For years, DoD 5220.22-M was one of the most recognizable names in secure data wiping. Multi-pass overwrite methods associated with the standard were widely implemented in erasure software and became a familiar way to demonstrate that data had been overwritten rather than simply deleted.
The approach was practical for the storage technologies that dominated at the time, particularly magnetic hard drives. But storage has changed. Smartphones, SSDs, tablets, and other modern devices rely heavily on flash memory, encryption, and controller-managed storage, making traditional multi-pass overwriting less suitable as a universal method.
So what exactly is DoD 5220.22-M, why did it matter, and is it still relevant today?
Quick Answer
DoD 5220.22-M is historically associated with multi-pass data overwriting methods used to sanitize magnetic storage. It became important because it provided a structured, repeatable approach to data wiping and was widely recognized across IT and security workflows. However, its overwrite-based model does not fully address modern flash storage. Current media sanitization practices increasingly rely on technology-aware guidance such as NIST SP 800-88.
Key Takeaways
- DoD 5220.22-M became one of the best-known references for secure data wiping.
- Its reputation grew around defined overwrite patterns and verification.
- The approach was well suited to conventional magnetic hard drives.
- Multi-pass overwriting has important limitations when applied to flash storage, SSDs, and modern mobile devices.
- Current sanitization guidance focuses more on storage type, risk, appropriate sanitization methods, and validation.
- NIST SP 800-88 represents the more modern approach to media sanitization.
What Is DoD 5220.22-M?
DoD 5220.22-M refers to the National Industrial Security Program Operating Manual, or NISPOM, issued by the U.S. Department of Defense.
The manual itself covered a much broader area than data wiping. It established requirements for protecting classified information handled by government contractors and other organizations participating in the National Industrial Security Program.
Over time, however, the name DoD 5220.22-M became closely associated with particular data sanitization procedures based on overwriting storage with predefined bit patterns.
This association became so widespread that “DoD wipe” developed into a commonly used industry term, separate from the broader purpose of the original manual.
How Did the DoD Data Wiping Method Work?
The basic principle behind DoD-style wiping is overwriting existing information with new data so that the original content can no longer be recovered through normal access to the storage media.
A commonly referenced implementation uses multiple overwrite passes with different bit patterns, followed by verification.
For example, software implementing a DoD-style method might overwrite storage with:
-
A defined binary value.
-
A complementary binary value.
-
Random or predefined data.
-
Verification of the completed overwrite.
Seven-pass variations also became common in commercial wiping tools.
The exact implementation could differ between products, which is one reason the phrase “DoD standard” eventually became broader than the original government documentation.
NIST itself now describes DoD 5220.22-M as an example of the historical practice of erasing hard drives through multiple overwrite passes using specific binary patterns.
Why Was DoD 5220.22-M Important?
DoD-style wiping became popular because it addressed a real security problem.
Deleting a file does not necessarily remove its underlying data. In many storage systems, deletion only removes or changes the metadata that tells the operating system where a file is located. The underlying information may remain recoverable until the storage area is overwritten.
DoD-style wiping provided a structured answer to that problem.
It Established a Repeatable Process
Instead of relying on ordinary deletion or formatting, organizations could apply a defined overwrite procedure.
This helped turn data disposal into a formal security process.
For companies managing large numbers of drives, having a repeatable method was particularly valuable because the procedure could be implemented in software and applied consistently.
It Included Verification
An overwrite process was more useful when its completion could be checked.
Verification helped confirm that the wiping operation had run as expected rather than assuming that data had been removed successfully.
That idea remains relevant today, even though modern sanitization frameworks handle verification and validation differently.
It Allowed Storage to Be Reused
Physical destruction can protect data, but it also destroys the value of the storage media.
Overwrite-based sanitization offered another option: erase the information while keeping the drive usable.
For IT departments, asset disposition companies, resellers, and other organizations, this supported equipment reuse rather than immediate destruction.
It Was Easy to Understand
The logic was intuitive.
If sensitive information had been stored on a drive, writing new data over the same locations several times appeared to provide stronger assurance that the previous information was gone.
This simplicity helped DoD wiping become one of the best-known terms in data erasure.
Was a 7-Pass DoD Wipe Better Than a 3-Pass Wipe?
The popularity of multi-pass wiping also led to the idea that more overwrite passes automatically meant stronger security.
Three passes became widely associated with DoD wiping, while some tools offered seven-pass implementations or even higher numbers.
For magnetic storage, overwrite-based sanitization had a clear technical basis. However, increasing the number of passes also increased processing time.
More importantly, modern guidance no longer treats a large number of overwrite passes as the main measure of effective sanitization.
NIST SP 800-88 Rev. 2 specifically states that multi-pass overwriting is not required for the Clear sanitization method and describes fixed multi-pass requirements associated with DoD 5220.22-M as obsolete.
The issue is no longer simply how many times data is overwritten. The storage technology and the way that technology manages data have become much more important.
What Are the Limitations of DoD 5220.22-M?
DoD-style wiping was developed in an era when magnetic hard drives were the dominant form of reusable digital storage.
Modern devices work differently.
The main limitation is therefore not that overwriting has no value. It is that a fixed overwrite pattern cannot be assumed to provide the same result across every type of modern storage.
Why Is DoD Wiping Less Suitable for Flash Storage?
Smartphones, tablets, SSDs, and many other modern devices use NAND flash memory.
Flash storage does not expose physical memory locations to software in the same straightforward way as traditional magnetic disks.
The storage controller can manage data through mechanisms such as:
- wear leveling;
- overprovisioning;
- spare blocks;
- bad-block management;
- logical-to-physical address translation;
- remapping of storage locations.
Wear leveling, for example, distributes writes across different physical cells to reduce excessive wear in one area.
This means that when software requests an overwrite of a logical address, the controller may write the new information to a different physical memory cell instead of directly replacing the previous data.
As a result, repeating a logical overwrite command does not necessarily mean that every physical location containing previous information has been overwritten.
This makes the traditional “more passes equals more security” model much less useful for modern flash storage.
Why Does This Matter for Smartphones?
The limitations are especially relevant in the secondary mobile device market.
Modern smartphones use integrated flash storage rather than magnetic hard drives. They also rely heavily on encryption and device-specific security architectures.
Used-device businesses may process hundreds or thousands of these devices through trade-in, buyback, refurbishment, wholesale, or recycling programs.
Applying repeated overwrite passes simply because they were historically associated with secure wiping can create several problems:
- unnecessary processing time;
- additional writes to flash storage;
- limited assurance that inaccessible storage areas were addressed;
- reliance on a method that may not reflect how the device actually manages data.
The objective should therefore be to select a sanitization technique that matches the storage architecture rather than applying the same legacy procedure to every device.
Is DoD 5220.22-M Still Relevant Today?
DoD 5220.22-M is still relevant as part of the history of professional data erasure.
It helped establish several principles that remain important:
- deleting files is not the same as sanitizing storage;
- data erasure should follow a defined process;
- the result of the process should be checked;
- media should be sanitized before reuse or transfer;
- organizations need consistent procedures for handling sensitive information.
What has changed is the technical implementation.
Modern storage technologies require more than a fixed sequence of overwrite patterns.
Even NIST now explicitly refers to the DoD multi-pass approach as an obsolete model when discussing how Clear sanitization should be performed.
So DoD wiping is still useful for understanding how secure erasure practices developed, but it should not be treated as a universal current standard for every device.
Why Are Organizations Moving Toward NIST SP 800-88?
Modern media sanitization guidance focuses less on fixed overwrite patterns and more on choosing a method appropriate to the media, risk, and intended disposition.
NIST SP 800-88 is one of the main references for this approach.
The current version, NIST SP 800-88 Rev. 2, was published in September 2025 and superseded Rev. 1. It focuses on building a media sanitization program around appropriate sanitization methods, controls, data sensitivity, media reuse, and validation.
NIST categorizes sanitization into three main methods:
- Clear;
- Purge;
- Destroy.
It also recognizes techniques such as overwrite, block erase, cryptographic erase, and dedicated storage sanitization commands where appropriate.
This approach reflects an important shift.
Instead of asking:
“How many overwrite passes should be used?”
The more useful questions become:
- What type of storage is being sanitized?
- How sensitive is the information?
- Will the device be reused?
- Which sanitization technique is appropriate for that storage?
- Did the process complete successfully?
- Can the result be validated?
This makes NIST-style guidance much more applicable to the variety of storage technologies used today.
For a detailed explanation of Clear, Purge, Destroy, cryptographic erase, and the latest NIST recommendations, see our separate guide to NIST SP 800-88 and media sanitization.
What Does the Shift From DoD to NIST Mean for Used Device Businesses?
For used-device companies, the change is practical rather than theoretical.
The security objective has remained largely the same: data belonging to the previous owner should not remain accessible when a device enters its next lifecycle.
The way that objective is achieved has evolved.
A modern data erasure workflow should consider:
- the device and storage type;
- the appropriate erasure or sanitization method;
- whether the process completed successfully;
- whether additional action is required after a failure;
- how the result is recorded;
- how the erasure record is associated with the individual device.
This is particularly important when devices move through several operational stages.
A typical workflow may include:
Device intake → Diagnostics → Data erasure → Verification → Grading → Inventory → Resale
At scale, the value comes from making each stage repeatable and traceable.
Data Erasure in Modern Device Processing
NSYS Data Erasure is designed for businesses processing used mobile devices and helps integrate data wiping into a broader device management workflow.
Instead of treating erasure as an isolated manual operation, businesses can connect the result with the device being processed and maintain records throughout the device lifecycle.
This reflects the broader development of data sanitization itself.
DoD-style wiping helped establish the idea that sensitive data should be systematically removed before storage is reused. Modern standards build on that principle while adapting the process to newer storage technologies.
Frequently Asked Questions
What does DoD 5220.22-M mean?
DoD 5220.22-M refers to the U.S. Department of Defense National Industrial Security Program Operating Manual. The name later became strongly associated with multi-pass overwrite methods used by data wiping software.
Is DoD 5220.22-M still a valid data wiping standard?
It remains historically significant and DoD-style wipe options are still available in some tools. However, fixed multi-pass overwriting is no longer considered a universal modern approach to media sanitization, especially for flash storage.
How many passes does DoD 5220.22-M use?
DoD wiping is commonly associated with three-pass methods, although seven-pass variants became widely implemented by commercial software. The exact implementation can vary, which is why pass count alone should not be used as a measure of modern sanitization quality.
Is a 7-pass wipe better than a 3-pass wipe?
Not necessarily. Additional passes increase processing time, and modern sanitization guidance does not assume that more overwrite passes provide better protection for every storage technology. NIST SP 800-88 Rev. 2 explicitly states that multi-pass overwriting is not required for Clear sanitization.
What replaced DoD 5220.22-M?
There is no single direct replacement for every situation. Modern organizations commonly use technology-aware media sanitization guidance such as NIST SP 800-88, which bases the process on storage type, sensitivity, reuse requirements, and appropriate sanitization methods.
DoD 5220.22-M Was Important, but Data Erasure Has Evolved
DoD 5220.22-M became influential because it helped turn data wiping into a defined, repeatable security process. For magnetic storage, overwrite-based methods were practical, easy to understand, and compatible with media reuse.
Modern storage changed the assumptions behind that approach.
Flash memory, SSD controllers, encryption, wear leveling, and other technologies mean that fixed multi-pass overwriting can no longer be treated as a universal measure of secure erasure.
The principles behind DoD wiping remain relevant. The implementation has evolved.
For businesses working with modern devices, the next step is to understand media sanitization rather than simply selecting the largest available number of overwrite passes. Our guide to NIST SP 800-88 explains the current approach in more detail.
