Why You Can't Just Remove the SSD
The NAND chips are physically soldered to the board and cryptographically paired to the SoC (System on Chip). Even if you could desolder them, they cannot be read without the original processor. The encryption keys are generated during initial pairing and stored in the Secure Enclave inside the Apple Silicon die.
Earlier Intel Macs with removable NVMe modules allowed transferring the SSD to another identical Mac. Apple Silicon eliminated that option. The M1, M2, M3, and M4 processors each integrate the storage controller directly into the SoC. No adapter, enclosure, or donor board can substitute for the original processor.
Affected Devices
MacBook Air M1 (2020), M2 (2022), M3 (2024). MacBook Pro M1/M1 Pro/M1 Max (2021), M2 Pro/M2 Max (2023), M3/M3 Pro/M3 Max (2023), M4/M4 Pro/M4 Max (2024). Mac Mini M1 (2020), M2 (2023), M4 (2024). Mac Studio M1 Max/M1 Ultra (2022), M2 Max/M2 Ultra (2023). iMac M1 (2021), M3 (2023), M4 (2024).
Secure Enclave and NAND Encryption
Apple Silicon integrates the storage controller, Secure Enclave, and application processor into a single SoC die. Every block written to the soldered NAND passes through AES-256 encryption in XTS mode before reaching the flash chips. The encryption keys are generated inside the Secure Enclave during initial device setup and fused to that specific processor. They never leave the SoC.
This is a tighter integration than the T2 architecture, where the security chip was a separate IC on the board. On T2 Macs, a failure between the T2 and the CPU could sometimes be bridged. On Apple Silicon, the encryption controller and storage controller share the same die. Any failure that prevents the SoC from initializing blocks all access to the NAND.
The same constraint applies to Microsoft Surface Laptops and tablets with soldered storage where BitLocker keys are bound to the TPM. The recovery approach is identical: repair the board to restore the security processor, let it decrypt in place, then image the data.
Diagnostic Methodology
Apple Silicon boards use multi-layer PCBs with tight component spacing. Fault isolation requires systematic instrumentation, not visual inspection.
- Bench power supply current profiling
- The board is powered from a bench supply at battery voltage. Current draw at each stage of the boot sequence is compared against known-good profiles for that board revision. Abnormal current at a specific boot stage points to the subsystem that is failing. Zero current draw at a stage where the SoC should be active indicates an open circuit or failed voltage regulator upstream.
- FLIR thermal fault localization
- With the board drawing abnormal current, FLIR thermal imaging identifies which component is converting that current into heat. On Apple Silicon boards, the most common thermal signatures are shorted capacitors on PMIC output rails and failed MOSFETs on the main power path. The thermal camera resolves fault location to individual components in seconds.
- Schematic-guided repair
- Board schematics map every power rail, signal path, and component value. Once the failed component is identified via thermal imaging, the schematic confirms what replacement value is needed and whether adjacent components may also be affected. Hakko microsoldering equipment replaces the failed component under microscope. The repair targets only the minimum needed for the SoC to initialize and decrypt.
Board Repair as Data Recovery
- Fault isolation: Bench power supply current profiling, FLIR thermal imaging, and schematic-guided multimeter probing to identify the specific failed component. Common failure points on Apple Silicon boards include power management IC failures, SoC connection issues from drop or liquid damage, and failed passive components on critical voltage rails.
- Targeted repair: Only the failed components are replaced using Hakko microsoldering equipment under microscope. The SoC, NAND, and their cryptographic pairing remain untouched. The goal is not a full repair to daily-use condition; it only needs to reach a state where the Secure Enclave initializes.
- Data transfer: Once the SoC can initialize, the Secure Enclave decrypts the NAND and macOS or Apple Configurator allows data transfer to an external drive via Thunderbolt. The data is imaged to a safe destination, and the recovery is complete.
Common M-Series Component Failures
Most M-series data recovery cases trace back to a small number of component failure patterns. The table below maps observable symptoms to specific components. Each of these failures is repairable at the board level.
| Symptom | Likely Component Failure | Recovery Method |
|---|---|---|
| Charger stuck at 5V, 0A draw | CD3217 USB-C controller or TPS62180 buck converter (common on A2442 boards, 820-02098) | Replace failed IC via microsoldering. Restores 20V negotiation, SoC powers on, Secure Enclave decrypts NAND. |
| No power, excessive current draw (>1A at boot) | Shorted capacitor or MOSFET on PMIC output rail (PP3V3_G3H, PPVCC_S0_CPU) | FLIR thermal imaging to locate hot component. Remove shorted part, verify rail resistance, replace if needed. |
| DFU mode detected but no boot | Corrupt iBoot first-stage bootloader | Apple Configurator 2 firmware restore (caution: "Restore" wipes data; only use "Revive" if available for M-series). |
| Liquid damage, intermittent boot | Corrosion on power rails, typically around PMIC and SoC bypass caps | Ultrasonic cleaning, resistance mapping of affected rails, replacement of corroded passives. |
| Kernel panic on NAND access | Failing NAND package or broken solder joint between NAND BGA and board | Reflow or reball NAND connection. If NAND IC is damaged, the data on that specific package may be unrecoverable. |
Watch: Soldered SSD Diagnostics
This walkthrough shows the same diagnostic methodology used on Apple Silicon boards: bench supply current profiling, FLIR thermal fault localization, and targeted component replacement.
Recovery Examples
Recovery examples from our lab are being documented and will be added here.
Apple Silicon Recovery Pricing
Apple Silicon Mac recovery uses flat-rate pricing per model era, not per failure type. Free evaluation, firm quote before work begins. No data = no charge. If recovery fails, you owe $0. Call (512) 212-9111.
2016-2020 (Select Models)
$325Older soldered-SSD MacBooks with T1 or early T2 chips
A1706, A1707, A1932, A2179, A1989
2018-2021 + M1 (Select Models)
$425T2 Intel and early M1 MacBooks
A1990, A2141, A2338, A2337, A2289, A2251, A2159
2021-2024 Pro/Air (M1 Pro/M2+)
$600Current-generation MacBook Pro and Air with M1 Pro, M2, M3, or M4 chips
A2442, A2485, A2779, A2780, A2918, A2991, A2992
Frequently Asked Questions
Can you recover data from a dead M1/M2/M3/M4 MacBook?
Why can't the NAND chips be moved to another Apple Silicon Mac?
Is Apple Silicon recovery harder than T2 recovery?
What happens to my data if the SoC is damaged?
Related services
Related Recovery Services
Apple Silicon Mac not booting?
Free evaluation. $325-$600. No data, no fee.