Cutting and pasting files is a standard operation for any user, but when it goes wrong, the consequences can be devastating. It often happens that you select a group of photos in the gallery, click “Cut”, but then change your mind or accidentally open another folder, and when you try to insert the images disappear from view. This causes panic, but technically the data most often remains on the media.
Recovery cut photos depends on which file manager was used and whether the move operation was completed. If the process is interrupted, the file may get stuck in RAM or a temporary buffer, but more often it simply changes its logical address in the file system. In this article we will look at methods for returning data from simple built-in functions to the use of specialized software.
The main rule in such a situation is to immediately stop writing new information to the device. Any new photo, downloaded app, or system update can overwrite the memory sectors where your lost image is physically stored. The less activity you show after the loss, the higher the chances of success.
Checking the built-in recycle bin and cloud storage
Modern versions of the operating system Android and branded shells from manufacturers (such as One UI from Samsung or MIUI from Xiaomi) are equipped with the “Trash” function. When a cut and paste fails, some file managers automatically send the item there if the operation was canceled by security.
Go to the Gallery or Files app and look for the Trash or Recently Deleted section. Typically files are stored there for 30 days. If you see your pictures there, just select them and click the "Recover" button. This is the fastest and safest way.
If the local recycle bin is empty, the next step should be to check cloud services. Many smartphones automatically sync media files with your Google or manufacturer account. Even if you cut a photo from the internal memory, its copy could have been uploaded to the cloud before the manipulation.
⚠️ Attention: Check the synchronization settings in your Google Photos account. Sometimes photos are deleted from the cloud at the same time as the device if the “Free up space” function is enabled.
To access backup copies, open the application Google Photos and go to the “Library” → “Trash” section. You should also go to photos.google.com from your computer using your account. There, the interface can display files that are not visible in the mobile application due to caching.
Using file managers to search for temporary copies
If standard methods do not help, it is worth delving into the structure of the file system. During the “Cut” operation, the system creates a temporary log of the movement record. Some third-party file managers, such as Total Commander or ES Explorer, have a clipboard that saves the history of actions.
Open the file manager and look for hidden folders with names like .temp, .cache or clipboard in the root directory or folder Android/data. Sometimes an unsuccessfully cut file may end up there with a changed name or without an extension.
Try using the search function by the date the file was modified. Enter the date and time you made the clipping into the search. The system can find a file that has been moved to the system directory and lost its icon, while remaining readable.
Use a search by file extension (such as .jpg or .png) to find images that may have lost their names when the cut operation failed.
Some advanced users use terminal emulators to find "lost" files. The command find /sdcard -name "*.jpg" -mtime -1 will allow you to find all images changed in the last 24 hours. This can help locate a file that is simply “lost” in directories.
find /sdcard -type f -name "*.jpg" -newermt "2023-10-25" ! -newermt "2023-10-26"However, working with the console requires caution. Entering a command incorrectly can lead to unpredictable results, so use this method only if you are confident in your actions.
Data recovery via a computer (PC)
When mobile methods are exhausted, the most effective solution is to connect the smartphone to the computer. The PC has great computing power and allows you to use professional software for deep scanning of the drive.
First you need to enable the mode USB debuggingon your phone. Go to Settings → About phone and click on the build number 7 times to unlock the developer menu. Then in the menu that appears, activate the desired item.
Connect the device with a cable to the computer. If the recovery app requires access to the file system as a disk, make sure that the notification on the phone screen selects File Transfer (MTP) mode and not Charge Only.
| app | Access Type | Efficiency | Difficulty |
|---|---|---|---|
| Dr.Fone | USB / Wi-Fi | High | Low |
| DiskDigger (PC) | USB (ADB) | Medium | Medium |
| Recuva | Memory card | High (for SD) | Low |
| PhotoRec | USB / Image | Very high | High |
Popular utility Recuva works great if the photos were stored on a memory card microSD. Just remove the card, insert it into the PC card reader and start a deep scan. The situation with internal memory is more complicated: modern versions of Android prohibit direct access to memory sectors without root access.
⚠️ Attention: apps that promise recovery without root access from internal memory often show only cached thumbnails, and not high-quality originals.
Using mobile applications for recovery
There are a number of applications that can be installed directly on your smartphone to search for deleted data. The leader in this niche is DiskDigger. It has two versions of work: basic (without Root) and advanced (with Root access).
In basic mode, the application scans the cache and thumbnails. This allows you to return the photo, but perhaps in a reduced resolution. If your phone has received Root access, the application will be able to scan the entire file system bit by bit, finding even those files whose links have been deleted.
☑️ Preparing for recovery by applications
Other popular applications such as Undeleter or Dumpster, work on a similar principle. They create a memory image or scan file system logs. It is important to install such utilities immediately after data loss, but it is better to save recovered files to a memory card or to the cloud so as not to overwrite the original data.
Remember that installing applications on internal memory is itself a risky operation. Every megabyte of downloaded installer can take up the space where your cut-out photo was stored. If possible, use an external SD card to install utilities.
The role of root access in the recovery process
Obtaining superuser rights (Root) opens the door to complete data recovery, but this is a double-edged sword. On the one hand, this gives apps access to raw memory sectors where the data is physically located. On the other hand, the procedure for obtaining Root itself may overwrite the information.
If you have not yet received root access, think twice about whether it is worth doing it for the sake of one photo. The process of unlocking the bootloader, which is often required for rooting, usually involves a complete reset of the device (Wipe Data). In this case, you are guaranteed to lose everything.
What is the EXT4 file system?
Most Android smartphones use the EXT4 file system. When you delete or cut a file, the system does not physically erase the data, but only marks the space as “free.” As long as something new is not recorded in this place, the data can be read.
If the phone is already rooted, your chances increase many times over. You can use console utilities like testdisk or photorec directly on the device via the terminal. These are professional tools that can ignore the file system and search for image signatures directly in the byte stream.
⚠️ Attention: Using Root recovery applications can disrupt the operation of banking applications and services with protected content (DRM) on your device.
Preventing and setting up automatic backup
The best way to combat data loss is to prevent such situations. Setting up automatic backup should be a priority for every smartphone owner. This will save you from having to look for complex recovery paths in the future.
Set up synchronization with Google Photos or Yandex.Disk. Choose Original download quality if you have enough cloud space, or Space Saver for unlimited storage. Make sure that synchronization is enabled not only over Wi-Fi, but also check the status regularly.
Automatic synchronization to the cloud is the only 100% reliable way to protect against accidental cutting or formatting of memory.
It is also useful to periodically make full backup copies of the device to your computer. Connect your phone once a week and copy the folder DCIM to an external hard drive. This will take a few minutes, but will save years of memories in the event of a critical failure.
Use reliable file managers that have a “Confirm Action” feature before cutting or deleting large numbers of files. This will add an extra step that will give you time to come to your senses and cancel the operation.
Frequently asked questions (FAQ)
Is it possible to restore a photo if the phone was reset to factory settings after cutting?
The chances are extremely low. A Factory Reset usually involves encrypting and rewriting access keys, as well as wiping file tables. Without specialized equipment in the laboratory, it is almost impossible to restore data after a complete reset.
Will turning off the Internet immediately after losing a photo help?
Yes, this is a useful measure. Disabling the network will prevent the "deleted" status from synchronizing with cloud services. If the photo has not yet been deleted from the cloud, a broken connection may keep it there until you sort out the situation.
Why do recovered photos sometimes look damaged?
This happens if the file has been partially overwritten. Recovery reads data from those sectors that have not yet been affected by new writes. As a result, the image may have artifacts, stripes, or not open at all.
Is there a difference between cutting on the SD card and in the internal memory?
Yes, significant. SD cards work like regular flash drives and are easier to access for recovery. The internal memory of modern smartphones is often encrypted, which requires root access or complex manipulations with decryption keys for sector-by-sector reading.