How to Recover Data Before Troubleshooting a Failing PC
I’ll show you how to protect important files before troubleshooting a failing PC, including when to stop using the drive, when to make an image instead of copying files, and which “fixes” can turn recoverable data into permanent loss.
A failing PC creates two separate problems: the computer may not work correctly, and its data may be at risk. Treating the hardware problem first can be a costly mistake. Reinstalling Windows, running repair utilities, or repeatedly restarting the machine may make recovery harder if the storage device is deteriorating.
Your first goal isn't to fix the PC. It’s to preserve the files you can’t easily replace, then determine whether the failure is limited to the operating system, the storage drive, or another component.
Stop and assess the symptoms
If the computer still starts and your files open normally, avoid demanding tasks. Don’t install updates, run games, copy your entire media library, or begin a repair process just because Windows reports an error. Every additional read and write can add stress to a drive that is already struggling.
Start by identifying what has changed. A PC that shows a blue screen but has a healthy, responsive drive may have an operating-system or memory problem. A machine that freezes when opening particular folders, reports missing files, takes unusually long to load, or repeatedly disconnects an external drive points more strongly toward storage trouble. Clicking, grinding, repeated spin-up sounds, or a drive that disappears from firmware or the operating system are more serious warnings, especially for a mechanical hard drive.
If the computer is hot, smells burnt, has liquid damage, or has suffered a fall, shut it down and disconnect power. Don't keep testing it to see whether the symptoms improve. For a drive making unusual mechanical noises or failing to stay detected, professional data recovery may be safer than repeated home attempts. Opening a hard drive outside a suitable clean environment can cause further damage.
Decide whether to keep testing: If the drive is clicking, grinding, intermittently disappearing, or becoming unreadable, stop repeated power cycles and check current guidance from the drive manufacturer or a reputable recovery service before continuing. The right next step depends on the drive type, symptoms, encryption, and value of the data.
Make a plan for the files that matter
Before copying anything, decide what must be saved first. Prioritize irreplaceable documents, photographs, project files, financial records, password-manager exports, and other personal data. Applications can usually be reinstalled; a family photo or an unsaved business record may not be replaceable.
Use another storage location with enough free space. An external drive is often the simplest choice, but it shouldn't be the only eventual copy. If the files are already synchronized to a cloud service, confirm that the service contains usable, current versions rather than assuming synchronization equals backup. A synchronizing service can also synchronize deletions or corruption.
If the failing computer is still usable, gather the information that may be needed later. Note the drive’s model and capacity, the operating system, the approximate time symptoms began, and whether the files are encrypted. If Windows device encryption or BitLocker is enabled, locate the recovery key before changing hardware or resetting the system. On a Mac, FileVault recovery information may be equally important. Without the appropriate key or account access, a physically healthy drive can still be unreadable.
Copy the most important files first
For a drive that is stable enough to read, use a simple, low-demand sequence:
- Connect the destination drive directly to the computer rather than through an unreliable hub.
- Copy the highest-priority folders first, in small groups.
- Open several copied files from the destination to confirm that they work.
- Continue with less important data only after the first copies are verified.
- Keep the original drive unchanged until you know the recovered copies are complete.
Copying is preferable to moving. A move operation can delete the source after a transfer appears to succeed, and a failed transfer may leave you with less than you started with. Avoid reorganizing files, renaming large groups, or compressing data during this stage. Those actions create extra work without improving recovery.
If a particular folder causes the system to hang, skip it temporarily and continue with other important folders. The goal is to recover as much as possible while the drive remains responsive, not to force one damaged file or directory to cooperate. Write down skipped locations so you can make a deliberate decision about them later.
Don't assume that a successful copy proves every file is healthy. Open representative documents, play several videos, inspect photographs at full size, and check a selection of archives. A file can have the right name and size while containing unreadable data. For especially important material, keep the original recovered copy and make a second backup before attempting repairs.
When an image is safer than ordinary copying
A disk image is a sector-by-sector or otherwise structured copy of a drive that can be examined without repeatedly working from the original. Imaging is often the better approach when the drive has read errors, becomes slower over time, or contains many files you need to preserve. Specialized recovery tools can sometimes skip unreadable areas, record what was missed, and retry difficult sections in a controlled way.
Imaging does require a destination with sufficient capacity and some technical confidence. You must select the correct source and destination, because reversing them can overwrite the failing drive or another disk. If the drive is making mechanical noises, disconnecting, or degrading rapidly, experimenting with imaging software may not be the safest first move. A recovery professional can often work from an image or create one using equipment designed to reduce unnecessary reads.
An image isn't a substitute for checking the recovered files. It preserves the drive’s contents as far as the readable sectors allow, but it doesn't restore sectors that are already damaged. It is valuable because it lets you investigate a copy while keeping the original available for another recovery attempt.
Avoid repairs until the data is safe
Repair utilities have a legitimate role after you have protected the data, but they aren't first-aid tools for an uncertain failure. File-system checks may change directory information, remove references to damaged files, or make a volume appear consistent while making some recovery paths less available. Formatting, reinstalling the operating system, resetting the PC, and deleting partitions can overwrite information needed for recovery.
Be cautious with advice that tells you to run several commands in sequence without first identifying the drive and preserving its contents. A command that is reasonable for a healthy file system can be harmful when the drive itself is failing. The same applies to firmware updates, BIOS changes, and driver experiments: they may be appropriate later, but they don't protect personal files now.
Some common actions are less risky but still poorly timed. Defragmentation, antivirus scans of the entire drive, and large operating-system updates create additional reads or writes. On a solid-state drive, deleted data may also become difficult to recover after the system processes discarded blocks. That is another reason to stop deleting, cleaning, or reinstalling while recovery is still uncertain.
Check the recovery method before using it: Confirm the instructions for your exact operating system, drive type, encryption setup, and tool version. If a step writes to the source drive, changes partitions, discards blocks, or requires you to guess which disk is correct, postpone it until you have a verified copy or qualified help.
Separate the storage problem from the PC problem
Once important files are copied and verified, you can troubleshoot more freely. Test whether the computer behaves differently with the suspect drive disconnected, if doing so is safe and practical. A PC that becomes stable without that drive may have a storage or file-system problem. A PC that remains unstable may also have failing memory, a power supply issue, overheating, a motherboard fault, or another component problem.
For an internal boot drive, you may need another computer or a bootable environment to copy files without starting the installed operating system. If you use that approach, pay attention to encryption and account permissions. A drive that is visible in firmware may still be locked at the operating-system level, and a drive that appears in a file browser may not be fully readable.
If the drive is healthy but Windows or another operating system is damaged, repair or reinstall options become more reasonable after backup. If the drive reports errors, has rapidly worsening symptoms, or can't maintain a connection, replace it rather than treating a temporary improvement as proof that it is reliable. Storage devices can fail intermittently before failing completely.
Build a recovery habit for next time
The safest recovery is the one you don’t need to improvise. Keep at least one backup separate from the computer, and periodically confirm that important files can actually be opened. For files that would be difficult to replace, a second backup in a different location protects against theft, fire, accidental deletion, and a failed external drive.
After the immediate crisis, review what was missing from your backup and whether your cloud service retained the versions you expected. Record encryption recovery keys in a secure location, keep replacement storage available for important systems, and pay attention to early warnings rather than waiting for a complete failure.
The sensible sequence is straightforward: reduce use, identify the data at risk, copy or image the highest-priority files, verify those copies, and only then troubleshoot or repair the computer. When the drive is noisy, unstable, encrypted without an available key, or holding exceptionally valuable data, stopping early and getting specialist help is often the most practical decision.