Keep at least one encrypted recovery copy isolated from the systems and accounts used every day, restrict who can change or delete backups, and regularly test that you can restore clean data. For an external drive, disconnect it when the backup finishes. No single drive, cloud service, or setting is a complete defense.
Why ransomware can reach backups
Ransomware may encrypt or delete backup copies that are accessible from an infected computer or compromised account. A backup job reporting success does not prove that its recovery point is clean, intact, or usable. The goal is to preserve copies that an attacker who gains access to production systems cannot automatically destroy, then verify that they can actually be restored.
CISA’s joint #StopRansomware Guide advises organizations to maintain offline, encrypted backups and test their availability and integrity in a disaster recovery scenario.
Build copies that can survive a compromise
Use the 3-2-1 strategy as a planning guide
The Australian Cyber Security Centre’s 3-2-1 strategy, cited in a 2023 CISA LockBit advisory, calls for three copies of data, on two different media types, with one copy off-site. This is a useful way to think about resilience, not a guarantee or a requirement that fits every workload. Separate copies so one compromised device, account, location, or service cannot expose all of them.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
An off-site copy helps with local disasters such as theft or fire; an offline or administratively isolated copy addresses different risks. Where appropriate, organizations can use cloud-to-cloud backups or a separate cloud account, subscription, or provider boundary. CISA’s LockBit advisory describes the 3-2-1 approach.
Encrypt backups and limit access
Encrypt backup data, and limit backup administration to the people and accounts that need it. Separate backup administration from routine production administration, apply least privilege, and monitor backup activity. If the platform supports it, require additional approval for destructive actions. These controls reduce the chance that stolen everyday credentials can be used to erase recovery copies; they do not make a copy invulnerable.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
Consider deletion protection or immutability carefully
Soft delete, object lock, and immutable vaults can help preserve recovery points against deletion or tampering. Their behavior and reversibility depend on the service and configuration. Before enabling them, verify supported workloads, retention rules, recovery procedures, costs, and compliance requirements. CISA warns that misconfigured immutable storage can create significant costs and may not meet some compliance criteria.
For Azure-specific examples of controls such as role-based access separation, multi-user authorization, soft delete, and immutable vaults, consult Microsoft’s Azure Backup security best practices and ransomware-resilient backup architecture. These are Azure features, not universal settings for every backup service.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
Should an external backup drive stay plugged in?
No. Disconnect a removable drive when it is not actively backing up. CISA’s consumer guidance says: “Avoid leaving the external drive connected when not actively backing up your data as the connection could be used by ransomware to gain access to the drive and delete or corrupt your backups.” See How to Protect the Data that Is Stored on Your Devices.
- Connect the drive when you are ready to run the backup.
- Run the backup and confirm that it completed successfully.
- Eject the drive safely, disconnect it, and store it separately from the computer.
- Reconnect it for the next backup and periodically restore files from it to check that the copies open and contain the versions you expect.
A disconnected drive is less exposed to ransomware spreading through the connected computer, but it is still only one copy. It does not by itself protect against theft, fire, or a backup that already contains corrupted or encrypted files. When choosing a drive, check capacity against your data and retention needs, connection compatibility, portability, and available encryption options; official guidance does not prescribe a particular model or capacity.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Test that recovery points work
Test backup availability, integrity, and restoration regularly, not just whether backup software reports completion. For home users, restore selected files and check that they open and are the right versions. For organizations, exercise disaster-recovery procedures with the systems and data needed to resume critical services.
Set backup frequency according to how much data you can afford to lose and how quickly you need to recover. A 2023 CISA LockBit advisory mentions daily or weekly maintenance as a minimum; that is advisory guidance, not a universal recovery-point target. An organization should define its own acceptable data loss and recovery time.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteBest Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Keep enough history to identify a clean recovery point: a backup can already contain encrypted, corrupted, or compromised data. A successful restore test provides evidence about recoverability, but it cannot guarantee that every future incident will be recoverable.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Keep what you need to rebuild, not just the data
For organizational recovery, preserve materials needed to rebuild services, including golden images and, where applicable, deployment templates, software, source code or executables, and license agreements. CISA notes that system images may not work correctly on different hardware or platforms, so retain practical access to the software and other materials needed to rebuild in the environment you may actually have to use.
Plan the recovery environment before an incident
Inventory critical services, data, dependencies, and restoration order so responders know what to recover first. Maintain recovery copies in secure, physically separate locations and consider whether network segmentation or a separate account is needed to keep them apart from production access.
If ransomware is discovered, contain the incident and identify a clean recovery point before restoring. Do not reconnect compromised systems into the recovery environment. Follow a coordinated incident-response and recovery plan rather than assuming the newest backup is safe.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCompare backup approaches by their failure paths
Removable drives and managed cloud backup can both play a role, but they fail differently. Evaluate each option against the access and recovery risks that matter for your data.
Quick Recap
| Decision question | Removable offline drive | Cloud or managed backup |
|---|---|---|
| Can compromised production access reach it? | A drive disconnected between runs is not continuously reachable through the host. | Check account, network, and administrative separation; everyday credentials should not automatically expose every recovery copy. |
| How is it isolated? | Physical disconnection and separate storage. | Potentially a separate account, subscription, network boundary, or provider; confirm the actual service design. |
| How is deletion or tampering limited? | Disconnection limits remote access while the drive is stored away. | Soft delete or immutability may be available; verify configuration, retention behavior, and whether settings can be reversed. |
| What may slow recovery? | Available hardware, connection compatibility, and the time needed to restore data. | Bandwidth, service procedures, supported workloads, and the time and scale of a restore. |
| What should be checked about retention? | Whether the drive holds enough data and history to find a clean version. | Whether retention preserves clean recovery points and what immutable retention costs or prevents changing. |
| What proves it is recoverable? | Regularly restoring files and checking their contents. | Restore tests that demonstrate the required data and systems can be recovered. |
Know what these controls do not do
- Offline backups reduce exposure through network access; they do not prevent the initial compromise or stop data theft.
- Physical separation and administrative isolation address different failure paths. Neither is infallible.
- Immutability can protect retained recovery points, but a retention mistake can be costly or difficult to reverse.
- Service defaults, supported workloads, regions, and costs can change. Confirm current provider documentation and test the configuration you actually use.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
