DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix Now×
Skip to content
World desk5 min

How to Protect Backups From Ransomware With Offline and Immutable Copies

Protect recovery copies from ransomware with isolation, retention controls, encryption, and tested restoration procedures.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Keep multiple backup copies, with at least one isolated from the systems and credentials ransomware could reach, and regularly test that you can restore clean data. An offline copy is not currently reachable through the compromised environment; an immutable copy is protected from alteration or deletion for a defined retention period. They can complement each other, but neither replaces encryption, access controls, or recovery testing.

How do offline and immutable backups protect you?

Ransomware can damage more than the files on a computer. If backup storage is connected or controlled through compromised accounts, attackers or malware may be able to encrypt, alter, or delete recovery copies too. Isolation limits what a compromised environment can reach; immutability restricts changes to stored data during a set period.

As an Amazon Associate I earn from qualifying purchases.

These are distinct safeguards. A disconnected external drive is offline while disconnected, but it is not necessarily immutable when connected. Cloud object storage with a retention lock may be immutable for the configured period, but it is not automatically isolated from compromised accounts or misconfiguration. CISA recommends maintaining offline, encrypted backups and regularly testing their availability and integrity in a disaster-recovery scenario (CISA #StopRansomware Guide).

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What backup design should you use?

Keep multiple copies, including an isolated copy

CISA’s cited ransomware advisory relays the Australian Cyber Security Centre’s 3-2-1 recommendation: keep three copies of data, on two different media types, with one copy off-site (CISA LockBit advisory). Treat this as a practical design principle, not a guarantee against data loss. A copy on another device or in another location can reduce the chance that one incident affects every copy.

#1 Best Overall
Sale
Seagate 2TB Portable Hard Drive | USB 3.0 (STGX2000400) | Everyday HDD storage. Plug-and-play backup. Windows & macOS. Adobe CC trial included. 1-Year Warranty
  • Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
  • Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
  • To get set up, connect the portable hard drive to a computer for automatic recognition no software required
  • This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
  • The available storage capacity may vary.

Do not rely on ordinary cloud sync as your backup

Synchronization can reproduce damage: if local files are encrypted, a sync service may upload the encrypted versions and overwrite unaffected files. Use version history and retention protections where available, and confirm that the recovery points you need remain accessible. CISA specifically warns about this cloud-sync risk in its ransomware guidance.

Encrypt copies and protect the credentials

Encrypt backup data and restrict who can access it, change retention settings, or delete it. Keep encryption passwords and recovery keys protected and retrievable by authorized personnel; an encrypted backup is not useful if the organization cannot unlock it. CISA calls for encrypted and immutable backup data in its ransomware recommendations and advises safeguarding passwords and recovery keys for protected device data (CISA device-data guidance).

Rank #2
Seagate Portable 5TB External Hard Drive HDD – USB 3.0 for PC, Mac, PS4, & Xbox - 1-Year Rescue Service (STGX5000400), Black
  • Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
  • Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
  • To get set up, connect the portable hard drive to a computer for automatic recognition software required
  • This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
  • The available storage capacity may vary.

Which backup approach fits your situation?

Approach Useful when Risks and checks
Disconnected external drive You need a straightforward physical offline copy, especially for an individual or small environment. Disconnect it when a backup is not actively running; a connected drive may be reachable by ransomware. Protect its encryption credentials and test restoring files from it. See CISA’s device-data guidance.
Separate device, media, or site You want a copy separated from production systems or the primary site. Check that the separation is real and that credentials or a site-level incident cannot affect every copy. The 3-2-1 recommendation is guidance, not a substitute for testing. See the CISA advisory.
Immutable cloud or object storage Remote storage and retention controls suit your recovery and compliance needs. Verify who can change retention, how accounts and credentials are separated, whether versions and deletion protections work as intended, retrieval or egress costs, and the restore process. Misconfiguration can create significant cost, and some immutable-storage setups may not satisfy particular regulatory criteria, CISA cautions in its guide.
Managed backup service You need a provider to help conduct and maintain backups. Assess separation from production identity, retention administration, coverage of data and system configuration, restore speed, documented recovery tests, and whether you can retrieve data if the primary provider or account is unavailable. NIST’s MSP backup guide addresses conducting, maintaining, and testing backup files; it does not endorse a vendor.

Compare options against exposure to production credentials, physical or account separation, resistance to alteration and deletion, retention and version history, recovery time and data-loss window, storage and restore costs, regulatory fit, and whether you can test a full restoration. Set backup frequency and recovery targets from business impact and test results; the official guidance cited here does not establish one schedule or recovery-time target for every organization.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How do you make immutable storage safer to use?

Immutability is only as dependable as its configuration and the identity controls around it. Before relying on a retention lock or similar feature, document the retention period, who can set or change it, how long versions remain available, and how authorized staff will retrieve and restore data. Separate administration from everyday production accounts where possible, and make sure responders can access the recovery account without using compromised credentials.

Rank #3
Seagate Portable 1TB External Hard Drive HDD – USB 3.0 for PC, Mac, PlayStation, & Xbox, 1-Year Rescue Service (STGX1000400) , Black
  • Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
  • Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
  • To get set up, connect the portable hard drive to a computer for automatic recognition no software required
  • This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
  • The available storage capacity may vary.

Check storage and recovery costs together. Retention choices can affect what must be kept and for how long, while retrieving large volumes may have separate costs. CISA warns that misconfigured immutable cloud storage can become costly and that some implementations may not meet specific regulatory requirements (CISA #StopRansomware Guide). Confirm the rules that apply to your organization rather than assuming that a product feature establishes compliance.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How should you test backups and plan recovery?

A successful backup job only shows that data was written; it does not prove that a clean, complete restoration is possible. NIST advises organizations to carefully plan, implement, and test a backup and restoration strategy (NIST ransomware guidance). Test both data integrity and the operational steps needed to restore systems.

Quick Recap

SaleBestseller No. 1
Seagate 2TB Portable Hard Drive | USB 3.0 (STGX2000400) | Everyday HDD storage. Plug-and-play backup. Windows & macOS. Adobe CC trial included. 1-Year Warranty
Seagate 2TB Portable Hard Drive | USB 3.0 (STGX2000400) | Everyday HDD storage. Plug-and-play backup. Windows & macOS. Adobe CC trial included. 1-Year Warranty
This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable; The available storage capacity may vary.
$129.99
Bestseller No. 2
Seagate Portable 5TB External Hard Drive HDD – USB 3.0 for PC, Mac, PS4, & Xbox - 1-Year Rescue Service (STGX5000400), Black
Seagate Portable 5TB External Hard Drive HDD – USB 3.0 for PC, Mac, PS4, & Xbox - 1-Year Rescue Service (STGX5000400), Black
This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable; The available storage capacity may vary.
$229.99
Bestseller No. 3
Seagate Portable 1TB External Hard Drive HDD – USB 3.0 for PC, Mac, PlayStation, & Xbox, 1-Year Rescue Service (STGX1000400) , Black
Seagate Portable 1TB External Hard Drive HDD – USB 3.0 for PC, Mac, PlayStation, & Xbox, 1-Year Rescue Service (STGX1000400) , Black
This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable; The available storage capacity may vary.
$119.80
Bestseller No. 4
Seagate Portable 4TB External Hard Drive HDD – USB 3.0, 1-Year Rescue
Seagate Portable 4TB External Hard Drive HDD – USB 3.0, 1-Year Rescue
This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable; The available storage capacity may vary.
$208.99
Best Value
Sale
UnionSine 500GB Ultra Slim Portable External Hard Drive HDD-USB 3.0
  • [Upgraded Version] - This external hard drive features a mirrored logo stripe combined with a striped anti-slip design, and the rounded corners of the casing make it easier to grip. The stripes also have a heat dissipation function, ensuring stable and fast data transfer.
  • 【Ultra-thin and quiet】 - The motherboard adopts JMicron 578 noise-free solution, giving you a quiet working environment. Lightweight and portable size designed to fit in your pocket for easy portability.
  • 【Ultra-Fast Data Transfers】 - Pairing this external hard drive with JMicron 578 solution USB 3.0 and USB 2.0 interfaces enables blazing-fast data transfer. It boasts theoretical read speeds of up to 125MB/s and write speeds of up to 103MB/s.
  • 【Plug and Play】 - With no software to install, just plug it in and the drive is ready to use.The hard disk chip is wrapped with an aluminum anti-interference layer to increase heat dissipation and protect data.
  • 【What You Get】 - 1 x Portable Hard Drive, 1 x USB 3.0 Cable, 1 x User Manual, Gift-type shell packaging ,Three-year manufacturer's warranty and free technical support services.
Rank #4
Seagate Portable 4TB External Hard Drive HDD – USB 3.0, 1-Year Rescue
  • Easily store and access 4TB of content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
  • Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
  • To get set up, connect the portable hard drive to a computer for automatic recognition no software required
  • This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
  • The available storage capacity may vary.
  1. Set priorities before an incident. Identify critical services, their dependencies, and the order in which they need to return. CISA recommends prioritizing critical services in its recovery guidance.
  2. Confirm what the backup contains. Check that copies cover required data and system configuration. Keep offline copies of golden images, templates, relevant software or source code, and licenses needed to rebuild where appropriate, as CISA recommends in its guide.
  3. Use clean systems and accounts. During an incident, access recovery material from systems and accounts believed to be uncompromised. CISA cautions against re-infecting clean systems during restoration.
  4. Restore, validate, then reconnect carefully. Start with known-good recovery points, verify that data is intact and services work, and reconnect systems in a controlled order. NIST’s guidance emphasizes isolating backups and testing restoration (NIST).
  5. Update the plan after exercises. Record what failed or took longer than expected, then adjust recovery procedures and future tests. For operational technology (OT), NIST SP 1339, published June 17, 2026, calls for backup management to integrate with change management and for backups to be created, tested, and reviewed during recovery exercises. This is OT-specific guidance, not a universal schedule (NIST SP 1339).

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.