DoD 5220.22-M wiping standard: what it is, and why it's not the last word anymore

That gap between reputation and current relevance causes real confusion during procurement and audits. This article covers what DoD 5220.22-M actually specifies, where it still holds up, where it falls short on modern drives, and what replaced it as the go-to standard.

What is the DoD 5220.22-M standard?

DoD 5220.22-M comes from the National Industrial Security Program Operating Manual (NISPOM), a media sanitization standard originally established by the U.S. Department of Defense for wiping storage media that held classified information.

The core method: overwrite every addressable memory location with a character, then its complement, then a random character, followed by a verification pass to confirm the sanitization completed.

How the DoD 5220.22-M 3-pass process works

The standard implementation runs three overwrite passes plus a full verification pass:

• Pass 1 — Write zeros. Every addressable location gets overwritten with a zero, then the write is verified.
• Pass 2 — Write ones. Every location gets overwritten with a one — the complement of pass one — and verified again.
• Pass 3 — Random pattern and final verify. A random character overwrites every location, followed by a complete verification pass.

In 2001, a DoD memo introduced an extended seven-pass variant — DoD 5220.22-M (ECE) — which runs the standard three-pass sequence twice with an extra pass sandwiched in between. It still shows up in some legacy procurement language, but it's rarely used today outside narrow legacy military contexts, since it adds significant time and drive wear for minimal additional benefit on the media it was designed for.

The Clearing and Sanitization Matrix

DoD 5220.22-M specifies different clear and sanitize methods depending on the storage media:

Notice what's missing here: there's no dedicated method for flash-based SSDs or NVMe drives, because the standard predates their widespread enterprise use.

Where DoD 5220.22-M still holds up

For traditional magnetic hard disk drives, the three-pass overwrite-and-verify process is genuinely solid. It's efficient relative to older, more extreme methods like the 35-pass Gutmann standard — a meaningful factor when processing large volumes of drives — and the built-in verification pass gives real assurance that every location was actually overwritten, not just attempted.

Where it falls short on modern storage

DoD 5220.22-M is a legacy standard built around magnetic media assumptions. It has no defined method for flash-based storage — SSDs, hybrid drives, and other modern technologies use wear levelling and block remapping that a sector-based overwrite simply can't reach the way it can on an HDD.

This isn't a minor caveat. Multiple overwrite passes are no longer recommended by NIST SP 800-88 or IEEE 2883:2022 for these media types — the sanitization technique needs to match the storage technology, not the other way around.

Why NIST 800-88 replaced DoD as the primary guidance

Since 2014, NISPOM itself has pointed to NIST SP 800-88 as the primary media sanitization guidance document. The Department of Defense no longer treats DoD 5220.22-M as the sole method for secure HDD wiping — it's now one option among several, and not the recommended one for anything beyond magnetic media.

This matters for procurement teams: requiring "DoD wiping" as a blanket standard for an entire mixed-media fleet — HDDs, SSDs, and NVMe drives together — misses the more current and more precise guidance that NISPOM itself now points to.

Is there such a thing as a "DoD Certificate of Destruction"?

No — there's no official DoD Certificate of Destruction issued by the Department of Defense. That specific document doesn't exist as an official artifact.

What does exist: DoD-compliant data wiping software can generate its own certificate of erasure — documenting the method used, the device, and the verification result — that serves as auditable proof the wipe was performed correctly. It's a vendor-generated record referencing the standard, not a certificate issued by the DoD itself. Worth knowing before an auditor asks for one by that exact name.

How D-Secure handles DoD wiping

A "DoD wipe" means overwriting all addressable locations on a drive following the steps in the DoD 5220.22-M algorithm. D-Secure Drive Eraser supports this method alongside NIST SP 800-88, IEEE 2883, and 27+ other international sanitization standards, so the same platform can apply the right method per device rather than forcing one standard across an entire mixed-media fleet.

D-Secure's DoD wiping capability includes:

• Selectable algorithm to overwrite storage locations per DoD 5220.22-M patterns and pass sequences
• Tamper-evident certificate and report generated for every erasure job
• Support for both the standard 3-pass and extended 7-pass DoD methods
• NIST SP 800-88, IEEE 2883, and 27+ additional standards available in the same workflow

Where DoD wiping still fits into compliance