I have an SSD disk with password protection, but the password was lost long time ago... so I tried to erase the ATA security with the hdparm command.

With "hdparm -I", the disk information looks interesting as below:

root@ubuntu:~# hdparm -I /dev/sda


ATA device, with non-removable media
    Model Number:       TX21B10400GE8001                        
    Serial Number:      FG002VTA
    Firmware Revision:  PRO6F515
    Transport:          Serial, ATA8-AST, SATA 1.0a, SATA II Extensions, SATA Rev 2.5, SATA Rev 2.6, SATA Rev 3.0
    Enabled Supported:
       *    SMART feature set
            Security Mode feature set
    Master password revision code = 65534
    not enabled
    not frozen
    not expired: security count
        supported: enhanced erase
Logical Unit WWN Device Identifier: 50011731001636dc
    NAA     : 5
    IEEE OUI    : 001173
    Unique ID   : 1001636dc
Checksum: correct

As you can see, the disk is in the security locked state, and it doesn't support hdparm security mode feature.

When use the security unlock command on this disk, the results are as below:

root@ubuntu:~# hdparm --user-master u --security-unlock 123456 /dev/sda

 Issuing SECURITY_UNLOCK command, password="123456", user=user
SECURITY_UNLOCK: Input/output error

I'm wondering if there is any other way to unlock this SSD disk and remove the password?

  • You must do it quickly. There is a 2 minute timer. Aug 9 '15 at 17:10
  • thank you, @ThorbjørnRavnAndersen! Do you mean the disk will be "locked" after the operating system start up? Aug 11 '15 at 13:04
  • It is the "frozen" state. See thomas-krenn.com/en/wiki/SSD_Secure_Erase to learn more. Aug 11 '15 at 13:56
  • Thank you for your patient feedback, @ThorbjørnRavnAndersen! It's very unlucky that I already lost the user password long time ago, and rebooted the sytem several times. so now every time after I startup the ubuntu system and check this disk, it's in "locked" state, and I can not read/write to this disk anymore. Is there any way to clear the password and do secure ease when the SSD is locked? or is there anyway to unlock the disk without password? Aug 13 '15 at 12:26
  • I do not know. You may want to contact the vendor directly. Aug 13 '15 at 13:25

I was able to get this to work on my Western Digital WD20EURS. After piecing together tips from all over Google, I was able to get a master password, research the commands of hdparm, and use your example in your original question to resolve my issue. Maybe this will help you too.

First off, I found a list of master passwords for various brands of drives.

Here are two locations, (replaced with Web Archive versions to avoid link rot)

My method:

  • Used ESCAPE to cancel Bios HD password request.
  • Booted into CentOS7 CLI (previously installed yum install hdparm)
  • Command hdparm -I /dev/sda to check if drive was "locked" ( -I is capital i )
  • Command hdparm --user-master m --security-unlock PASS /dev/sda
    • m = using master password
    • PASS = for me, typing 'WDC' ten times, with a finishing 'W'
      • found this password in the links listed above
  • Command hdparm -I /dev/sda again ( -I is capital i ). This time the drive showed "not locked" (at which I hesitantly rejoiced)
  • Command hdparm --user-master m --security-disable PASS /dev/sda
    • This should disable the password on the hard drive and allow you to boot without needing a password next time.
  • Then I put the drive back into my Windows machine. I was able to see all the partitions in the drive, erase them, and use this new drive!
  • 4
    Your solution is just slightly terrifying... using the "master" password (a.k.a public value) it should of course never be possible to unlock a locked drive, only to perform a secure erase, which would also remove the user password. If the master password actually lets you unlock the drive and retain the old data, then you can only ask... WTF is the point? In this case it is security theater, there is no actual security or encryption occurring at all on that particular drive model.
    – JeremyS
    Feb 29 '16 at 21:00
  • 3
    I don't think the design of the password lock on hard drives that was developed decades ago accounted for people eventually figuring out how to hack the drive. It's a rudimentary form of locking either way. In theory, I could swap the logical board of the hard drive with one from the same model, and bypass the password this way as well. As the password is only on the logic board, and not the disk itself.
    – Taylor
    Mar 2 '16 at 3:32
  • 1
    I believe you can earse the drive without a password using the --security-erase option (of hdparm). Look here for more information. Sep 23 '18 at 10:45
  • 1
    Regarding this being "slightly terrifying" the point of the PSID "password" is to be able to recover a drive whose password is unknown so it can be used as a new blank drive. Its contents after being unlocked in this way are encrypted and therefore approximately the same as random garbage. I don't see how that's actually terrifying. It can't be used to actually erase anything (for those who have the password for the drive or lock range), but it makes the drive reusable as if new for those who do not.
    – Alan Mimms
    Feb 22 '19 at 21:03
  • 1
    I know this is an old thread. @donquixote you can always prefix bash commands with whitespace, these will not likely show up in history. other option is disabling the HISTFILE or pointing it to /dev/null (discussed here: temporarily-suspend-bash-history-on-a-given-shell )
    – ethanole
    Aug 12 '20 at 10:40

Try using the master password to secure-erase the disk. Performing a secure erase will reset the user password. You can find lists of default master passwords by vendor through google searches. For example, this web site may be useful:


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.