Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstalliTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Neither option is automatically safer. Ransomware protection depends on whether an infected computer or stolen account can reach and change every backup. An external hard drive that is encrypted, physically protected, and unplugged after use is isolated from network attacks, but it can be lost, stolen, damaged, or infected when connected. Cloud backup keeps data off-site, yet a continuously synchronized service can copy encrypted files and overwrite healthy versions.
The most resilient practical design uses both: a protected cloud backup with recoverable history and a removable drive that is disconnected and stored separately. Test restoration regularly; an untested copy is only an assumption, not a recovery plan.
What ransomware is trying to do to your backups
Ransomware commonly encrypts data and demands payment for restoring access. The current NIST IR 8374 Revision 1, published June 11, 2026, also notes that attackers may steal information and demand payment to prevent its disclosure. Your backup is useful only if it still contains an unencrypted, trustworthy version when the attack is discovered.
Recommended Free Tools
The decisive question is not whether storage is called “cloud” or “external.” It is whether the compromised computer, user account, malware, or attacker can reach the copy and alter or delete it. NIST’s ransomware guidance says to “carefully plan, implement and test a data backup and restoration strategy” and to keep backups isolated so ransomware cannot readily spread to them (NIST, published May 13, 2021; updated February 3, 2025).
#1 Best Overall
- Slim durable design to help take your important files with you
- Vast capacities up to 6TB[1] to store your photos, videos, music, important documents and more
- Back up smarter with included device management software[2] with defense against ransomware
- Help secure your important files with password protection and hardware encryption
- 3-year limited warranty
The available government guidance is qualitative rather than a head-to-head test, so there is no defensible percentage saying one medium is safer in every situation.
Cloud backup and external drive compared
| Risk factor | Cloud backup | External hard drive |
|---|---|---|
| Can ransomware reach it? | A service that continuously synchronizes a local folder may upload encrypted files and propagate deletions. An attacker who takes over the cloud account may also change or remove data. Separate backup systems with protected history can behave differently; features vary by provider. | When unplugged, the drive has no active data connection for network malware to use. While connected, it is exposed to the infected computer and any malware running on it. |
| Clean-version recovery | Depends on retention, version history, recycle-bin protection, and account recovery controls offered by the service. These capabilities are not uniform. | Contains whatever was copied at the last connection. Earlier clean sets require separate backup cycles or additional media. |
| Physical exposure | Normally off-site, reducing the effect of a local fire, flood, or theft, but dependent on the provider’s infrastructure and your account. | Under your physical control, yet vulnerable to loss, theft, fire, water, and mechanical failure unless stored and duplicated appropriately. |
| Access protection | Use a unique password, multifactor authentication, least-privilege access, and provider security controls. A stolen session or administrator credential can undermine them. | Full-disk or volume encryption protects data if the device is lost. The unlock key must be kept separately from the drive. |
| Restore confidence | Requires downloading or restoring files and checking that versions are usable. Internet availability and account access affect recovery speed. | Can provide fast local restoration, but only if the drive, cable, encryption key, and backup files all work. |
| Practical fit | Convenient for frequently changing data and automatic schedules, provided synchronization is not your only copy. | Works well for planned, periodic snapshots when you can reliably connect, back up, disconnect, and store the drive. |
When cloud backup is safer—and when it is not
Off-site storage limits local disasters
A cloud copy is physically separate from your computer. If ransomware also affects devices in your home or office, or a local incident destroys equipment, an off-site copy may remain available. That advantage is independent of brand or price; it comes from geographic and system separation.
Continuous synchronization can spread encryption
Cloud sync is not automatically the same as a protected backup. CISA warns that automated cloud backups may be insufficient when encrypted local files are synchronized and overwrite unaffected cloud copies. The warning concerns this failure mode, not every cloud service: some products retain versions or snapshots, while others may mirror the latest state. Read the service’s retention and deletion behavior, and do not assume that a folder visible online is an earlier, clean backup.
Check what happens when a large number of files change, when a folder is deleted, and when ransomware renames files. You need a way to retrieve a version from before the incident, not merely a second copy of the current folder.
Rank #2
- Slim durable design to help take your important files with you
- Back up smarter with included device management software[2] with defense against ransomware
- Help secure your important files with password protection and hardware encryption
- 3-year limited warranty
Account takeover is a separate attack path
A criminal who obtains your cloud password, session token, or administrative access may delete backups, change retention settings, or disable protection without touching your computer. Use a unique password, multifactor authentication, recovery information that attackers cannot alter, and separate administrative privileges where the service supports them. Turn on notifications for sign-ins, mass deletions, retention changes, and new devices.
Cloud recovery depends on the provider and your connection
Restoring a small set of documents can be quick, while rebuilding a large computer over an internet connection may take much longer. Provider outages, account-verification delays, bandwidth limits, or a damaged local network can postpone recovery. Keep instructions and recovery credentials available offline so an incident does not leave you locked out of the only copy.
When an external hard drive is safer—and where it fails
Disconnection creates a real isolation barrier
An external drive that is physically unplugged cannot be reached through the network by ransomware on your computer. This is the clearest security advantage of removable media and the reason CISA guidance emphasizes offline, encrypted backups (CISA, “Data Backup Options”). A drive left connected permanently is not meaningfully offline.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Reconnection opens the attack window
While connected, the drive is writable by the operating system and exposed to malware. Ransomware can encrypt the backup files, delete them, or copy corruption onto the drive. Connect it only to a suitably updated and secured system, perform the backup, safely eject it, and physically unplug it. Do not browse untrusted files from the drive before you have checked the computer.
Rank #3
- No wall warts: Work freely with its bus-powered USB-C. No wall outlet required.
- Big on space: High-capacity storage to store all your files in one place.
- Reliable backup: Safeguard assignments, projects, or sensitive files with trusted performance.
- Fuss-free, clutter-free: One port, one cord, quick connect.
- Peace-of-mind: Comes with two-year limited warranty and Rescue Data Recovery Services.
Portability creates loss and theft risk
The same small size that makes a drive easy to disconnect makes it easy to misplace or steal. Encrypt the entire device, keep it in a locked and dry location, and do not store the unlock password in the same bag or drawer. CISA’s removable-storage guidance identifies physical separation as a benefit but warns about portability, loss, theft, and damage.
Rolling backups can preserve corruption
If each connection updates the same files, an unnoticed malware infection or damaged document can be copied forward. Keep dated backup sets or otherwise preserve earlier clean states instead of replacing the only copy on every visit. The number of sets you need depends on how often your data changes and how far back you may need to recover; no single count is a universal guarantee.
A layered plan that uses both media
Different copies address different failure modes. Cloud storage can provide off-site access and history; a disconnected drive can provide a local copy outside the attacker’s network reach. Build the plan around these steps:
- Identify irreplaceable data. Include documents, photos, project files, configuration exports, password-manager emergency information, and any data that would be costly to recreate. Record where each category is backed up.
- Separate synchronization from backup. If a cloud product mirrors a working folder, treat it as convenience and collaboration, not your only recovery copy. Enable a genuine backup or snapshot function when available and document its retention period.
- Protect the cloud account. Use a unique password and multifactor authentication, restrict administrator rights, maintain current recovery methods, and enable alerts for destructive actions. Keep a printed or otherwise offline copy of recovery instructions.
- Prepare an encrypted removable drive. Initialize full-device encryption using your operating system or a reputable encryption utility. Store the recovery key separately and verify that you can unlock the drive before relying on it.
- Run a controlled backup session. Update the computer, connect the drive directly, copy the selected data, review the results and error log, safely eject, and unplug. Store the drive separately from the computer and from any other local copy.
- Preserve more than the latest state. Use dated folders, snapshots, or rotation between separately stored media so a newly encrypted or corrupted file does not replace every older version.
- Test before an emergency. Restore representative files from the cloud and the drive to a separate location, open them, verify that permissions and filenames are intact, and time the process. Record the software versions, encryption keys, and steps needed to repeat it.
This layered approach is consistent with CISA recommendations for offline, encrypted backups and regular availability and integrity testing (StopRansomware Guide, Version 3.1; CISA and MS-ISAC Ransomware Guide).
Rank #4
- High-capacity external hard drive with up to 2TB of storage The ModusTech Facet portable external hard drive gives you dependable HDD storage in a slim 2.5-inch design. Multiple capacities available up to 2TB — back up photos, videos, music, documents, and game libraries with room to grow. A trusted external storage solution for everyday backup, media archives, and creative work.
- USB-C and USB 3.1 connectivity with included 2-in-1 cable The Facet ships with a USB-C to USB-C cable and tethered USB-A adapter, so this external hard drive connects to modern laptops, USB-C iPhones, tablets, and older USB-A computers without buying an extra cable. USB 3.1 Gen 1 (5Gbps) interface delivers real-world transfer speeds up to 100MB/s — fast enough to back up 50GB of files in about 8 minutes.
- Plug-and-play external hard drive for PC, Mac, and laptops Preformatted in exFAT and ready to use the moment you plug it in. The Facet works out of the box with Windows PCs, macOS Macs, MacBooks, Chromebooks, and laptops — no drivers, no software, no setup required. A true plug-and-play external hard drive built for everyday use across every major operating system.
- External hard drive for PS4, Xbox One, and Smart TV gaming The Facet is compatible with PlayStation 4, Xbox One, and Smart TVs with USB support. PS4 and Xbox One games run directly from the drive — plug it in, format through the console, and add to your storage. Also works with Smart TVs that support USB recording or external media playback.
- Slim, shock-resistant portable external hard drive — 160g At 2.5 inches and just 160g, this portable external hard drive is bus-powered through a single USB-C cable — no separate power adapter, no extra cables. Slim enough for a laptop bag, jacket pocket, or camera bag, with a shockresistant casing and faceted diamond-texture top panel that resists fingerprints and everyday wear. Backed by a 1-year limited warranty from ModusTech, a consumer electronics brand specializing in external storage.
How to maintain a disconnected external-drive backup
- Choose the data set and schedule. Start with files that cannot be replaced. A schedule based on how often they change is more useful than an arbitrary interval.
- Encrypt before copying sensitive data. Select full-disk or full-volume encryption, create a long unique passphrase, and save the recovery key in a separate protected location. Test unlocking and locking with a small, noncritical folder.
- Harden the computer first. Install current operating-system and security updates, enable reputable endpoint protection, and use a standard user account for everyday work when practical. Do not connect the drive to a machine showing active infection symptoms.
- Connect directly and copy. Use a trusted cable and port. Copy files with a method that reports errors, then compare a sample of file sizes, dates, and hashes if your tools support verification.
- Keep the session short and observable. Avoid opening email attachments, installing software, or browsing unknown media while the drive is mounted. Watch for unexpected encryption, renamed extensions, or a sudden spike in file changes.
- Eject and unplug. Use the operating system’s safe-eject command, wait for confirmation, remove the cable, and return the drive to its protected storage location. A drive still attached to a powered computer is still reachable.
- Rotate and inspect. At intervals, use a different dated destination or another encrypted drive so one failed or corrupted device does not erase your only historical state. Check the drive for read errors and restore test files.
How to configure cloud storage for ransomware resistance
- Map the product’s behavior. Determine whether it is file synchronization, scheduled backup, image backup, or a combination. Find the controls for version history, deleted-file recovery, retention, immutable or locked snapshots, and administrator deletion.
- Set retention deliberately. Keep versions long enough to cover your likely discovery delay. Confirm whether deleting a local file immediately deletes every online version and whether an administrator can shorten retention.
- Use strong account controls. Require multifactor authentication, unique credentials, least privilege, and alerts for new sign-ins, mass changes, and policy edits. Protect recovery codes outside the cloud account.
- Limit what can write to the backup. Where supported, use a backup account or repository that ordinary workstation accounts cannot delete. Separate backup administration from daily email and web activity.
- Monitor for abnormal change. Investigate sudden spikes in encrypted, renamed, or deleted files rather than allowing the service to complete an automatic “update.” A pause or isolation feature can prevent a bad state from replacing a good one if the product provides it.
- Perform a real restore. Download or restore files to a clean location, open them, and verify older versions. Test account recovery and the process for a complete rebuild, not only a single document.
Because cloud features differ, consult the provider’s current documentation for exact retention limits and recovery steps; the government sources establish the risks and practices, not a feature list for any particular vendor.
How to test that a backup will actually restore
CISA and NIST both emphasize testing availability, integrity, and restoration. Use a repeatable exercise rather than checking only that a backup job says “completed.”
- Select test material. Choose several small files, a large file, a folder with nested directories, and data with the permissions or metadata your work requires.
- Restore to a separate destination. Do not overwrite the live originals. Use a clean computer or isolated folder and document the source, date, and version selected.
- Open and validate. Read documents, play sample media, extract an archive, and compare hashes or checksums where available. Confirm filenames, timestamps, and required application compatibility.
- Test an older point in time. Retrieve a version from before a deliberate change or deletion. This demonstrates that history exists rather than proving only that the latest copy is downloadable.
- Measure recovery time. Record download, decryption, transfer, and rebuild times. Compare them with the maximum downtime you can tolerate.
- Document the runbook. Write down account recovery, encryption-key locations, software needed, and who is authorized to approve a restore. Keep the instructions available if the primary computer is unavailable.
- Fix and retest failures. An unreadable file, missing key, expired account, or unexplained permission error is a backup failure. Correct the cause and repeat the exercise.
NIST’s guidance on planning, maintaining, and testing backup files is also covered by the NIST NCCoE backup testing guide.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesWhich setup fits your situation?
| Your situation | Priority | Safer design |
|---|---|---|
| Files change constantly and you need access from several devices | Frequent capture, off-site availability, and account security | Protected cloud backup with recoverable history, plus a disconnected local copy for independent recovery |
| You can run a scheduled backup and store media securely | Isolation from network attacks and control of the physical copy | Encrypted removable drive, connected only during supervised sessions, with dated versions and restore tests |
| You face fire, flood, or theft risk at one location | Geographic separation | Cloud or another secure off-site copy, while retaining an offline option that is stored separately |
| You may have slow or unreliable internet during an outage | Fast local recovery | Disconnected encrypted drive for immediate restoration, with cloud storage for off-site resilience |
| You cannot reliably unplug and store a drive | Consistent isolation and automation | Use cloud backup only if its versioning, retention, access controls, and restore process are verified; improve physical procedures before depending on removable media |
| Your backup account or computer may be administered by several people | Limiting destructive privileges | Separate backup administration, multifactor authentication, alerts, and a retention control that ordinary users cannot change |
Common mistakes and their fixes
- Leaving the drive plugged in: Unplug it after every successful, verified backup; connection status determines whether the network can reach it.
- Treating sync as historical backup: Confirm that older versions survive mass encryption and deletion. If they do not, add a snapshot, scheduled backup, or disconnected copy.
- Keeping the encryption key beside the drive: Store the key separately and test retrieval before an emergency.
- Using one continuously overwritten set: Preserve dated or rotated states so corruption is not carried forward permanently.
- Ignoring physical security: Lock and protect removable media from theft, water, heat, and accidental damage.
- Trusting a green status icon: Perform actual restore tests, including an older version and a complete recovery drill.
- Forgetting the cloud account: Maintain multifactor authentication, recovery codes, administrative separation, and alerts for destructive changes.
- Backing up an already infected computer: If files are unexpectedly renamed or encrypted, disconnect systems and investigate before creating new backup sets; otherwise malware or corruption may be preserved.
Bottom line
An unplugged, encrypted external drive is harder for network ransomware to reach, while cloud backup is better at keeping a copy away from local disasters and can offer version history. Each can fail through a different path: reconnection, loss, theft, corruption, synchronization, or account takeover. Use both when possible, isolate at least one copy from everyday systems, protect access and encryption keys, and prove recovery with regular restore tests.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
