Degaussing can support Purge for suitable magnetic tape when the degausser is matched to the tape’s coercivity. It should normally be treated as a non-reuse route for LTO because it can remove magnetic information required for operation. Shredding or disintegration must address the tape ribbon, not merely crack the plastic cartridge.
Enterprise buyers should decide:
- Whether the tape is still subject to retention, litigation hold, investigation, or archive requirements
- LTO generation and cartridge type
- Rewritable versus WORM media
- Backup application or LTFS format
- Encryption and key ownership
- Tape and drive condition
- Internal reuse, external release, recycling, or destruction
- Required NIST Clear, Purge, or Destroy outcome
- Applicable agency, classified-program, or contract requirements
- Verification, validation, custody, and certificate fields
Organizations retiring tape libraries can use tape destruction services after records, legal, security, and storage owners authorize disposition.
What Is LTO Tape?
Linear Tape-Open, or LTO Ultrium, is a magnetic tape format used for enterprise backup, archive, offline copies, and long-term retention. Data is written along many tracks on a long magnetic tape ribbon housed inside a cartridge.
An LTO environment can include:
- Data cartridges
- WORM cartridges
- Cleaning cartridges
- Tape drives
- Autoloaders or libraries
- Barcode and volume labels
- Cartridge memory
- Backup software or LTFS
- Catalog databases
- Encryption-capable drives
- Key-management systems
- Vault and transportation records
Sanitization must address the data-bearing tape and any other persistent information included in the approved scope. Destroying a drive does not sanitize the cartridges it previously wrote. Destroying a library does not sanitize tapes stored elsewhere.
Cartridge memory is not the backup payload
LTO cartridges contain memory used for cartridge and usage information. The backup payload resides on the magnetic tape. An organization should still decide whether labels, cartridge metadata, activity history, and inventory records require removal or destruction under its policy.
Which LTO Sanitization Method Should an Organization Use?
Choose the method by required outcome, media eligibility, reuse plan, and evidence rather than by convenience.
| Technique | Likely media outcome | Reuse potential | Main control question |
|---|---|---|---|
| Logical overwrite through a compatible drive | Prior user-addressable content is replaced according to the approved procedure | Possible for eligible rewritable media | Did the process address the required tape scope and complete without material errors? |
| Cryptographic erase | Encrypted content becomes inaccessible after required keys are sanitized | Cartridge can remain physically usable | Was all target data encrypted, and were all relevant key copies and key hierarchies sanitized? |
| Degaussing | Magnetic patterns are changed by an external field | LTO should normally be routed away from reuse | Was the degausser approved and strong enough for the tape’s coercivity? |
| Shredding or disintegration | Cartridge and tape are reduced through mechanical destruction | No | Did the process address the complete tape ribbon and meet the approved output? |
| Incineration | Tape media is burned under an approved controlled process | No | Did the approved facility meet the governing procedure and environmental controls? |
No technique automatically satisfies every law, contract, agency policy, or data category.
What Does NIST SP 800-88 Rev. 2 Require for Magnetic Tape?
NIST SP 800-88 Rev. 2 provides the Clear, Purge, and Destroy framework but directs organizations to current technology-specific standards for exact tape procedures. It does not publish one universal LTO shred size or require one method for every tape.
The current NIST publication, issued in September 2025, defines:
- Clear: Logical techniques that protect against basic, noninvasive recovery through the normal interface.
- Purge: Logical or physical techniques that make target-data recovery infeasible against advanced laboratory capabilities.
- Destroy: Techniques that make target-data recovery infeasible against advanced laboratory capabilities and leave the media unable to store data.
The NIST SP 800-88 Rev. 2 PDF identifies degaussing as a historical physical Purge technique for magnetic tape when field strength is carefully matched to media coercivity. It also requires verification and validation of the chosen result.
NIST recommends consulting current IEEE 2883 guidance, NSA/CSS policy where applicable, or another organizationally approved standard for the technology-specific technique.
Can LTO Tapes Be Overwritten and Reused?
Eligible rewritable LTO cartridges can be overwritten and reused when the organization has a compatible drive, an approved technique, acceptable media health, and validation evidence. WORM cartridges and damaged tapes require different treatment.
A defensible overwrite process must distinguish between:
- Relabeling a volume
- Writing an end-of-data marker
- Expiring backup records
- Quick erase or short erase
- Full logical overwrite
- Application-level media initialization
These operations do not necessarily address the same tape length or prior content.
Relabeling is not whole-tape sanitization
Changing a barcode, volume name, catalog entry, or beginning-of-tape metadata can make the prior backup invisible to the original application while older data remains farther along the tape.
Full overwrite can consume substantial time
Tape is sequential. Processing time depends on native capacity, drive generation, data rate, media condition, retries, application behavior, and verification. High-capacity tapes can occupy drives for long periods.
Media health and sanitization are separate
A tape can complete an overwrite but be unsuitable for continued service because of age, error history, physical damage, or handling concerns. A tape can also appear healthy while the overwrite technique fails the required sanitization method.
Can WORM LTO Tape Be Sanitized for Reuse?
WORM tape is designed to prevent rewriting of recorded content, so it should not be routed through an ordinary overwrite-and-reuse process. Once retention and legal obligations are released, WORM media commonly requires an approved non-reuse technique.
WORM stands for Write Once, Read Many. Its purpose is records immutability, not automatic end-of-life sanitization.
Before destroying WORM tape, confirm:
- Retention period has expired
- Litigation hold is released
- Records owner approved disposition
- Duplicate or replicated copies are addressed
- Cartridge identity is reconciled
- Governing policy assigns the final technique
A backup expiration entry does not change the recorded magnetic content.
How Does LTO Tape Degaussing Work?
Degaussing exposes magnetic tape to a field intended to change the magnetic domains that encode data. For Purge, the field must be suitable for the tape’s coercivity and the equipment must be operated and checked according to the approved procedure.
Relevant controls include:
- LTO generation and tape formulation
- Degaussing equipment make and model
- Media types supported by the equipment
- Field capability relative to coercivity
- Applicable current equipment listing
- Equipment testing and maintenance
- Cartridge orientation and cycle procedure
- Cycle status
- Operator training
- Exception handling
An unreadable tape is not proof of successful degaussing
Degaussing can damage servo or format information and make a tape unreadable by a standard drive while leaving target data inadequately sanitized if the field is insufficient.
Verification should establish that the approved degausser completed its cycle against eligible media. Validation should determine whether the outcome protects the target data.
Degaussing usually ends LTO reuse
LTO depends on magnetic servo and format information required for tracking and reading. An approved degaussing process can eliminate information the drive needs. Organizations should not plan on post-degaussing reuse unless an authoritative, media-specific procedure explicitly supports it.
The guide Can a Degaussed Hard Drive Be Reused? explains the related but distinct HDD issue.
Can Cryptographic Erase Be Used for Encrypted LTO Tape?
Cryptographic erase can support Purge only when every target data block was encrypted under an approved implementation and every required decryption path is sanitized. Deleting one visible key record is not enough by itself.
LTO drive encryption has been available since LTO-4, but encryption use is optional and can be managed by the application, library, system, or another key-management design.
NIST SP 800-88 Rev. 2 requires assessment of:
- Encryption was active before target data was written
- Encryption covered all target data on the cartridge
- Algorithm and implementation met organizational requirements
- Keys were generated and protected correctly
- Key-wrapping and key-derivation hierarchies were understood
- All relevant key copies were sanitized
- Escrow, recovery, backup, replicated, and exported keys were addressed
- Plaintext was not written to another tape area or prior volume
- Key sanitization was documented
Tape keys can exist outside the cartridge
The decryption path can involve a backup application, tape library, key manager, database, recovery package, or escrow service. Key destruction must account for all authorized and replicated copies.
Shared keys create scope risk
If one key protects several cartridges, sanitizing it can make every dependent tape unreadable. The organization must map tape-to-key relationships before approving cryptographic erase.
Key loss and cryptographic erase are not the same event
Accidentally losing a key may prevent restoration, but an auditable cryptographic erase requires an authorized procedure, verified key sanitization, validation, and a disposition record.
When Is Physical LTO Tape Destruction Required?
Physical destruction is appropriate when Destroy is assigned or when overwrite, degaussing, or cryptographic erase cannot produce an accepted result.
Common triggers include:
- WORM media
- Broken or damaged cartridges
- Tape cannot be read or written reliably
- Compatible drives are unavailable
- Backup format is obsolete
- Encryption state is unknown
- Key sanitization cannot be proven
- Degaussing equipment is unsuitable
- Reuse is prohibited
- Classified or contract-controlled procedure applies
- Logical sanitization fails validation
- Inventory records cannot support safe external release
Physical destruction should leave the tape unable to store data and produce an output accepted by the controlling policy.
Why Is Breaking the Cartridge Not Enough?
The plastic shell is not the primary data-bearing medium. Cracking, puncturing, or removing the cartridge door can leave long sections of magnetic tape intact.
Inadequate processes can leave:
- A wound reel with readable tape
- Long ribbon segments
- Intact beginning-of-tape regions
- Barcodes and labels
- Cartridge memory
- Pieces large enough to remount or analyze
A destruction specification should address the tape ribbon, cartridge components, labels, and any additional metadata within scope.
Office paper shredders are not tape-destruction equipment
Tape can wrap around cutters, jam equipment, or pass through in long strips. Use equipment evaluated or accepted for the media and output requirement.
Does NIST Require a Particular LTO Particle Size?
NIST SP 800-88 Rev. 2 does not set one universal particle size for commercial LTO destruction. A specific output can come from an agency policy, classified program, contract, current equipment list, or organizational standard.
The current NSA/CSS Policy Manual 9-12, issued February 19, 2026, identifies procedures for magnetic tape within its scope. These include degaussing with a current listed magnetic degausser, disintegration to the specified nominal particle size, or incineration at the stated temperature.
Those classified-program requirements should not be restated as a universal NIST rule for every business. Organizations within NSA/CSS scope must use the current manual, applicable Evaluated Products List, and cognizant security guidance.
How Should LTO Destruction Be Verified?
Verification should confirm the cartridge identity, technique, equipment, completion status, and condition of the data-bearing result.
For overwrite or cryptographic erase, record:
- Cartridge barcode and volume identifier
- LTO generation and type
- Drive make, model, and firmware
- Backup application or LTFS version
- Exact technique
- Encryption and key-management evidence where applicable
- Start and completion status
- Media errors and retries
- Verification result
For degaussing, add:
- Degausser make and model
- Media eligibility
- Equipment test result
- Cycle record
- Errors or anomalies
For destructive methods, add:
- Destruction equipment
- Configuration or screen
- Output requirement
- Tape-ribbon inspection
- Oversize or intact remnants
- Reprocessing
Validation makes the acceptance decision
Validation reviews the verified result against data sensitivity, governing requirements, errors, custody, and final disposition. A rejected result requires another technique or escalation.
How Should Tape Inventory Be Reconciled?
Every cartridge approved for sanitization should be connected to an inventory record and final result. Tape libraries can contain duplicate labels, scratch media, cleaning cartridges, expired volumes, off-site copies, exports, and tapes absent from the current catalog.
Reconcile:
- Barcode
- Volume serial number
- Cartridge type and generation
- WORM status
- Encryption status
- Key identifier where authorized
- Library or vault location
- Backup set and retention class
- Legal-hold status
- Owner
- Sanitization route
- Exception status
- Final disposition
Do not use the active backup catalog as the only inventory source. Tapes may exist outside the library or after catalog migration.
What Chain-of-Custody Controls Apply?
Control tapes from vault release through validated sanitization and downstream disposition. Cartridges are portable, interchangeable, and easy to remove from a batch.
A chain-of-custody process can record:
- Releasing vault or custodian
- Cartridge identifiers
- Container and seal numbers
- Pickup personnel
- Vehicle and tracking
- Receiving reconciliation
- Secure storage before processing
- Processing date and location
- Operator and witness
- Exceptions
- Remnant transfer
On-site data destruction can keep readable tapes at the client location until processing. Off-site work can be appropriate when transport and facility controls meet the approved risk decision.
What Should the Certificate Include?
The certificate should state the actual tape method and connect it to the cartridges processed. A generic statement that “backup media was destroyed” is weak evidence.
The Certificate of Destruction or supporting report can include:
- Client and project
- Barcode and volume identifier
- LTO generation
- Rewritable or WORM
- Clear, Purge, or Destroy
- Overwrite, cryptographic erase, degauss, disintegrate, or incinerate technique
- Tool, drive, degausser, or destruction equipment
- Verification method and result
- Validator
- Date, location, operator, and witness
- Errors and reprocessing
- Final handling of remnants
For cryptographic erase, retain key-sanitization evidence in the controlled security record rather than disclosing sensitive key material on a general certificate.
Should Tape Destruction Be On-Site or Off-Site?
Choose on-site work when readable tapes cannot leave organizational control or direct witnessing is required. Choose off-site work when secure transport and a controlled facility provide the required tape equipment, throughput, and evidence.
On-site factors include:
- Mobile equipment suitable for tape
- Noise, dust, power, and space
- Batch size
- Witnessing
- Output inspection
- Ability to reprocess remnants
Off-site factors include:
- Sealed containers
- Vehicle and route controls
- Receiving reconciliation
- Secure storage
- Facility equipment
- Witness access
- Processing deadline
- Downstream material handling
The location guide On-Site vs. Off-Site Data Destruction provides a custody-based comparison.
What Should an LTO Destruction RFP Require?
The RFP should define media, method, retention release, equipment, output, verification, custody, and evidence.
Ask bidders:
- Which LTO generations and cartridge types can be processed?
- How are WORM cartridges identified?
- Which overwrite procedure is used for reusable tape?
- How are short erase, relabel, and full overwrite distinguished?
- Which degausser is used, and which tape media does it support?
- How is degausser performance checked?
- Which equipment destroys the complete tape ribbon?
- How is output inspected and measured?
- How are intact or oversize remnants reprocessed?
- How are barcodes reconciled?
- Can destruction be witnessed?
- How are encrypted tapes and key evidence handled?
- What certificate fields are available?
- How are exceptions reported?
- Which downstream processors receive remnants?
- How long are records retained?
Require a sample certificate and a process demonstration before full production.
LTO Tape Destruction and Sanitization: Decision Framework
Use overwrite for eligible rewritable media approved for reuse, cryptographic erase only when all encryption conditions are proven, degaussing for suitable magnetic tape when Purge is assigned, and physical destruction when Destroy or a failed-media route applies.
Apply this sequence:
- Confirm retention, legal hold, and ownership release.
- Inventory cartridges beyond the active catalog.
- Identify LTO generation, WORM status, format, and condition.
- Determine encryption and key relationships.
- Decide whether reuse is authorized.
- Assign Clear, Purge, or Destroy.
- Identify current technical, agency, and contract guidance.
- Select equipment suited to the tape.
- Preserve chain of custody.
- Perform the approved technique.
- Verify the result and investigate errors.
- Validate against target-data sensitivity.
- Reprocess or escalate rejected media.
- Reconcile every cartridge.
- Complete the certificate and downstream record.
Data Destruction Inc. provides tape destruction, media shredding, witnessed destruction, and documented custody for approved enterprise projects. The project scope defines tape types, method, output, observation, evidence, and final handling before processing begins.
Frequently Asked Questions
Can LTO tape be erased and reused?
Eligible rewritable cartridges can be reused after an approved overwrite or other validated logical technique. WORM, damaged, obsolete, or Destroy-assigned tapes should use another route.
Does relabeling an LTO tape erase its old data?
No. Relabeling can change catalog or beginning-of-tape information while older content remains farther along the tape.
Does degaussing work on LTO tape?
It can support Purge when the degausser is approved and matched to the tape’s coercivity. The process can also make the cartridge unusable.
Can a degaussed LTO tape be reused?
Organizations should normally treat an effectively degaussed LTO cartridge as non-reusable because required magnetic servo or format information may be removed.
Can encrypted LTO tape use cryptographic erase?
Potentially, but only when all target data was encrypted and every relevant key, wrapped key, recovery copy, and external key path is sanitized and validated.
Does breaking the cartridge destroy the data?
No. The magnetic tape ribbon can remain intact and readable after the plastic shell is broken.
Does NIST require LTO tape to be shredded to 2 mm?
No. NIST SP 800-88 Rev. 2 does not set one universal LTO particle size. Specific classified or contract requirements may establish an output.
Is WORM tape automatically secure at disposal?
No. WORM protects against rewriting during use. It still contains readable data at end of life and requires authorized sanitization or destruction.
Should old tape drives be destroyed with the cartridges?
Drive disposition and cartridge disposition are separate. Drives can contain configuration or other persistent storage, while every cartridge must be inventoried and processed independently.
Can shredded tape remnants be recycled?
Eligible validated remnants can enter an approved downstream process. Plastics, metals, and tape composition can complicate recovery, so the vendor should disclose final handling.
Request an LTO Tape Disposition Assessment
Provide LTO generations, cartridge counts, WORM status, encryption method, key-management design, retention release, service location, governing requirements, and evidence needs. Data Destruction Inc. will review the scope and identify suitable sanitization or destruction options.
Request an LTO Tape Destruction Quote
Call: (866) 850-7977
Sources
- National Institute of Standards and Technology, NIST Special Publication 800-88 Revision 2, Guidelines for Media Sanitization, September 2025.
- National Institute of Standards and Technology, NIST SP 800-88 Rev. 2 PDF, Sections 3.1, 3.2, 4.5, and Appendix C.
- National Security Agency and Central Security Service, NSA/CSS Policy Manual 9-12, Storage Device Sanitization Manual, February 19, 2026.
- LTO Program, LTO Generation Compatibility.
- LTO Program, LTO Ultrium Tape and Data Encryption.
- IBM, Tape Encryption Overview.
- IBM, Handling LTO Tape Cartridges.