, boot into the recovery utility, and start recovering data. The benefit of such a utility is that it is platform-independent allowing you to restore data for pretty much any operating system including Linux.
Some features of Redo Backup and Recovery:
This is another recovery utility by CGSecurity (the other one is TestDisk). PhotoRec was specifically created for recovering deleted photos and other graphic style media from SDCards, and hard drives.
Some of the features of PhotoRec:
If your operating system no longer boots and you need to recover files from your hard disk, this is the live CD to use. It can be used as a CD or a USB based on availability.
Some of the features of Boot Repair Live CD:
This is a forensic data recovery tool that is pre-installed in Kali Linux but can be installed on pretty much any other Linux distro. This tool can also recover data from images (like those created with the dd command).
Some of the features of Foremost:
Originally based on Foremost, Scalpel is another file carving utility that works on Windows and Linux. This utility also works on image files but has an added advantage of multithreading and asynchronous IO.
Some features of Scalpel:
This is more of a collection of tools than a tool in itself. If you are stuck in a situation where you’re not able to boot into your system, this is the one bootable recovery CD that will help you out.
Some features of SystemRescue CD:
Similar to the SystemRescue CD, Ultimate boot CD is a collection of diagnostic tools. But it doesn’t end at that. If you see the above screenshot, you’ll notice “Parted Magic” and “UBCD FreeDOS”. Yes, that’s exactly what it says.
The CD also packages these two operating systems which can be booted live from this menu to troubleshoot any of your Linux or Windows issues. The full list of tools and utilities packaged inside this CD are available on the website but here is a list of a few of the tools.
Some of the features of Ultimate Boot CD:
Now Knoppix is not your regular Linux recovery utility like the ones listed above. Though the entire purpose of this Linux distro was to be run live and recover lost data or operating systems, it is fully capable of being run as the sole operating system for your computer.
It comes packaged with almost all the tools you’d ever need to recover lost data.
Some of the features of Knoppix:
In some of the above Live CDs, we mentioned the GParted tool which is a GUI layer to the GNU Parted utility. Well, if all you want is the GParted tool for recovery, this live CD will solve your problem.
GParted Live is a live CD that gives you instant access to GParted if you want to recover a failing system or partition.
Some of the features of GParted Live:
The SafeCopy is one of the best Linux data recovery tools and works when all else fails. This tool is used for recovering data from damaged and bad sectors on a hard drive.
SafeCopy also tries to get as much data as possible from the source drive, even resorting to some device-specific low-level operations wherever applicable.
Some of the features of SafeCopy:
The grep utility that we use for finding text on the terminal output is powerful enough to also help us find lost text data. Have a look at the code sample below:
grep -a -A 400 -B 25 'string to find here' /dev/sdb1 > recover.txt
This is a command-line tool that is created for ext3 file systems for data recovery. With just two commands, you can recover and restore any deleted file that was recovered with this tool.
ext3grep --dump-name <drive> ext3grep --restore-all <drive> #Restored data is stored in this folder cd RESTORED_FILES
This is a command-line tool like many others in the list and is available from the package repositories for most Linux distributions.
Some of the features of ext4magic:
This utility has its roots in the code of ext3grep. The ext3grep utility used the disk journal to recover files and so does the extundelete. This utility searches the disk journal for old copies of an existing inode to find more details and collectively forms it into a file.
Some of the features of extundelete:
This is one of the best data recovery tools in Linux from the list. It has a free and a premium version but for personal use, it’s a completely free tool. It uses IntelligentScan technology that can recover severely damaged data too.
Some of the features of R-Undelete:
This is a script written to simplify the use of some of the complicated tools like Sleuthkit and PhotoRec and simplify them. Using these tools in combination also makes this script a more efficient method to extract more of the deleted inodes correctly.
Since this is a script that combines the functionality of multiple tools, the functionality is similar to the tools themselves.
This is a tool that’s made specifically for forensic investigators to perform analysis on hard drives and collect evidence. So the Sleuth Kit uses very efficient and advanced algorithms to extract as much deleted data as possible from hard drives.
The previous tool that we talked about “ext3undel” leverages technology from the Sleuth Kit but if you would like to use this tool as a standalone one, you can use it along with it’s GUI front-end “Autopsy”
Some of the features of The Sleuth Kit:
We hope you found the right tool for your data recovery needs with this article. For a basic user, pretty much any tool from the list will work. But for people who’ve special needs with file recovery, they need to find the one that has the features that they need.
Always remember though, these tools try to recover files that have been deleted based on the metadata that still remains. But that’s not a guarantee of recovery so it’s always best to have backups of all the data that’s being stored.
If you’ve enjoyed this tutorial and our broader community, consider checking out our DigitalOcean products which can also help you achieve your development goals.