Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
If you already have backups, first make sure you can restore a recent copy and that the copy is protected from unauthorized access or deletion. Then set backup frequency to match how much recent data you can afford to lose, and retention to match how far back you may need to recover. These settings depend on one another: a frequent backup is little help if it cannot be restored, and a long retention period is risky if attackers can erase the stored copies.
Which backup setting should you change first?
Start by defining your recovery needs, then check recovery and protection before fine-tuning schedules and retention. If nobody has successfully restored a recent backup, run a controlled restore test. In parallel, address an unencrypted copy, overly broad access, or backups stored in the same security domain as the systems they protect.
As an Amazon Associate I earn from qualifying purchases.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
There is no universal setting order for every person or organization. The practical priority depends on what would hurt most: losing recent work, being unable to recover quickly, losing older records, or having an attacker alter or delete backups. The sequence below is a useful starting point, not a rule prescribed by a single vendor.
- Set recovery objectives. Decide how much data loss is acceptable and how long recovery can take.
- Protect the backup copy and its keys. Use encryption and restrict access; separate or lock important copies where possible.
- Set schedules to meet the data-loss limit. Back up more often when changes are frequent or costly to lose.
- Set retention to preserve the recovery history you need. Account for operational needs and applicable obligations.
- Verify the process. Check job results and periodically restore data to confirm it is usable and can be recovered in time.
NIST guidance treats backup policy as a combination of factors such as tiering, frequency, number of copies, media, encryption, lifecycle management, and restore procedures. That is why it helps to decide what recovery must achieve before changing individual toggles.
Popular on Amazon
- 【90 Degree Full Function USB C Adapter】Supports the latest USB4 standard for up to 40Gbps of bandwidth, 8K video support, and up to 240W Fast charging; Support USB PD 3.1 Extended Power Range (EPR) including 140W, 180W and 240W. Your productivity is easily doubled. *Warm Tip: For the best fit, please make sure the USB-C port is fully exposed; thick or bulky cases may affect compatibility.
- 【Reliable Quality】Made from high-quality, scratch-resistant aluminum alloy, delicate metal frame. get excellent wear resistance and heat dissipation. Non-Slip Design for easier insertion and removal.
- 【Small and portable】Ultra thin size, ultra compact design, a petite physique that matches the minimalist design of your modern laptops. Coming with a slim figure that won't block the port next to the one it's plugged into.
- 【Compatibility】Widely work with most usb c, thunderbolt 4/3 devices. Compatibilit for ROG Ally, Steam Deck, Switch, MacBook Pro, Quest 3 VR headset, Surface Book 2, iPhone 18/17/16/15, Samsung Galaxy S23/S22/S21, Note 20/10, Google Pixel, ChromeBook, etc.
- 【Excellence Customer Support】If you experience any issues or cable failure, simply reach out to our dedicated customer service team. We provide a prompt response within 18 hours, providing you with the necessary technical support to resolve any concerns.
What should I decide before changing backup settings?
Set a recovery point objective (RPO) and recovery time objective (RTO) for each important type of data. The RPO describes the maximum acceptable amount of recent data loss; the RTO describes the acceptable time to restore service or access.
For example, if you can tolerate losing no more than an hour of work, a daily backup does not meet that RPO. If a family photo archive can tolerate a longer gap between copies, a less frequent schedule may be reasonable. Likewise, a backup that takes days to retrieve may not meet the RTO for a business system that must be available within hours.
Recommended Free Tools
Do not assume all files need the same protection. A useful policy can divide data into tiers: critical, frequently changing records; important but less time-sensitive files; and material that can be recreated or recovered later. NIST lists continuous, hourly, daily, and weekly frequencies as possible tiers, not as a prescription that every system should use each one.
Write down the objectives and who is responsible for checking them. Include what data is covered, how often copies are made, where they are stored, how long they are kept, how access is controlled, and how restores will be tested. A schedule that looks adequate on screen still needs monitoring so failures are noticed.
Should I encrypt my backups?
Yes, encrypt backup data at rest and in transit when the system supports it, and make sure the encryption keys will remain available to authorized people when recovery is needed. Encryption helps protect confidentiality, but it does not make a backup impossible to delete, alter, or access through a compromised account.
NIST says backup encryption should be at least as secure as the encryption used for the protected data, and that key retention and rotation should be considered. In practical terms, a recovery plan must account for the keys as well as the data. If a key is lost, a perfectly intact encrypted backup may be unusable; if a key is exposed, encryption may no longer provide the expected protection.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Also popular on Amazon
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Limit backup permissions to the people and services that need them. Where supported, separate backup administration from everyday production accounts and consider immutability or locked retention for critical copies. These are distinct controls: encryption protects the contents, while access restrictions and separation reduce who can reach the copy, and immutability can prevent changes or deletion during a protected period.
The FBI’s Internet Crime Complaint Center (IC3) and joint ransomware guidance stresses maintaining offline, encrypted backups and regularly testing them. Do not interpret that as a promise that encryption alone defeats ransomware. Malware or a compromised administrator may still reach accessible copies or keys if the backup environment shares accounts or security boundaries with production.
How often should backups run?
Choose a schedule from the RPO: the more recent changes you cannot afford to lose, the more frequently the system needs to create recovery points. There is no blanket answer that daily is always enough or that every file needs continuous backup.
Use the data’s importance and rate of change to choose a tier. Continuously changing, business-critical data may need continuous or point-in-time protection; other critical data may fit hourly copies, while less time-sensitive material may fit daily or weekly backups. These are options, not guarantees: confirm that the chosen service can actually provide the desired frequency and that the backup window does not interfere with normal operations.
A backup rule commonly combines a frequency with a backup window. Lifecycle rules can also determine when recovery points transition to another storage tier or expire. Consider network use, storage consumption, and the effort required to monitor frequent jobs alongside the benefit of smaller potential data loss.
Set up monitoring and failure notifications. If a scheduled run fails repeatedly or silently, the configured frequency is not the frequency you are actually achieving. Review alerts, investigate missed jobs, and check whether the most recent successful recovery point is still within the RPO.
Also popular on Amazon
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
How long should I keep old backups?
Keep recovery points long enough to cover the history you may need, but do not assume that keeping every copy forever is safer. Retention should reflect operational recovery needs, data classification, and any legal or regulatory obligations that apply to your situation.
Think through the kinds of recovery you may need: restoring from an accidental deletion noticed promptly, retrieving an earlier version after a problem is discovered later, or meeting a documented record-retention requirement. Those needs can call for different retention periods. The available data does not establish one period that is appropriate for every household, business, or jurisdiction, so avoid copying a generic number without checking your own requirements.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsMultiple retention tiers can balance recent recovery points with older history. For example, a policy may retain frequent recent copies and fewer older recovery points, if the backup system supports that approach and it still meets the required recovery history. AWS guidance says retention should be sufficient for regulatory requirements by data classification and resource type where those requirements apply.
Document when copies expire and how deletion works. NIST describes lifecycle management as tracking backups against policy and deleting copies that are no longer needed. For critical data, immutable or locked retention can help prevent alteration or deletion while the lock is active; it should be set deliberately so it does not conflict with legitimate deletion or lifecycle requirements.
How do I know my backup actually works?
A successful job notification is not proof of a successful recovery. Check job completion and copy readability, then periodically restore data to a separate location and confirm it is complete, accessible, current enough for the RPO, and recoverable within the RTO.
Verification has two related levels:
- Integrity checks: Confirm the job completed and that the stored copy can be read without an error or corruption alert.
- Recovery tests: Restore selected data in a separate location, then check that the expected files or records are present and usable.
A restore test should answer more than “Did the restore button finish?” Check whether the restored data is the intended data, whether it opens or works as expected, how old the recovery point is, and how long the recovery took. AWS recovery-testing guidance highlights data availability, corruption, accessibility, RPO freshness, and RTO timing as useful checks.
Also popular on Amazon
- Portable and powerful USB-C HUB: BENFEI USB Type-C HUB, with super-soft and knot-free silicone woven design cable, meets most mobile office needs. Compact, lightweight, stylish, and powerful portable USB C Hub equipped with 1 x HDMI port, 1 x 100W charging, and 3 x USB ports. 18-month warranty, 24-hour response, to ensure you feel at ease when using our product.
- Design centered on comfort and reliability: Thanks to BENFEI's end-to-end in-house cable production capability, in-house PCBA and assembly capability, using the industry's most advanced silicone woven design and process, 20cm cable in length, no knots, super-soft, the HUB is easy to use in all scenarios: laptop, tablet, stand etc. Super-soft, 25000+ life cycles, to meet your daily carrying and office needs.
- 100W Charging: Support up to 90W USB C pass-through charging via Type-C port to keep your laptop powered. 10W is reserved for other interface operations. No data and video function on the Type-C port.
- 4K HDMI Display: The HDMI port supports media display at resolutions up to 4K 30Hz, keeping every incredible moment detailed and ultra vivid. Please note that the C port of the Host device needs to support video output.
- Transfer Files in Seconds: Transfer files and from your laptop at speeds up to 10 Gbps with USB A 3.2 port. Extra 2 USB A 2.0 ports are perfectly for your keyboards and mouse.
NIST recommends periodic backup testing and gives at least monthly testing for critical data as an example. That is an example, not an automatic interval for every environment. Microsoft guidance also says to define the appropriate recovery-test scope, frequency, and method for the environment, including whether the tests demonstrate that configuration and availability meet the RPO and RTO.
Full recovery tests may not be practical every time, so define a repeatable scope: which data or systems will be restored, where they will be restored, who will verify them, and what counts as a pass. Record the date, recovery point, duration, problems found, and corrective actions. A failed test is useful evidence that the process needs repair; repeating tests after changes helps confirm that the repair worked.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Is the 3-2-1 backup rule still useful?
Yes. It is a straightforward way to reduce the risk that one incident destroys every usable copy, but it is a copy-and-storage principle rather than a complete recovery plan. The FBI IC3’s joint ransomware guidance defines it as three copies of critical data, on at least two different media types, with at least one copy offline.
An external hard drive that is disconnected and stored safely can serve as one offline copy in a consumer or small-business setup. That drive alone does not guarantee encryption, immutability, or recoverability. Protect it with appropriate encryption and access controls, keep it separate when not backing up, and periodically reconnect it in a controlled way to check and test a restore.
Cloud backup can be part of a plan, but the word “cloud” does not by itself establish that a copy is isolated or immutable. Check how access is controlled, whether critical recovery points can be locked, how long they are retained, and how restoration works. For either local or cloud copies, verify that the design meets the recovery objectives rather than relying on the number of copies alone.
Consider the threat model: ransomware may search for and delete backups that are accessible from compromised systems. Offline or logically separate copies can reduce that exposure. The goal is not merely to count copies, but to have at least one protected path back to usable data.
Also popular on Amazon
- 【Read before You Buy】 Note: This adapter is USB 2.0 version and cannot transmit HDM, VGA, or other video signals. Nevertheless, they are fully capable of charging devices,duplicating files, and can be seamlessly integrated with USB-C earphones, wireless network adapters, and SD card adapters.
- 【Easy to Use and Safe】Thanks to modern manufacturing techniques, we've made these adapters sufficiently compact so that they can remain inserted in your device without noticeable protrusion or inconvenience. This means you don't have to constantly plug and unplug them, reducing the likelihood of wear and misalignment, and making them more convenient to carry around.
- 【Reliable Quality】Engineered for enhanced durability, durable aluminum alloy shell material,get excellent wear resistance and heat dissipation,the male USB C and female USB connectors & the male USB and female USB C connectors are designed to be plugged and unplugged up to 20000 times. Provides data transfer, device charging, memory space expansion, and additional computer peripherals.
- 【Think more for you】Do you need to connect a USB-C-enabled device to an odd device that only has USB-A ports? Then these USB-A male to USB-C female adapters are made for you.Simply insert the adapter into the USB-A port on the device, and you can instantly connect your USB-C device to the device that originally didn't have the correct connection port.
- 【Trusted xiwxi Quality and Service】As a responsible brand seller, you will receive xiwxi's 12-month Quality assurance and lifetime friendly customer service, you're not just buying a product,you're investing in peace of mind with all-round quality and exceptional customer service.
What should I change if I already have backups?
Use a short priority check rather than changing all four settings at once:
- No recent restore has ever been tested? Perform a controlled restore to a separate location and verify the contents, accessibility, freshness, and recovery time.
- Backups are exposed? Encrypt them, review who can access them and their keys, and separate or lock critical copies where the system allows.
- Potential data loss exceeds your RPO? Increase frequency or add a suitable protection tier, then monitor whether jobs complete.
- Older history is inadequate, excessive, or ungoverned? Adjust retention to match recovery, legal, and regulatory needs, and document expiration behavior.
Protection and verification deserve attention in parallel when either is missing: testing an exposed copy does not secure it, and securing a copy does not prove it can be restored. After those urgent gaps, tune schedule and retention against the RPO, RTO, recovery history, and storage or administration constraints.
Review the policy when systems, data importance, legal obligations, or business recovery needs change. A backup plan is only useful while its assumptions remain true: keys are available, copies exist, schedules run, retention preserves needed history, and restores remain practical.
Frequently Asked Questions
Can I delete a backup after I restore my files?
Not until you have confirmed the restored files are complete and usable and that another copy still meets your recovery needs. If retention or legal requirements apply, follow those requirements before deleting any copy.
What should I do if a restore test fails?
Treat it as a recovery gap: preserve the error details, identify whether the problem is access, keys, corruption, configuration, or missing data, and correct the cause before relying on that backup. Retest the affected recovery path after the fix.
Should I back up files while my computer is turned off?
A powered-off device cannot send new changes to an online backup service, so check the last successful recovery point before assuming the backup is current. For a local offline copy, connect it according to a regular schedule and verify that the copy completes.
Free tools Windows power users keep installed
One-click scans. No signup required.
Do encrypted backups need a separate password or key backup?
They need a documented, protected way for authorized people to retrieve the encryption key during recovery. Keep that access path separate from the backup data itself and account for key rotation so an old copy does not become inaccessible.
