Source review: September 29, 2026. Tenant validation pending.
Page tools and document details
Identify the file before choosing a restore
Unexpected bulk changes or ransomware signs need incident response first. Stop ongoing damage and coordinate recovery from a trusted device; otherwise restored files can be changed again.
Scope, access and recovery limits
This guide covers an active OneDrive for work or school account. A Teams channel file may belong to SharePoint. A folder shared with you may need its owner to restore it. A deleted employee account or site needs the administrator's separate account/site recovery process.
- Access
- The owner or an authorized operator needs access to the file and its recovery options. Do not grant yourself broad access to another person's OneDrive.
- Available history
- Work/school recycle-bin retention is normally 93 days from original deletion across both stages. Versions depend on the library's actual versioning and expiration settings. Check what exists.
- Whole-OneDrive restore
- For a qualifying Microsoft 365 subscription, this feature can undo recent actions within 30 days. It affects later valid work too. An upgrade cannot recreate already unavailable history.
Three recovery clocks that are easy to confuse
Deleted file: the normal work/school recycle-bin period is 93 days from the original deletion. Moving to the second-stage bin does not start another 93-day period. Check the remaining time and the actual item before planning recovery. Microsoft recycle-bin behavior.
Overwritten file: available versions depend on the library’s version-history limits. Automatic expiration, count limits or a previous trim can remove the version you want. Changing the limit today does not recreate a version already deleted. Version-history limits.
Deleted user’s OneDrive: this is a separate site-lifecycle process. The configured retention after user deletion defaults to 30 days, followed by a deleted-site period of 93 days. A SharePoint administrator checks the actual site state and any retention policies. These periods are not a promise that an individual file is recoverable. Restore a deleted OneDrive.
Match the symptom to a recoverable item
| What you find | Next step |
|---|---|
| The correct content exists in the browser but not on one device | Follow the Windows sync guide for a client-only problem. Preserve unsynced local work; a cloud restore is not the first fix. |
| The item is in Recycle bin | Use branch A below. |
| The file exists, but its content is wrong and a good version is present | Use branch B below. |
| Many items changed at a known time | Use branch C with the owner after damage is contained. |
| The item/history is absent | Confirm owner and path, ask an administrator about the second-stage bin and existing backup or retention coverage. Record what is unavailable; do not promise recovery. |
Restore the narrowest verified target
A. Deleted item
In the correct OneDrive website, open Recycle bin, select the exact item and choose Restore. Inspect its restored location and name. If it is absent from the first stage, an authorized administrator can check the second-stage recycle bin.
B. Overwritten or damaged file
Preserve the current file separately if it contains useful later edits. Select the file → Version history → inspect the candidate version → its menu → Restore. The selected version becomes current; verify its contents before collaborators resume editing.
C. Many changed items
With the owner, record the last clean point and preserve valid later work. Open Settings → Restore OneDrive. Review the activity feed and the full set of actions to undo before selecting Restore. Newer files can move to the recycle bin. This is a broad recovery operation, not a substitute for one-file version history.
If the preview does not match the incident window, stop. Files absent from the recoverable history need an existing backup/retention route or Microsoft support assessment. Do not experiment by emptying bins or changing retention settings.
If the first restore option does not show the file
- In the browser, verify whether this is your own OneDrive, another person’s shared folder or a SharePoint/Teams library. Search by a distinctive filename fragment and inspect recent activity before assuming deletion.
- For a missing deleted item, open Recycle bin. If the item is absent, use the Second-stage recycle bin link where available or ask the site collection administrator. Match original location and deletion time before restoring.
- For an existing file, open Version history and inspect the candidate version’s time, author and contents. Preserve useful current edits before Restore. If the expected version is absent, document the earliest available version and the gap.
- For a whole-OneDrive restore, select the earliest unwanted operation in the activity feed. Every later selected action will also be undone. Review valid work created after that time with the owner before confirming.
Example: only yesterday’s spreadsheet formulas were overwritten. Inspect that file’s version history first. Rolling back all of OneDrive could undo today’s unrelated documents and folders.
Prove the right content came back
Wrong version restored: inspect version history again and restore the correct available version or reconcile the preserved copy with the owner. Unexpected wide impact: stop further changes, preserve the activity record and escalate before another bulk restore.
Prepare the recovery handoff
Problem: deleted / overwritten / widespread / sync only Work/school account and owner verified: File path (redact confidential names externally): Last known good time and UTC offset: Recycle bin / version / backup availability: Recovery branch and scope approved: Action time and content/access/sync test results: Missing items / next owner:
Keep original files and sensitive paths in your approved storage. Request recovery support with a redacted description. For repeated gaps, ask for a review of existing retention and backup coverage before buying additional services.