Finding a specific deleted file in a large SharePoint Online recycle bin is harder than most admins expect. These are the three approaches available, compared across the dimensions that matter most in a real recovery scenario.
| Approach | Search by keyword | Filter by date range | Tenant-wide scope | Scripting required | Bulk restore from results |
|---|---|---|---|---|---|
| Native SharePoint browser | No (column sort only) | No | No | No | No |
| PnP PowerShell | Yes (Where-Object) | Yes | Yes (loop required) | Yes | Via script |
| ShareMaster Recycle Master | Yes | Yes | Yes | No | Yes |
How Does SharePoint Recycle Bin Search Work?
The SharePoint Online recycle bin loads deleted items in a paginated list. There is no native full-text search across all items in a single query. To locate a specific deleted file, you either scroll and sort the native browser view, filter results using PnP PowerShell queries against the recycle bin API, or use a dedicated tool that indexes items across all stages. Each approach offers a different balance between search depth and the technical knowledge required to use it.
The distinction matters most in two scenarios: recovering a specific file from a recycle bin that contains thousands of items, and locating items deleted across multiple sites without navigating to each one individually. For small, single-site recoveries with under a few hundred items, the native browser is adequate. For everything else, one of the other two approaches is faster.
Three Ways to Search the SharePoint Recycle Bin
Option 1: The Native SharePoint Recycle Bin Browser
Every SharePoint Online site has a recycle bin accessible from the site settings menu. End users see items they deleted personally. Site owners and members with contribute access see a broader set. Site collection administrators have an additional view - the second-stage (site collection) recycle bin - accessible through Site Settings under Site Collection Administration.
The native browser lets you:
- Sort by Name, Original Location, Deleted By, Deleted Date, or Size
- Select individual or all visible items and restore them
- Navigate between first-stage and second-stage views separately
The native browser does not let you:
- Search by keyword across all items in the recycle bin
- Filter by a date range (sorting by date is not the same as filtering)
- View items from multiple sites simultaneously
- Select items based on a search result and bulk-restore them
In practice, the native browser works well when the recycle bin contains a few hundred items and you have a rough idea of the filename or deletion date. Once item counts grow into the thousands - common on busy document libraries or collaboration sites - scrolling becomes inefficient. Sorting by Deleted Date helps narrow the window, but you still need to manually identify the correct items.
Option 2: PnP PowerShell
PnP PowerShell's Get-PnPRecycleBinItem cmdlet retrieves recycle bin data directly from the SharePoint Online REST API for the connected site. Unlike the native browser, it returns all items in a single call without pagination. You can then pipe the results through Where-Object to apply any filter your recovery scenario requires.
# Connect to the target site first
Connect-PnPOnline -Url "https://yourtenant.sharepoint.com/sites/SiteName" -Interactive
# Find all deleted items with "budget" in the filename
Get-PnPRecycleBinItem | Where-Object { $_.LeafName -like "*budget*" }
# Find items deleted in the last 30 days
Get-PnPRecycleBinItem | Where-Object { $_.DeletedDate -gt (Get-Date).AddDays(-30) }
# Query the second-stage recycle bin only
Get-PnPRecycleBinItem -ItemState SecondStageDeletedItems
Key properties returned by Get-PnPRecycleBinItem include LeafName (filename), DirName (original folder path), DeletedDate, DeletedByName, Size (in bytes), and ItemState (first or second stage). You can export the full result set to CSV for audit records.
The limitation is scope. Get-PnPRecycleBinItem operates against one site at a time. For a tenant-wide search, you need to loop through site URLs, which means maintaining a site inventory list and scripting the iteration. If 50 sites are involved, that is 50 separate connection and query operations.
PowerShell is the right tool when you need the flexibility of arbitrary filtering on a known site, when you want to export results for documentation, or when you are comfortable scripting a multi-site loop. It is not suited to environments where the admin carrying out the recovery does not have scripting experience.
Option 3: ShareMaster Recycle Master
Recycle Master provides a desktop UI for searching and restoring items from the SharePoint Online recycle bin without PowerShell. After connecting to a tenant with SharePoint Administrator credentials, the tool loads items across your sites and makes them searchable through a filter interface.
Recycle Master's search and filter capabilities:
- Keyword search against item names across first and second stage
- Date-deleted range filter (set a start and end date to narrow results to a specific incident window)
- Deleted-by-user filter (recover everything a departing employee deleted across all their sites)
- File type filter
- Tenant-wide scope without needing a site inventory list
- Bulk-select items from filtered results and restore them in a single operation
The practical difference in a support scenario: a ticket arrives saying "I accidentally deleted our entire Q1 folder last Tuesday." In the native browser, the admin navigates to the relevant site, sorts by date, and scrolls to identify the items. In Recycle Master, they set the date filter to last Tuesday, type the folder name, and restore the matched items in one pass. The time difference on a large recycle bin is significant.
Recycle Master is also the only option that provides tenant-wide visibility without scripting. For MSPs managing multiple client tenants or SharePoint administrators responsible for dozens of sites, this is the practical advantage that separates it from the native approach and reduces the PowerShell complexity involved in a multi-site query.
When a site has tens of thousands of deleted items spread across the first and second stage, scrolling the native SharePoint recycle bin browser to find a specific file is not a realistic recovery strategy. The native list was built for occasional, small-scale recovery - not bulk or keyword-targeted restores at scale.
Side-by-Side Capability Comparison
| Capability | Native Browser | PnP PowerShell | Recycle Master |
|---|---|---|---|
| Search by keyword / filename | Column sort only | Yes (Where-Object filter) | Yes (indexed search) |
| Filter by date deleted | Sort only | Yes | Yes (date range picker) |
| Filter by who deleted | Sort only | Yes | Yes |
| Filter by file type | No | Yes (extension match) | Yes |
| First-stage recycle bin | Yes | Yes | Yes |
| Second-stage recycle bin | Yes (separate nav) | Yes (-ItemState param) | Yes (unified view) |
| Tenant-wide scope | No | Yes (with loop script) | Yes |
| Bulk restore from filtered results | No | Via scripting | Yes |
| Export results to file | No | Yes (CSV) | No |
| Admin role required | No (own items) | Yes | Yes |
| Scripting knowledge needed | None | Moderate | None |
For organisations that need both bulk restore capability and tenant-wide search without scripting, Recycle Master is the only option in the table that satisfies all three requirements simultaneously. See more on the advanced recycling bin features that Recycle Master provides, including indexed search and tenant-wide bulk clear.
See everything Recycle Master includes, including how bulk restore, tenant-wide search, and the second-stage view work in a single connected session.
Decision Matrix: Which Tool to Use
| Your situation | Best approach |
|---|---|
| Small recycle bin (under 500 items), single site, you know roughly when the file was deleted | Native SharePoint browser |
| Single site, large recycle bin, comfortable with PowerShell scripting | PnP PowerShell |
| Need to export a full recycle bin inventory to CSV for an audit report | PnP PowerShell |
| Multiple sites, no scripting available, need tenant-wide search | ShareMaster Recycle Master |
| Recovering all items deleted by a departing employee across all their sites | ShareMaster Recycle Master |
| Searching the second-stage (site collection) recycle bin across many sites | ShareMaster Recycle Master |
| Bulk restore of hundreds of items from a date-range-filtered result | ShareMaster Recycle Master |
Frequently Asked Questions
How do I search the SharePoint recycle bin by filename?
The native SharePoint recycle bin browser has no keyword search box. You can sort items by the Name column but cannot query all items at once. For keyword search, pipe Get-PnPRecycleBinItem results through Where-Object in PnP PowerShell, or use ShareMaster Recycle Master, which provides indexed search across item names in both stages.
Can I search the recycle bin for files deleted by a specific user?
Yes. PnP PowerShell lets you filter by the DeletedByName property using Where-Object. ShareMaster Recycle Master has a dedicated Deleted By filter field that works across all sites and both recycle bin stages without scripting. The native browser shows a Deleted By column you can sort, but not filter by a specific value.
How do I access the SharePoint second-stage recycle bin?
Go to Site Settings, then click Site Collection Recycle Bin under Site Collection Administration. This link is only visible to site collection administrators. Alternatively, use Get-PnPRecycleBinItem -ItemState SecondStageDeletedItems in PnP PowerShell, or use Recycle Master, which shows both stages in a unified list view.
Can I search the SharePoint recycle bin across all sites at once?
Not with the native browser, which is scoped to the current site only. PnP PowerShell can query multiple sites but requires a loop script across a list of site URLs. ShareMaster Recycle Master provides a tenant-wide recycle bin view across all sites without scripting or manual site iteration. See the guide to bulk restoring from the SharePoint recycle bin for step-by-step instructions on large-scale recovery.