exFAT vs FAT32 vs NTFS: Choosing a File System for Removable Media

exFAT was created to solve one specific problem: FAT32 cannot store a file larger than 4 GB, and by the time high-definition video and large disk images became ordinary, that limit had become intolerable on removable media.

The obvious alternative was NTFS, but NTFS carries permissions, journaling and Windows-specific metadata that make it a poor fit for a memory card moving between a camera, a phone and a laptop. exFAT is the middle option: modern capacity limits, minimal overhead, broad compatibility.

The Three, Compared

FAT32 — maximum file size 4 GB minus one byte, maximum volume size 2 TB in practice (32 GB when formatting through the Windows GUI). Universally readable by essentially every device ever made. No permissions, no journaling, no encryption. Covered further in FAT32.

exFAT — file and volume limits so large they are irrelevant in practice (128 PB). Supported by Windows, macOS, modern Linux, Android and most cameras. Larger cluster sizes suited to big sequential files. Still no permissions, no journaling, no encryption, no compression.

NTFS — access control lists, journaling, encryption via EFS, compression, quotas, alternate data streams, hard links. The correct choice for a Windows system volume. Read-only on macOS without third-party software, which is the practical reason it is a poor choice for a shared external drive.

What "No Journaling" Actually Costs

A journaling file system records what it is about to do before doing it, so an interruption mid-write can be resolved on the next mount. exFAT has no journal.

The consequence is concrete: pull an exFAT drive during a write, or lose power, and the file system can be left inconsistent. This is precisely why the operating system nags about safely ejecting removable media. It is also why exFAT is a poor choice for anything doing frequent small writes, and why it should not be trusted as the only copy of important data.

Security Implications

This is the part that matters beyond A+, and it follows from the absence of features rather than any flaw.

No file permissions. Every file on an exFAT volume is readable by anyone who can mount it. There is no ownership model to enforce.

No native encryption. Protection must come from elsewhere — BitLocker To Go, VeraCrypt, or an encrypted container file. An exFAT drive is plaintext by default, which makes a lost drive a disclosure.

Permissions do not travel. Copying files from an NTFS volume to exFAT silently discards their access control lists. Copy them back and they inherit whatever the destination folder specifies. Alternate data streams are dropped in the same way, which is occasionally how a Mark of the Web gets stripped from a downloaded file — a real technique for defeating macro restrictions, not just a curiosity.

Together these are why removable media policy exists at all, and they sit alongside the device-level controls in removable media and peripheral security.

Choosing

• Windows system drive — NTFS. Nothing else is appropriate.
• Large external drive shared between Windows and macOS — exFAT.
• Camera or drone memory card — exFAT above 32 GB, which is what the SDXC specification mandates; FAT32 below.
• Small USB stick for maximum compatibility, including old equipment and firmware updates — FAT32.
• Linux system drive — ext4 or similar, not any of these.

A note on formatting: Windows limits FAT32 formatting to 32 GB through the graphical tool but will happily read larger FAT32 volumes formatted elsewhere. The limit is in the utility, not the file system, and this shows up as an exam distractor.

Recovery

Because exFAT lacks journaling and keeps a comparatively simple allocation table, deleted files are frequently recoverable — useful for the owner, and a disposal problem for everyone else. Reformatting does not erase the data. An exFAT drive leaving the organization needs secure erasure or destruction, not a quick format.

Exam Focus

Know the FAT32 4 GB file limit — the most tested fact here. Know exFAT removes it while adding no security features. Know NTFS is the only one of the three with permissions and journaling. Know macOS reads NTFS but cannot write to it natively. And know that copying to exFAT discards permissions and alternate data streams.