Safety & trust
Data safety & destructive actions
How BootForge guards the operations that erase a drive, and the safeguards built into every write.
Preparing or formatting a USB drive erases it. BootForge is built so that nothing destructive ever happens by accident, and so that an interrupted operation can’t quietly corrupt your data.
Every erase is explicit
Before any operation that erases, partitions, or overwrites a drive, BootForge shows:
- the drive’s name and capacity, so you can confirm it’s the right device;
- a plain, prominent “this will erase all data” warning;
- an “this cannot be undone” statement;
- a checkbox you must tick to acknowledge the data loss;
- a clearly-labelled action button (Erase and install, Erase and format, Erase & reinstall) — never a generic “Continue”.
Destructive behaviour is never hidden behind an innocent-looking button.
Writes are verified, not assumed
During prepare, update, and format, BootForge reads back what it wrote and checks it at each stage — the boot record, the Ventoy core, and the system image. The Ventoy boot files themselves are checksum-pinned before they’re ever written. If a check fails, BootForge stops rather than leave a half-written, unbootable, or corrupt drive.
Fail-closed by design
When something is wrong — a drive too small for a safe layout, a capacity that can’t be read, an unverified file — BootForge refuses before making any change rather than guessing. Messages like “refused before any change was made” mean exactly that: your drive is untouched.
Reads never modify
Inspecting a drive, running diagnostics, verifying a file, and reading a drive’s contents are all read-only — they never write to the device or alter the file.
Disconnect handling
If the drive is unplugged mid-operation, BootForge tells you clearly and explains the drive may be incomplete, with what to do next. The Drive tab also clears itself when a drive is detached, so you never act on a stale list.
Clear, actionable errors
Every error answers four questions: what happened, why, what to try next, and the advanced details if you want them — so you’re never left with a bare “Failed.”