Find exact OneDrive duplicates without downloading your files.
ClearCopies reads the metadata OneDrive already exposes through Microsoft Graph, compares quickXorHash fingerprints—with SHA-1 on items that provide it—and groups only files with the same byte size and a matching fingerprint of the same algorithm. You review the evidence; the first connection cannot change your files.
Anonymized production benchmark · August 2026
Validated on a six-figure-file OneDrive library
A completed read-only production scan indexed 102,610 files across 584 GB. Exact size-and-fingerprint matching identified 16,718 groups and 22.4 GB of recoverable extra copies. Similar or uncertain files were kept outside that exact total.
- 102,610
- files indexed
- 584 GB
- metadata inventory
- 22.4 GB
- exact recovery estimate
This benchmark exposed the difference between broad possible-match totals and exact recoverable storage, so the product now keeps those classifications visibly separate.
Written by ClearCopies Editorial · Technical review by ClearCopies Engineering
A OneDrive scan built around fingerprint evidence
OneDrive mixes personal folders, Microsoft 365 work libraries, shared items and files synced from several devices. The scan keeps those differences visible instead of forcing every item into an exact-match result.
- 01
Authorize read-only access
Microsoft asks you to approve Files.Read alongside sign-in scopes. ClearCopies receives no OneDrive write permission in this step.
- 02
Enumerate the drive with Graph delta
The adapter walks the drive through Microsoft Graph's delta feed, follows pagination, backs off when Graph signals throttling and records sizes, paths, timestamps and available hashes.
- 03
Group by size and fingerprint
Files become exact candidates only when their byte counts are identical and a quickXorHash—or SHA-1—value from the same algorithm matches.
- 04
Review defensible groups
Items without a comparable hash stay outside the automatic exact set for manual review. Nothing is renamed, moved or deleted while you decide.
quickXorHash is OneDrive's own content fingerprint
Microsoft computes quickXorHash for files on both OneDrive personal and OneDrive for Business, and some items also expose a SHA-1 value. ClearCopies keeps the algorithm name attached to every fingerprint, so a quickXorHash value is never compared as though it were SHA-1.
- 1
Graph metadata
size + quickXorHash / sha1Hash
- 2
Normalized signal
algorithm name + content fingerprint
- 3
Size gate
identical byte count required first
- 4
Exact candidate
same bytes + matching fingerprint of the same algorithm
Some OneDrive items do not expose a file hash in their metadata. Without a comparable fingerprint, ClearCopies does not promote them to an exact group; matching names, dates or folders remain review leads only.
What ClearCopies can see in OneDrive
The Microsoft consent screen is intentionally narrow. It supports inventory and duplicate analysis across OneDrive personal and Microsoft 365 business drives, not cleanup actions.
Reads for the scan
File identity and location
Names, IDs, parent folders and reconstructed paths across the connected drive.
Duplicate evidence
Byte sizes plus the quickXorHash or SHA-1 values Microsoft Graph returns with file metadata.
Review context
Created and modified times, sharing state and available thumbnail links for candidate groups.
Change-tracking state
Graph delta cursors and pagination markers, so large drives can be enumerated without re-reading everything.
Does not do
Download file bodies for hashing
Exact grouping uses the hashes Microsoft Graph returns with metadata rather than transferring each file to ClearCopies.
Rename, move or delete files
Files.Read does not authorize changes to OneDrive content, so the scan cannot alter your drive.
Call a name match an exact duplicate
A repeated filename or byte count can create a review lead, but neither proves identical content.
Trash requires separate permission
Moving a reviewed OneDrive copy to the recycle bin is a separate step. ClearCopies requests Files.ReadWrite only later, after a paid cleanup has been reviewed and confirmed, and approved copies go to the OneDrive recycle bin where they remain recoverable—never permanent deletion, and never part of the read-only scan.
Plan a OneDrive review before changing anything
Use these tools to inspect fingerprint evidence, estimate reclaimable space and check practical limits, then use the guides to understand how OneDrive duplicates appear and how to review them safely.
Free tools
- Scan OneDrive read-onlyRun the connected metadata scan with quickXorHash evidence and a review-first result.
- Estimate reclaimable storageCalculate how much OneDrive space extra exact copies occupy before you review them.
- Compute quickXorHash locallyHash a local file with Microsoft's algorithm and compare it against OneDrive metadata.
- Analyze an inventory CSVGroup an exported OneDrive file list by byte size and hash without connecting an account.
- Check OneDrive path lengthsFlag folder paths that approach OneDrive limits before you reorganize keeper files.
Practical guides
- Find OneDrive duplicatesUse a fingerprint-first workflow and keep unsupported items separate.
- Skip the full downloadSee why Graph metadata and quickXorHash make re-downloading every file unnecessary.
- Review cleanup safelySeparate exact evidence, keeper decisions and any later recycle-bin action.
- Understand why copies appearTrace sync conflicts, re-uploads and device names back to their causes.
- Learn how quickXorHash worksUnderstand Microsoft's OneDrive fingerprint and what a match does and does not prove.
- Recover OneDrive storagePrioritize exact extra copies and account for recycle-bin behavior.
Questions about scanning OneDrive
Straight answers about fingerprints, permissions and the boundary between review and cleanup.
Does ClearCopies download my OneDrive files?
No. Duplicate grouping uses file metadata and the quickXorHash or SHA-1 values Microsoft Graph already returns. ClearCopies does not download file bodies to calculate its own hashes.
What is quickXorHash?
It is the content fingerprint Microsoft computes for OneDrive files, available on both OneDrive personal and OneDrive for Business. ClearCopies compares it only with another quickXorHash value, never with a SHA-1 or MD5 value.
Does the scan cover OneDrive for Business and Microsoft 365?
Yes. The adapter reads the drives visible to the connected Microsoft account through Graph, so both personal accounts and work or school OneDrive libraries can be scanned. Actual visibility depends on that account's permissions.
Can the first Microsoft connection delete or move files?
No. The initial OAuth request uses the read-only Files.Read scope. Write access via Files.ReadWrite is requested separately and only after a paid cleanup has been reviewed and confirmed.
What happens to copies I approve for cleanup later?
Approved copies are moved to the OneDrive recycle bin, where they remain recoverable for the retention period Microsoft applies to your account. ClearCopies never deletes files permanently.
Are matching OneDrive filenames enough to mark an exact duplicate?
No. Exact candidates require identical byte sizes plus a matching fingerprint of the same algorithm. Names, dates and folders help with review but do not prove identical content.
Review exact OneDrive
Connect OneDrive with read-only access, inspect the fingerprint evidence, and decide which path matters before any future cleanup step.