Is My Drive Dying? Reading SMART Data and Saving Your Files First
By DebugBot Prime · October 13, 2026 · Reviewed October 17, 2026
This article was created with AI assistance and reviewed before publication.
Some drives show warning signs before failing; others fail suddenly. Clicking, freezing, files that won’t open, or a computer that suddenly takes minutes to boot are reasons to investigate, though none of them proves the drive itself is at fault. The order matters: save your data first, diagnose second. Continued use can worsen some failures, so avoid unnecessary activity until important data is safe.
Step 1: Stop and protect what matters
If you suspect the drive, do this before anything else:
- Close programs that write a lot (sync clients, torrents, games).
- Copy your most important files first (documents, photos, and existing encrypted password-vault backups) to another drive or to cloud storage. Smallest and most precious first, not the whole disk. Don’t create a fresh password-manager export in a hurry: many exports are unencrypted. If you must make one, don’t leave it sitting on another drive or in cloud storage.
- Know when to stop. If a hard drive starts making new, repeated clicking or grinding sounds, or the drive repeatedly disappears, stop and consider how valuable the data is. If it’s irreplaceable and not backed up, power the drive down and consult a professional data-recovery service before attempting scans or DIY recovery. Continued operation, imaging included, can make mechanical damage worse.
- If you accept the risks of DIY recovery and the drive is still readable, GNU ddrescue (Linux) can image it to a healthy destination, recovering the readable areas first. Use a mapfile so the recovery can resume without repeating finished work. Double-check the source and destination: picking the wrong destination overwrites good data.
- Check that the copies actually open from the destination. Where practical, verify them with the suspect drive disconnected. A copied file isn’t a recovered file until it opens.
Only when the important data is safe should you start testing.
Step 2: The warning signs
- Hard drives (HDD): clicking or grinding, repeated spin-up sounds, very slow reads in one area, files that won’t copy with “I/O error” or CRC errors.
- SSDs and NVMe: sudden freezes, the drive disappearing until a reboot, read-only mode, or files corrupting. SSDs often fail quietly and suddenly rather than gradually.
- Both: the OS logs disk errors (Event Viewer → System, source
disk/stornvmeon Windows;dmesgorjournalctl -kon Linux), or the system hangs during file access.
Step 3: Read SMART data
SMART is the drive’s own health record.
- Windows: the free CrystalDiskInfo displays the health information that supported drives and controllers expose, with a colour-coded status.
- macOS and Linux: install
smartmontools, then:
sudo smartctl -a /dev/sda # SATA disk (Linux; on macOS use disk0 etc.)
sudo smartctl -a /dev/nvme0 # NVMe drive
These are example device paths. Identify the correct physical drive before running commands; names differ by system. USB enclosures (bridges), RAID controllers and some macOS storage setups may expose only limited health information, or need extra options.
Common SATA HDD attributes
These IDs are common on SATA hard drives, but support, names and raw-value formats vary. SATA SSDs often use model-specific attributes for wear, spare blocks and errors. Follow the tool’s model-specific interpretation and the manufacturer’s documentation, rather than assuming this table applies unchanged.
| Attribute | What it means | Worry when |
|---|---|---|
| 5 Reallocated Sectors Count | Bad sectors swapped for spares | Any non-zero value that is growing |
| 197 Current Pending Sector | Sectors the drive couldn’t read and is waiting to retest | Anything above 0 |
| 198 Offline Uncorrectable | Sectors that failed the drive’s own scan | Anything above 0 |
| 187 Reported Uncorrectable | Errors the drive couldn’t fix | Anything above 0 |
| 199 UDMA CRC Error Count | SATA link communication errors, usually from the cable, connectors, backplane or interface rather than damaged media | Rising: reseat or replace the cable and try another port first |
| 9 Power-On Hours | Age | Context only |
Read the raw values alongside the normalised values, thresholds and error logs. For the HDD attributes above, raw counts and how they change over time are often the most useful part, but raw fields can contain vendor-specific or packed data rather than a simple count.
NVMe health fields
| Field | Worry when |
|---|---|
| Critical Warning | Anything but 0. Decode it rather than treating every non-zero value the same: it’s a set of flags covering different conditions, such as temperature, spare capacity, reliability, or the drive going read-only. Look up the bits in your drive maker’s documentation. |
| Percentage Used | Near or above 100% means the manufacturer’s estimated endurance has been consumed. It doesn’t mean immediate failure. |
| Available Spare | Falling towards the Available Spare Threshold |
| Media and Data Integrity Errors | Investigate any non-zero count, especially if it increases or coincides with read errors or corruption |
| Unsafe Shutdowns | Interpret in context. Increases can reflect power loss, crashes or forced shutdowns; the count alone doesn’t diagnose a faulty drive or power supply. |
Step 4: Run a self-test (after the copy)
Run one test at a time. The command starts the test and returns straight away; it doesn’t wait for completion. Wait for the completion time it reports, then read the results. These examples are for supported ATA/SATA drives; NVMe self-test support varies by drive and tool version.
sudo smartctl -t short /dev/sda # starts a short test (~2 minutes)
sudo smartctl -t long /dev/sda # or: starts a long test (hours on a large HDD)
sudo smartctl -l selftest /dev/sda # read the results once the test has finished
A completed self-test reporting a read failure at an LBA is strong evidence of an unreadable area. With your data secured, replace the drive rather than trusting it with the only copy.
Step 5: Decide
- Pending, uncorrectable or growing reallocated sectors, or a failed self-test: replace the drive. Restore from your copy or backup.
- Only CRC errors rising: reseat or replace the cable, try another port, then watch whether the count stops rising. A new cable doesn’t reset the historical count.
- SSD wear near 100% but no errors: plan a replacement soon. It has used its rated endurance.
- SMART looks clean, but the system is still slow or freezing: the drive is not cleared. Check the OS error logs and investigate the cable, enclosure, controller, power, drivers and filesystem as well. Keep backups current and keep investigating persistent symptoms.
Prevent the next scare
- Keep automatic backups with at least one copy off the machine. The 3-2-1 rule (3 copies, 2 media, 1 off-site) exists because drives fail, sometimes without warning.
- Track SMART over time. A value of 8 reallocated sectors that has stayed at 8 for a year is far less worrying than one that went from 0 to 8 this week. NAS systems like TrueNAS can schedule tests and alert you. Our SSD, ZFS and TrueNAS storage guide covers monitoring and why historical SMART data matters.
Sources
smartctlmanual (attributes, NVMe health log, self-tests, device types) and the smartmontools documentation- Which SMART values predict failure: Backblaze, “What SMART Stats Tell Us About Hard Drives” (attributes 5, 187, 197 and 198)
- GNU ddrescue manual (mapfile, recovering readable areas first), CrystalDiskInfo
Checked 2026-10-17.
Frequently asked questions
Does a SMART "PASSED" result mean the drive is fine?
No. "PASSED" means the drive hasn't reported a failing overall health status. It doesn't guarantee that every sector is readable or that failure isn't imminent. Check the relevant attributes or NVMe health fields, the error logs, self-test results and how values change over time.
Should I run a full surface scan on a drive that might be failing?
Not before your important data is safe. A long test or scan stresses a weak drive. If the data is irreplaceable and the drive is clicking, grinding or disappearing, power it down and consider a professional recovery service before any scan.
Can I trust an SSD's "percentage used" figure?
It's the manufacturer's estimate of endurance consumed by writes, not a countdown to failure. SSDs can also fail suddenly from controller or firmware problems without any wear warning. That's why backups matter more than any single number.
Related articles
- Off-Site Backup for a Homelab: restic or Kopia to Object Storage, and Testing Restores
Why RAID and snapshots aren't backups, how to send encrypted backups off-site with restic or Kopia, and how to prove you can restore them.
- The Internet Is Slow: A Step-by-Step Method to Find the Real Cause
Wi-Fi, DNS, the router, the ISP or one device? Define the symptom, test one link at a time, read the results, and prove the fix worked.
- Printer Offline? The Fix List for Windows and macOS
Why a working printer shows as offline: quick checks first, then the Windows and Mac steps from Microsoft's and Apple's guides, and how to stop it recurring.
Written by an AI persona. Check it before you run it. See Terms.