Windows file systems: types, uses and compatibilities

Informatec Digital » Resources » Windows file systems: types, uses and compatibilities

When you format a hard drive, SSD, USB drive, or SD card in Windows, you're actually choosing how the data you store on it will be organized and protected. This "way of organizing" is what we call a file system, and in Windows there are several clear favorites: NTFS, FAT/FAT32, exFAT, and ReFS , along with some nearly obsolete veterans like HPFS.

Understanding these technologies isn't just for system administrators: choosing the wrong file system can mean being unable to copy a large file , losing security features, or experiencing compatibility issues with other devices and operating systems like Linux, macOS, consoles, or cameras. Let's take a closer look at how each file system works in Windows, what advantages it offers, and when it's best to use one or the other.

What is a file system in Windows?

A file system is the software layer responsible for placing, locating, and retrieving files on a storage device: hard drives, SSDs, flash drives, backup tapes, or optical media. It's the "librarian" that decides how the data is organized and named.

In Windows, each file system is implemented using specific drivers and libraries that define how metadata is stored, how directories are managed, what size limits exist, and what advanced features are available (encryption, compression, journaling, etc.).

All file systems compatible with Windows rely on three basic concepts that are important to understand because they appear in all technical documentation and administration tools:

• VolumesA volume is a logical unit that contains a complete file systemIt can correspond to an entire physical disk, a partition, or a logical volume created on top of several units (for example, with Storage Spaces or dynamic disks).
• DirectoriesA directory is a hierarchical structure that groups files and subdirectoriesIn practice, these are the "folders" you see in File Explorer.
• Archives: a file is an ordered set of related data (a document, a photo, a database, etc.) with a name, attributes, and associated permissions.

Beyond these basic elements, Windows also offers APIs and components for managing files, directories, volumes, and disks , as well as advanced technologies such as Transactional NTFS (TxF), which for years allowed file operations to be executed within atomic transactions on NTFS volumes.

FAT family: FAT12, FAT16, FAT32 and exFAT

The FAT (File Allocation Table) family is one of the oldest designs in the PC world. It originated with MS-DOS in the late 70s and 80s, and today it remains alive in USB drives, SD cards, digital cameras, and countless embedded devices thanks to its simplicity and universal compatibility.

The core idea of ​​FAT is very simple: the system maintains a table that acts as an index to all the contents of the volume. This table indicates which clusters are free, which are occupied, and how they are chained together to form files.

In a classic FAT volume, we can distinguish three fundamental zones that help us understand how it manages data:

• Boot sector: is the first sector of the partition and stores the basic parameters of the file system (cluster size, number of FAT table copies, boot information, etc.).
• FAT Tables: there are usually a main table and a backupEach entry in the table corresponds to a cluster and can indicate that it is free, that it is the end of a file, or that the next cluster of the same file is in another position.
• Data areaIt occupies almost the entire volume and is composed of clusters, which are contiguous groups of sectors used as the minimum allocation unitA file, however small, always occupies at least one full cluster, which can waste space when there are many small files.

Directories in FAT are simply areas within the data zone that contain 32-byte entries . Each entry describes a file or subdirectory: short (and optionally long) name, attributes, size, and initial cluster number. From there, the FAT table is used as a linked list to track the remaining clusters in the file.

Over time, several revisions appeared: FAT12, FAT16, and FAT32 . The number refers to the number of bits used to reference clusters (12, 16, or 32), which directly impacts the maximum number of clusters and, therefore, the possible cluster size and capacity.

Today, FAT12 and FAT16 are practically only seen on old floppy disks or very limited devices . In contrast, FAT32 remains very common because almost any operating system and electronic device can read and, usually, write to it.

FAT32: an old friend and ultra-compatible

FAT32 was introduced in 1996 and, although technically quite outdated, it remains the default format for many USB drives and SD cards we buy today. Its greatest strength is its compatibility: Windows, macOS, Linux, Android, game consoles, televisions, photocopiers… almost everything understands FAT32.

This compatibility comes at a price: significant limitations in capacity and features . The most well-known is the inability to store individual files larger than 4 GB, which is noticeable with very large movies, full backups , or virtual machine files.

Furthermore, although FAT32 can handle large volumes, the default formatting tool in Windows does not allow creating FAT32 partitions larger than 32 GB , although third-party utilities can achieve up to 2 TB. There are also practical limitations with very deep directory structures or with a large number of files in a single directory.

In terms of security and reliability, FAT32 lacks many modern features: it has no granular permissions, no journaling, and no built-in encryption . A power outage or a poorly timed crash can corrupt the FAT table, requiring the use of repair tools to attempt data recovery.

For all these reasons, FAT32 is recommended today mainly for small and highly portable drives , where the priority is above all that it "works anywhere" and where there is no need to store giant files or apply advanced security policies.

exFAT: the modern evolution of FAT designed for flash

To overcome the most glaring limitations of FAT32 without sacrificing its simplicity, Microsoft introduced exFAT (Extended File Allocation Table) in 2006, designed especially for high-capacity flash memory.

exFAT maintains the general philosophy of FAT but breaks the file and volume size barriers . The maximum theoretical file size goes up to 16 exabytes and volumes can reach 128 petabytes, more than enough for any typical home or professional use.

Thanks to these figures, exFAT is an excellent choice for external hard drives, portable SSDs, USB flash drives and high-capacity SD cards , especially when handling large files such as 4K/8K videos, disk images or large portable databases.

In terms of compatibility, Windows and macOS currently offer full read and write support for exFAT. On Linux, native support has been established since Microsoft published the specifications and integrated an official driver into the kernel, although some older distributions still require the installation of packages such as exfat-fuse and exfatprogs.

However, exFAT doesn't offer the same guarantees or advanced features as NTFS or ReFS: it lacks classic journaling, NTFS permissions, and many of the advanced recovery capabilities . It's a very practical and fast solution for removable storage, but it's not the ideal format for setting up a server or hosting the operating system.

NTFS: the Windows standard for internal disks

NTFS (New Technology File System) arrived in 1993 alongside Windows NT and became the default format for installing Windows starting with Windows 2000. Since then, it has been the undisputed king on Windows desktops and laptops, as well as on most traditional servers.

Compared to FAT, NTFS made a significant leap forward on all fronts: greater capacity, more security, better fault tolerance, and a wide range of advanced features that allow for better use of large disks and multi-user environments.

Internally, NTFS relies on a series of special system files that organize both metadata and, in many cases, the user data itself:

• $Boot: contains the essential boot information and key file system parameters needed to boot the volume.
• Master File Table (MFT)This is the heart of NTFS. The MFT contains one record for each file and directory on the volumeEach record stores attributes: name, size, dates, permissions, and even, when the file is very small, its own content directly within the MFT.
• $Bitmap: records whether each cluster is free or occupied using a bitmap, allowing manage space efficiently.
• $ LogFile: is the journal where NTFS record critical operations first Regarding metadata: If a failure occurs during an update, the system can redo or undo actions to preserve consistency.
• $BadClus: maintains the list of defective clusters, so that may deviate from future use and avoid writing new data to damaged areas.

Instead of sparse chains of clusters, NTFS attempts to allocate data in extents (contiguous ranges of clusters) . Whenever possible, it places each file in a single large extent to reduce fragmentation. When this isn't possible, it creates multiple extents, but it's still generally much better organized than FAT.

Directories are also special files that contain lists of names and references to objects . They rely on efficient data structures (such as B-trees) to speed up searches even when there are thousands of entries.

In terms of capacity, modern versions of NTFS can handle enormous files (theoretically tens of terabytes or exabytes) and volumes that, for a home environment, are practically "infinite." From the user's perspective, it's rare to encounter a size limit imposed by the file system itself.

NTFS also provides a set of features that differentiate it from FAT and exFAT:

• Detailed permissions and ACL: can be defined file and folder level access control listsThis allows you to specify which users and groups can read, write, or execute.
• Metadata journalingTransactional logging drastically reduces the risk of corruption following a power outage or system crash.
• Compression and encryptionNTFS allows compress files and folders and offers EFS encryption, as well as seamless integration with BitLocker full drive encryption.
• Disk quotas and links: it's possible limit the space each user can use and create hard links, mounting points or junctions to better organize the system.

For these reasons, NTFS is the recommended file system for internal Windows disks, partitions where applications are installed, and large external drives used primarily in Windows PCs.

In terms of compatibility, things get a bit more complicated: macOS can natively read NTFS, but not write to it , unless commercial or third-party drivers are used (such as Paragon NTFS or Tuxera NTFS). On Linux, read and write support is widespread and allows the use of NTFS partitions as data volumes, although installing Linux on NTFS is not common.

ReFS: The resilient file system for servers

ReFS (Resilient File System) is the latest file system developed by Microsoft and was first introduced in Windows Server 2012. It is designed for environments where maintaining data integrity against silent corruption and hardware failures is crucial.

One of the cornerstones of ReFS is the use of Copy-on-Write (CoW) applied to metadata and, in certain scenarios, to data . Instead of overwriting metadata in place when a file is updated, ReFS writes a modified copy to another area of ​​the disk and then updates the references. The result is that previous versions of critical structures are always available, which greatly aids in recovering a consistent state after a failure.

In addition, ReFS uses checksums for metadata and, optionally, for data , allowing it to detect silent errors, inconsistencies between replicas, or problems in the RAM > controller > cable > disk path. Combined with mirrors or parity, it can proactively correct many of these issues.

At the internal structure level, ReFS uses B+ trees as a common representation for both metadata and data. These trees consist of a root, internal nodes, and leaves, with ordered keys that facilitate efficient searches and updates across very large volumes.

This design makes ReFS particularly suitable for large, highly available storage systems , for example, in file servers, virtualization infrastructures, or backup solutions where huge amounts of data are handled and automatic repairs are needed.

Another key point is its integration with Storage Spaces . ReFS can work alongside mirrored or mirror-accelerated parity disk pools, offering features such as automatic correction of corrupted data, integrity streams, and online recovery.

Among the advanced features that ReFS provides and that do not exist (or work differently) in NTFS are block cloning, sparse VDL, accelerated reflection parity, and various snapshot mechanisms geared towards server workloads.

In return, ReFS lacks several features that NTFS does offer , such as file system compression and encryption, certain legacy transactional capabilities (TxF), or the ability to be used as a boot system in most current scenarios.

On the desktop, ReFS has made a tentative appearance in Windows 10 and Windows 11 , where the refs.sys driver is present but its use is limited. Windows 11 23H2, for example, introduces the concept of Dev Drives , ReFS volumes geared towards developers seeking to improve the performance and security of their repositories and tools.

It's possible to create ReFS volumes in certain editions of Windows 10/11 using commercial partitioning tools, registry hacks, or specific features like Dev Drive . However, ReFS is not yet bootable in most client configurations and continues to evolve with different internal versions (such as ReFS 3.10 in Windows 11 23H2), which are not always backward compatible.

In home Windows environments it remains largely unknown, and its support in other systems, such as Linux, usually relies on third-party commercial drivers like those from Paragon.

HPFS: The old high-performance file system

Before NTFS, Microsoft developed HPFS (High Performance File System) with IBM , originally introduced with OS/2 1.2 in the late 80s. Its goal was to offer significantly better performance than FAT on high-end servers and systems of the time.

Unlike FAT, which allocates the first free cluster it finds, HPFS tried to place data in contiguous or at least very close blocks , to reduce fragmentation and improve sequential read and write speeds.

The internal organization of HPFS included three control blocks at the beginning of the disk (boot block, superblock, and reservation block) that occupied several sectors and described the structure of the file system.

The remaining space was divided into bands of approximately 8 MB, made up of contiguous sectors . Each band had its own bitmap to indicate which sectors were occupied and which were free, allowing for more granular management of the space.

Each file and directory had an associated F-node located near its data , which stored information about the physical location and extended attributes. The directory structure was organized as a balanced tree with alphabetically ordered entries to speed up searches.

However, HPFS had its own limitations and eventually became obsolete in favor of NTFS. Modern versions of Windows stopped supporting it starting with Windows NT 4 , so today it is practically only seen on older OS/2 systems or very early historical Windows NT installations.

Other storage technologies related to Windows

In addition to the file systems themselves, Windows incorporates several storage management technologies that provide additional layers of abstraction, resilience, and optimization. In many cases, these technologies create logical volumes on which NTFS or ReFS is then mounted.

It is important to note that these solutions do not replace the file system, but work in conjunction with it , adding features such as mirroring, parity, deduplication, or full disk encryption.

The main technologies related to the Windows ecosystem that you should be aware of are the following:

• Storage Spaces: allows grouping several physical units into storage pools and create virtual volumes on them with varying degrees of resilience (double or triple mirroring, single or double parity). It only works with modern file systems such as NTFS and ReFSand it is a very flexible option for setting up "software RAIDs" managed by Windows itself.
• Dynamic disks: legacy feature available mainly in older versions of Windows that allows you to create simple, spanned, striped, mirrored, and RAID-5 volumesThese volumes are usually formatted with NTFS or, in some specific cases, with FAT32. It is an obsolete technology compared to Storage Spaces, but it is still found in many older installations.
• Data deduplication: advanced feature present in specific editions of Windows (especially Server) that Detects duplicate blocks and stores a single copyMaintaining references to it from all files that share it. This can save enormous amounts of space in environments with a lot of redundant data (for example, virtual machine repositories or nearly identical documents). It integrates tightly with NTFS and ReFS.
• BitLocker: solution of full disk encryption Integrated into Windows, it protects entire volumes, making data inaccessible without the correct key or configured authentication. It operates on top of the standard Windows file systems, primarily NTFS, FAT32 and exFAT, without the applications having to change the way they work with files.

These technologies can complicate certain processes, such as data recovery after a serious failure, because they introduce additional layers between the operating system and the data on the disk . Therefore, when working with Storage Spaces, deduplication, or BitLocker, it is crucial to follow the specific guides provided by Microsoft or the chosen recovery software.

Compatibility with other operating systems and choice of format

When choosing a file system in Windows, one of the key factors is compatibility with other devices and operating systems . Formatting a disk for use only on your Windows PC is not the same as preparing a USB drive that you'll plug into TVs, game consoles, Macs, and Linux computers.

Generally speaking, if you need a drive to be recognized by almost anything, FAT32 is still the most universal format , although it has the infamous 4GB file limit and is not recommended for high-capacity drives where you want to store large files.

When you need to move files larger than 4 GB between Windows, macOS, and Linux, exFAT is the standard choice, as it balances modern compatibility with the absence of reasonable size limits . It's commonly used on external drives for backups or large video projects.

If you only work in Windows environments and want to take advantage of advanced features like permissions, compression, quotas, or snapshots, NTFS is the logical choice for internal drives and many external drives . It also allows for much greater volume growth and larger file sizes.

In purely Apple ecosystems, macOS uses APFS and HFS+ as its proprietary file systems, while Linux typically relies on ext2, ext3, ext4, XFS, Btrfs, F2FS, JFS, or ReiserFS, among others. Each of these has its own logic and characteristics, but for sharing data with Windows, they still commonly use FAT32, exFAT, or, to a lesser extent, NTFS.

When you want to change the file system of a drive, keep in mind that most formatting processes destroy existing data . It's best to make a full backup first and only then format and restore the information. There are free and paid tools that allow you to manage partitions and conversions more safely, and even Windows includes basic wizards for formatting and converting drives, for example, in the case of USB flash drives.

As a general rule, for the everyday needs of a home user, FAT32 is usually sufficient for small USB drives with small documents, exFAT for external drives with large files, and NTFS for internal hard drives or purely Windows backups . For more advanced uses, such as file servers or large data farms, ReFS and technologies like Storage Spaces, deduplication, or BitLocker come into play.

With this comprehensive overview of formats and technologies, it becomes easier to understand that choosing a file system isn't just a formality during formatting, but a decision that impacts performance, security, data recovery, and future compatibility . Taking a moment to consider what you'll be doing with each drive can save you a lot of headaches when you start moving files from one place to another.