Microsoft engineer explains why Windows gives new files the date of ones you deleted
AI-summarised brief · reviewed before publication
Microsoft engineer Raymond Chen explains that Windows’ “file system tunneling” causes a newly created file to inherit the creation timestamp and short‑name mapping of a recently deleted file with the same name. The feature, present in NTFS and FAT for decades, stores metadata in a per‑volume tunnel cache for a brief period—about 15 seconds—after a delete or rename operation. When an application saves a document by writing a temporary file, deleting the original, and renaming the temporary file, tunneling preserves the original creation date, preventing the file from appearing brand‑new. It also maintains the association between long and 8.3 short filenames, which older programs rely on. The cache clears automatically when full or after the time window expires on typical Windows systems.
💡 Why It Matters
- · Tunneling lets Windows preserve user‑perceived continuity when apps use safe‑save tricks, preventing confusing date changes that could mislead users about a document’s history.
