Why You Can't Just Remove the SSD
The NAND chips are physically soldered to the board and cryptographically paired to the SoC (System on Chip). Even if you could desolder them, they cannot be read without the original processor. The encryption keys are generated during initial pairing and stored in the Secure Enclave inside the Apple Silicon die.
Earlier Intel Macs with removable NVMe modules allowed transferring the SSD to another identical Mac. Apple Silicon eliminated that option. The M1, M2, M3, and M4 processors each integrate the storage controller directly into the SoC. No adapter, enclosure, or donor board can substitute for the original processor.
Affected Devices
MacBook Air M1 (2020), M2 (2022), M3 (2024). MacBook Pro M1/M1 Pro/M1 Max (2021), M2 Pro/M2 Max (2023), M3/M3 Pro/M3 Max (2023), M4/M4 Pro/M4 Max (2024). Mac Mini M1 (2020), M2 (2023), M4 (2024). Mac Studio M1 Max/M1 Ultra (2022), M2 Max/M2 Ultra (2023). iMac M1 (2021), M3 (2023), M4 (2024).
Secure Enclave and NAND Encryption
Apple Silicon integrates the storage controller, Secure Enclave, and application processor into a single SoC die. Every block written to the soldered NAND passes through AES-256 encryption in XTS mode before reaching the flash chips. The encryption keys are generated inside the Secure Enclave during initial device setup and fused to that specific processor. They never leave the SoC.
This is a tighter integration than the T2 architecture, where the security chip was a separate IC on the board. On T2 Macs, a failure between the T2 and the CPU could sometimes be bridged. On Apple Silicon, the encryption controller and storage controller share the same die. Any failure that prevents the SoC from initializing blocks all access to the NAND.
The same constraint applies to Microsoft Surface devices where BitLocker keys are bound to the TPM. The recovery approach is identical: repair the board to restore the security processor, let it decrypt in place, then image the data.
Diagnostic Methodology
Apple Silicon boards use multi-layer PCBs with tight component spacing. Fault isolation requires systematic instrumentation, not visual inspection.
- Bench power supply current profiling
- The board is powered from a bench supply at battery voltage. Current draw at each stage of the boot sequence is compared against known-good profiles for that board revision. Abnormal current at a specific boot stage points to the subsystem that is failing. Zero current draw at a stage where the SoC should be active indicates an open circuit or failed voltage regulator upstream.
- FLIR thermal fault localization
- With the board drawing abnormal current, FLIR thermal imaging identifies which component is converting that current into heat. On Apple Silicon boards, the most common thermal signatures are shorted capacitors on PMIC output rails and failed MOSFETs on the main power path. The thermal camera resolves fault location to individual components in seconds.
- Schematic-guided repair
- Board schematics map every power rail, signal path, and component value. Once the failed component is identified via thermal imaging, the schematic confirms what replacement value is needed and whether adjacent components may also be affected. Hakko microsoldering equipment replaces the failed component under microscope. The repair targets only the minimum needed for the SoC to initialize and decrypt.
Board Repair as Data Recovery
- Fault isolation: Bench power supply current profiling, FLIR thermal imaging, and schematic-guided multimeter probing to identify the specific failed component. Common failure points on Apple Silicon boards include power management IC failures, SoC connection issues from drop or liquid damage, and failed passive components on critical voltage rails.
- Targeted repair: Only the failed components are replaced using Hakko microsoldering equipment under microscope. The SoC, NAND, and their cryptographic pairing remain untouched. The goal is not a full repair to daily-use condition; it only needs to reach a state where the Secure Enclave initializes.
- Data transfer: Once the SoC can initialize, the Secure Enclave decrypts the NAND and macOS or Apple Configurator allows data transfer to an external drive via Thunderbolt. The data is imaged to a safe destination, and the recovery is complete.
Common M-Series Component Failures
Most M-series data recovery cases trace back to a small number of component failure patterns. The table below maps observable symptoms to specific components. Each of these failures is repairable at the board level.
| Symptom | Likely Component Failure | Recovery Method |
|---|---|---|
| Charger stuck at 5V, 0A draw | CD3217 USB-C controller or TPS62180 buck converter (common on A2442 boards, 820-02098) | Replace failed IC via microsoldering. Restores 20V negotiation, SoC powers on, Secure Enclave decrypts NAND. |
| No power, excessive current draw (>1A at boot) | Shorted capacitor or MOSFET on PMIC output rail (PP3V3_G3H, PPVCC_S0_CPU) | FLIR thermal imaging to locate hot component. Remove shorted part, verify rail resistance, replace if needed. |
| DFU mode detected but no boot | Corrupt iBoot first-stage bootloader | Apple Configurator 2 firmware restore (caution: "Restore" wipes data; only use "Revive" if available for M-series). |
| Liquid damage, intermittent boot | Corrosion on power rails, typically around PMIC and SoC bypass caps | Ultrasonic cleaning, resistance mapping of affected rails, replacement of corroded passives. |
| Kernel panic on NAND access | Failing NAND package or broken solder joint between NAND BGA and board | Reflow or reball NAND connection. If NAND IC is damaged, the data on that specific package may be unrecoverable. |
Watch: Soldered SSD Diagnostics
This walkthrough shows the same diagnostic methodology used on Apple Silicon boards: bench supply current profiling, FLIR thermal fault localization, and targeted component replacement.
Recovery Examples
Recovery examples from our lab are being documented and will be added here.
SSD Recovery Pricing
Apple Silicon Mac recovery follows our standard SSD recovery pricing tiers. Free evaluation, firm quote before work begins. No data = no charge. Call (512) 212-9111.
Simple Copy
Low complexityYour drive works, you just need the data moved off it
$200
3-5 business days
Functional drive; data transfer to new media
Rush available: +$100
File System Recovery
Low complexityYour drive isn't showing up, but it's not physically damaged
From $250
2-4 weeks
File system corruption. Visible to recovery software but not to OS
Starting price; final depends on complexity
Circuit Board Repair
Medium complexityYour drive won't power on or has shorted components
$450–$600
3-6 weeks
PCB issues: failed voltage regulators, dead PMICs, shorted capacitors
May require a donor drive (additional cost)
Firmware Recovery
Medium complexityMost CommonYour drive is detected but shows the wrong name, wrong size, or no data
$600–$900
3-6 weeks
Firmware corruption: ROM, modules, or system files corrupted
Price depends on extent of bad areas in NAND
PCB / NAND Swap
High complexityYour drive's circuit board is severely damaged and requires NAND chip transplant to a donor PCB
$1,200–$1,500
4-8 weeks
NAND swap onto donor PCB. Precision microsoldering and BGA rework required
50% deposit required; donor drive cost additional
50% deposit required
Hardware Repair vs. Software Locks
Our "no data, no fee" policy applies to hardware recovery. We do not bill for unsuccessful physical repairs. If we replace a hard drive read/write head assembly or repair a liquid-damaged logic board to a bootable state, the hardware repair is complete and standard rates apply. If data remains inaccessible due to user-configured software locks, a forgotten passcode, or a remote wipe command, the physical repair is still billable. We cannot bypass user encryption or activation locks.
No data, no fee. Free evaluation and firm quote before any paid work. Full guarantee details. NAND swap requires a 50% deposit because donor parts are consumed in the attempt.
Rush fee: +$100 rush fee to move to the front of the queue.
Donor drives: A donor drive is a matching SSD used for its circuit board. Typical donor cost: $40–$100 for common models, $150–$300 for discontinued or rare controllers.
Target drive: The destination drive we copy recovered data onto. You can supply your own or we provide one at cost plus a small markup. All prices are plus applicable tax.
Estimate Your Apple Silicon Recovery Cost
Select your symptoms and drive type for a preliminary cost range. Final pricing comes after a free evaluation.
What type of SSD do you have?
This determines the recovery method and pricing.
Not sure which type you have? Call (512) 212-9111 and we can help identify it.
Frequently Asked Questions
Can you recover data from a dead M1/M2/M3/M4 MacBook?
Why can't the NAND chips be moved to another Apple Silicon Mac?
Is Apple Silicon recovery harder than T2 recovery?
What happens to my data if the SoC is damaged?
Apple Silicon Mac not booting?
Free evaluation. $200 to $1,500. No data, no fee.