Data recovery

salvage.

Get your files back.

Salvage finds deleted files, lost partitions and formatted drives, and copies what it finds somewhere safe. It reads from the drive you are rescuing and never writes to it. It runs on Windows, macOS and Linux.

Version
0.1.1
Runs on
Windows, macOS, Linux
Guide
1 November 2026
Salvage in the dark theme: the device tree with drives and image files, the properties of a FAT16 image, and the event log
The main window: drives and images on the left, details on the right, the event log underneath.

What it does

Deleted files, lost partitions

Show Files lists everything still on a volume, deleted files in red. When the partition or file system is gone, a scan reads every sector for lost volumes and known file signatures.

Drives, images and other computers

Physical drives, raw and forensic images (.img, .dd, .E01, .aff), virtual machine disks (.vhd, .vhdx, .vmdk, .vdi) and Apple .dmg and .sparsebundle. A small agent lets you recover from another machine over the network.

Encrypted and versioned volumes

Unlock LUKS and BitLocker with the passphrase or recovery key. Recover earlier versions from Windows shadow copies, and old folder versions from Btrfs.

Broken photos and videos

Fragmented JPEGs and H.264/HEVC videos can be put back together after a scan. Salvage checks the image data and frame index to find the piece that carries on.

Getting a file back

1

Stop using the drive

Anything new written to it can overwrite what you want back.

2

Image it if it's failing

Create Image, or a runtime image that copies as Salvage reads.

3

Find and preview

Show Files, or scan. Double-click to preview before recovering.

4

Recover to another drive

Never to the one you are recovering from.

Read-only by default

Salvage only writes to a whole disk in two places, Wipe and Drive Copy, and both ask twice and name the target. Writing in the hex editor needs two separate switches turned on. Scans save as they go and can be resumed, and a file with a few bad sectors still comes back with only the unreadable 4 KB pieces zeroed.

Salvage is an early release. Recovery depends on the drive and on what has been overwritten, so preview files before relying on them.

Salvage user guide (PDF)
A finished Salvage scan showing the drive map, a tooltip for one square, and the found FAT16 volume with a good recovery chance
A finished scan. Hovering over the map shows what was found in that part of the drive.
vault.

Next: A command-line vault that encrypts files and hides their names, sizes and dates too.