How to Use Windows File Recovery to Restore Lost Files

Accidentally deleted an important file? Whether it disappeared from your Downloads folder or vanished from an external drive, Windows File Recovery is Microsoft's official command-line tool designed to dig into your storage and retrieve files that standard deletion has removed. It's free, built by Microsoft, and available directly from the Microsoft Store — but it's not a point-and-click experience. Understanding how it works, what it can actually recover, and where its limits sit will save you time and frustration before you ever open a command prompt.

What Is Windows File Recovery?

Windows File Recovery (winfr) is a free utility released by Microsoft for Windows 10 (version 2004 and later) and Windows 11. Unlike third-party recovery tools, it runs entirely through the Windows Command Prompt and uses raw scanning techniques to locate file data that hasn't yet been overwritten on your drive.

When you delete a file, your operating system doesn't immediately erase the data — it marks that space as available for reuse. Windows File Recovery works by scanning that "available" space before new data writes over it. The longer you wait after deletion, the lower your recovery odds become, especially on a heavily used drive.

System Requirements and Where to Get It

Before diving in, confirm your setup meets the basics:

🔑 One critical rule: never recover files to the same drive you're recovering from. Doing so risks overwriting the very data you're trying to restore.

The Two Recovery Modes Explained

Windows File Recovery operates in two primary modes, and choosing the right one depends on your file system and how the deletion happened.

Regular Mode

Regular mode is faster and works best when:

• The file was recently deleted
• The drive uses NTFS (the default file system for most Windows internal drives)
• The file system structure is still mostly intact

This mode reads the Master File Table (MFT) — NTFS's internal index — to locate deleted file records quickly.

Extensive Mode

Extensive mode runs a deeper, slower scan and is better suited when:

• Regular mode finds nothing
• The drive has been reformatted
• The file system is FAT32, exFAT, or ReFS (common on USB drives, SD cards, and older external drives)
• The file was deleted a while ago

Extensive mode bypasses the file system index entirely and scans raw sectors, making it slower but more thorough.

Basic Command Syntax

The core command structure looks like this:

winfr source-drive: destination-drive: /mode /n filter 

Breaking that down:

• source-drive — the drive letter where the file was lost (e.g., C:)
• destination-drive — a different drive where recovered files will be saved (e.g., D:)
• /mode — either /regular or /extensive
• /n — narrows the scan by filename, extension, or folder path

Practical Examples

Recover all deleted .jpg files from the C: drive to the D: drive in regular mode:

winfr C: D: /regular /n *.jpg 

Recover a specific file by name using extensive mode:

winfr C: D: /extensive /n UsersYourNameDocuments eport.docx 

Recover everything from a specific folder:

winfr C: D: /extensive /n UsersYourNamePictures 

You'll be prompted to confirm the operation before scanning begins. Recovered files are saved to an automatically created folder on your destination drive.

What Affects Recovery Success 🔍

Not every deleted file comes back. Several real-world factors influence what gets recovered:

Time since deletion — The most significant factor. A file deleted minutes ago on a lightly used drive has far better odds than one deleted weeks ago on an active system drive.

Drive type — SSDs with TRIM enabled aggressively clear deleted data in the background, often making recovery impossible even shortly after deletion. HDDs retain deleted data longer since they don't use TRIM.

Drive activity — Every file write after deletion potentially overwrites recoverable data. Continuing to use a drive after accidental deletion reduces recovery chances significantly.

File system — NTFS drives in regular mode benefit from MFT records. FAT32 and exFAT drives require extensive mode, which is slower and less precise.

Fragmentation level — Heavily fragmented files are harder to reconstruct even when raw sector data is found.

File Types and Filter Options

Windows File Recovery supports filtering by file extension, which helps narrow results when scanning for specific types:

• Documents: .docx, .pdf, .xlsx, .pptx
• Images: .jpg, .png, .raw, .tiff
• Video: .mp4, .mov, .avi
• Audio: .mp3, .wav, .flac

Using the /n filter with a specific extension focuses the scan and can significantly reduce recovery time and clutter in the output folder.

Where the Tool Has Limits

Windows File Recovery won't retrieve everything, and it's worth being realistic:

• Files on cloud-synced folders (OneDrive, Google Drive) that were deleted cloud-side require restoring through the cloud service's own recycle or version history — not through this tool
• Encrypted files may recover but remain unreadable without the original encryption key
• SSDs with TRIM frequently return nothing, regardless of mode
• Corrupted or partially overwritten files may recover with missing or garbled content

Factors That Shape Your Specific Situation

The gap between "this tool exists" and "this tool will work for you" comes down to a cluster of variables unique to your setup: how long ago the file was deleted, whether your drive is an SSD or HDD, how actively the drive has been used since the deletion, and whether the file was stored locally or synced through a cloud service.

Users on older mechanical drives recovering recently deleted documents often see strong results. Users on modern SSDs recovering files deleted days ago frequently find the tool comes up empty — not because of any flaw, but because of how SSD storage management works at the hardware level. The right expectations going in depend entirely on your specific drive, your file system, and your timing. 🗂️