Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Immutable backups are recovery copies that storage controls prevent from being changed or deleted for a defined period. If ransomware reaches production systems and tries to encrypt or erase connected backups, an immutable copy can remain available for a clean restore. It does not prevent the initial infection, stop data theft, or guarantee that a usable backup exists; effective ransomware recovery also requires isolation, encryption, complete coverage, restricted administration and tested restoration.
What an immutable backup is
A normal backup is another copy of data, but it may still be writable by a backup service account, administrator or workstation. If ransomware steals or abuses those credentials, it can encrypt the backup, overwrite good versions with damaged ones, or delete the backup catalog.
An immutable backup adds a storage rule that prevents alteration and deletion during the configured retention period or under the applicable policy. The copy can still be read for recovery, but ordinary backup operations and compromised accounts cannot rewrite or remove it. The exact behavior depends on the storage platform: retention duration, administrator permissions, legal holds, versioning and emergency-override procedures all matter.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) describes this approach as enabling “delete protection or object lock on storage resources often targeted in ransomware attacks” so data cannot be deleted or overwritten. Its #StopRansomware Guide is an official recommendation, not a guarantee that every product labeled immutable has the same protection.
#1 Best Overall
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
A simple mental model
- Production data: the working copy users and applications change every day.
- Backup data: a recovery copy kept separately from production.
- Immutable backup: a recovery copy with a retention or delete-protection rule that blocks changes and deletion.
- Offline or isolated backup: a copy that ransomware cannot reach through normal network paths or production credentials.
- Encryption: protection against unauthorized reading if the backup media or account is exposed.
These controls solve different problems. Immutability preserves a point in time; isolation reduces reachability; encryption protects confidentiality; restoration testing proves that recovery is practical.
How immutability works during a ransomware attack
What ransomware can do to an ordinary backup
Ransomware operators commonly seek systems that can help them force a payout. Accessible backup shares, management consoles and cloud accounts are valuable targets because destroying recovery copies makes an organization more dependent on the attacker. A backup job can report success while the resulting files are already encrypted or while an attacker has removed older versions.
If the backup remains writable, a compromised production account may be able to perform those actions. A properly configured immutable policy rejects overwrite and delete requests even when they originate from an account that normally administers storage. The original production systems may still be encrypted; the protected copy is what gives the recovery team a known point from which to rebuild.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesWhat the control does—and does not do
- It can block modification or deletion of protected objects during the retention window.
- It can preserve earlier versions when a newer backup contains encrypted or corrupted files, if versioning and retention are configured to keep them.
- It does not stop malware from entering a workstation, server or cloud account.
- It does not prevent an attacker from stealing readable data; encryption and access controls address that risk.
- It does not prove that the backup is complete, uncorrupted, licensed, documented or fast enough to restore.
- It does not help if every retained version was created after the compromise or if the recovery credentials and procedures are unavailable.
For that reason, “immutable” should be treated as a recovery safeguard, not as a synonym for ransomware protection.
Rank #2
- Easily store and access 4TB of content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
How immutable, offline and encrypted backups differ
| Control | Primary failure it addresses | Important limitation |
|---|---|---|
| Immutable retention or object lock | Deletion or overwrite of protected backup data | Misconfiguration, insufficient retention or an already-compromised backup can still leave no usable restore. |
| Offline or isolated storage | Ransomware reaching the backup through production networks or credentials | Someone must reconnect or access it safely for backup and recovery; poor procedures can reintroduce exposure. |
| Encryption | Unauthorized reading of backup contents | It does not stop deletion, overwrite or encryption by ransomware, and lost keys can block recovery. |
| Versioning | Preserving earlier states when a current copy is damaged | Versions consume storage and must be retained long enough to predate the compromise. |
| Access control and least privilege | Limiting who or what can administer storage | A stolen high-privilege credential can still be dangerous unless other controls create a separate barrier. |
| Restoration testing | Discovering unusable, incomplete or undocumented backups | A test is only meaningful when it restores actual critical services and data, not merely lists files. |
CISA recommends combining these measures. Its guide specifically calls for offline, encrypted backups and regular testing of their availability and integrity in a disaster-recovery scenario. The guide’s resource page lists a revision date of October 19, 2023; check the current page for later updates at CISA’s #StopRansomware Guide resource page.
Designing an immutable backup system
1. Map recovery priorities before choosing storage
List critical applications, databases, file shares, identities, network services and the dependencies that make them usable. Assign an owner and a recovery priority to each. A database without its encryption keys, configuration or application server is not a complete recovery set. CISA also recommends maintaining system images and other recovery materials for critical assets.
2. Define retention and recovery objectives
Choose how much recent data the business can lose and how long each critical service may be unavailable. Those decisions determine backup frequency, the number of retained versions and the minimum immutability period. Retention that is shorter than the time an intrusion remains undetected may preserve only compromised copies.
3. Create more than one recovery path
Keep at least one encrypted copy offline or in a suitably isolated environment, and use immutable protection for copies that must remain online for operational reasons. Separate backup administration from ordinary production administration where possible. Production credentials should not automatically have permission to erase backup storage.
Rank #3
- High capacity in a small enclosure – The small, lightweight design offers up to 6TB* capacity, making WD Elements portable hard drives the ideal companion for consumers on the go.
- Plug-and-play expandability
- Vast capacities up to 6TB[1] to store your photos, videos, music, important documents and more
- SuperSpeed USB 3.2 Gen 1 (5Gbps)
4. Configure the storage policy deliberately
On platforms that support them, enable object lock, delete protection and version control. Confirm whether the policy is applied to every object, only new objects, or only a selected bucket, vault or repository. Document who can change retention, whether an override exists, what approval it requires and how recovery staff obtain read access without gaining delete rights.
5. Protect the management plane
Backup consoles, cloud accounts, service principals, encryption keys and recovery documentation are high-value assets. Use separate administrative identities, multi-factor authentication where available, least-privilege roles, alerting for retention changes and a protected copy of configuration information. Review access regularly and remove accounts that no longer need it.
6. Verify the result, not just the job log
A successful backup message means that a job completed; it does not prove that files are readable or that a whole service can start. Check backup integrity, inventory the expected systems, and perform an actual restore into an isolated environment. Record the time required, missing dependencies, key-handling steps and the order in which services must return.
Recommended Free Tools
What home users should know about an external drive or cloud backup
External hard drives
CISA’s consumer guidance recommends backing up device data to an external hard drive or a properly vetted cloud service. An ordinary USB drive is not automatically immutable. While it is connected, ransomware running on the computer may be able to encrypt or delete its files.
Rank #4
- 【Versatile Storage Expansion – For Gaming, Work & Everyday Use】 Running out of space on your PS5 or Xbox Series X/S? This external hard drive lets you store and play PS4 / Xbox One games directly, instantly freeing up your console’s internal storage for next‑gen titles. At the same time, it handles work file backups, media libraries, and cross‑device data transfers with ease. One drive, all your needs. *（Note: PS5 / Xbox Series X|S games cannot be run or stored directly from the external hard drive. However, by offloading your PS4 / Xbox One games, you can free up valuable space for newer titles.）*
- 【Patented Silicone Sleeve – Data Protection You Can Count On】 Worried about drops? We’ve got you covered. The patented built‑in silicone sleeve acts like a shock‑absorbing armor, cushioning your drive against bumps and falls. Whether it’s important work documents, precious family photos, or hard‑earned game saves, your data deserves this level of protection.
- 【Plug & Play, Compatible with Computers & Consoles】 No complicated setup—just plug in and go. Works seamlessly with Windows, Mac, and Linux computers, as well as PS4, PS5, Xbox One, and Xbox Series X/S. Process files at the office, back up data at home, or enjoy gaming in your downtime—one drive handles all your devices, simply and hassle‑free.
- 【USB 3.0 Ultra‑Fast Transfer – No More Waiting】 Tired of watching progress bars crawl? With USB 3.0 speeds up to 5Gbps, large files transfer in seconds. Whether you’re moving work documents, transferring hundreds of gigs of games, or backing up a year’s worth of photos, you get more done in less time.
- 【Sleek, Lightweight, and Ready to Go】 Weighing just 0.16 kg—lighter than a can of soda—this compact drive features a stylish mirror‑and‑frosted finish. Toss it in your bag and go, whether you’re heading to the office, visiting a friend for a gaming session, or giving a presentation on the road.
- Connect the drive only for the backup or restore task.
- Run the backup and verify that important files and folders are present.
- Safely eject the drive when the task finishes.
- Store it somewhere protected from theft, fire and accidental damage.
- Reconnect it on a schedule to create new backups, then disconnect it again.
Keeping multiple rotating drives can provide older versions, but each drive must be disconnected between sessions to reduce the window in which ransomware can reach it. Encryption protects the contents if the drive is lost; it does not make the drive undeletable while attached.
Cloud backup
A cloud service can provide geographic separation and automation, but “in the cloud” does not by itself mean isolated or immutable. Ask whether the service keeps previous clean versions, how long they are retained, which account can delete them, and how a full restore works if the primary account is compromised. Test recovery of representative files before relying on the service for a crisis.
Recovering after ransomware
Recovery should be treated as a controlled rebuild, not a race to reconnect every machine. The sequence below limits the chance of carrying the infection into clean systems.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →- Contain the incident. Isolate affected devices and preserve relevant evidence according to the incident-response plan. Do not reconnect systems merely to see whether they work.
- Protect the backup environment. Suspend unnecessary backup administration, review suspicious account activity and confirm that immutable and offline copies remain intact.
- Determine the last trustworthy point. Compare backup timestamps, malware discovery time, alerts and file-integrity results. Do not assume the newest copy is clean.
- Prepare clean infrastructure. Rebuild or verify operating systems, identity services, network controls and applications from trusted media or maintained golden images.
- Restore in priority order. Start with identity, networking and other dependencies, then restore critical applications and data. Validate each service before exposing it to users.
- Check restored data. Confirm file readability, database consistency, permissions, application behavior and malware scans in the isolated environment.
- Reconnect gradually. Monitor accounts, endpoints and network traffic as systems return to production. Keep an alternate recovery copy until normal operations are stable.
CISA warns against reinfecting clean systems when reconnecting devices and restoring from backups. Recovery documentation should therefore include network isolation, credential resets, key access, dependency order and the tests that authorize reconnection.
Best Value
- Plug-and-play expandability
- SuperSpeed USB 3.2 Gen 1 (5Gbps)
Testing and maintenance that make immutability useful
- Availability test: Can authorized staff locate the repository and obtain the required read access?
- Integrity test: Do checksums, application validation or database checks show that the copy is internally consistent?
- Scope test: Are all critical systems, configurations, identities, keys and dependencies included?
- Restore test: Can the team recover a representative service, not just download a single file?
- Timing test: Does the measured recovery time fit the business requirement?
- Resilience test: Can recovery proceed if the production identity provider, network or backup console is unavailable?
Schedule exercises regularly and after major architecture, application or retention changes. Keep the test results, exceptions and corrective actions with the recovery documentation. A backup that has never been restored is an assumption, not evidence.
Costs, compliance and configuration pitfalls
Retention can increase storage cost
Immutable versions cannot be immediately removed to reclaim space. High-change workloads, long retention windows and multiple copies can therefore increase storage consumption and transfer charges. Estimate growth before enabling a policy across every repository, and define a retention schedule that matches recovery risk rather than keeping everything forever.
Cloud immutability may not satisfy every requirement
CISA cautions that some immutable cloud-storage options may not meet particular regulatory criteria and that misconfiguration can create significant costs. Confirm data-location, retention, legal-hold, audit, encryption-key and deletion requirements with the responsible security and compliance teams. Do not treat a product label as proof of compliance.
Free tools Windows power users keep installed
One-click scans. No signup required.
Common configuration mistakes
- Applying object lock only to a test bucket while production backups remain deletable.
- Starting retention after an attacker has already poisoned the repository.
- Giving the same administrator unrestricted production and backup permissions.
- Keeping only one copy, in one location, with no offline alternative.
- Backing up encrypted or corrupted files without preserving earlier clean versions.
- Testing file downloads but never rebuilding a complete critical service.
- Failing to protect encryption keys, golden images and recovery instructions.
- Reconnecting restored systems before identity, endpoint and network controls are trustworthy.
A practical decision checklist
Before calling a backup ransomware-resilient, verify each statement:
- Critical data and dependencies are identified and covered.
- At least one copy is offline or suitably isolated from production.
- Protected copies use a documented retention or delete-protection policy.
- Previous versions can be recovered if the latest backup is compromised.
- Backup and storage administration is separated from ordinary production access.
- Copies are encrypted and the keys are recoverable under controlled procedures.
- Integrity, availability and full restoration are tested on a regular schedule.
- Recovery documentation and system images are current and stored securely.
- Retention, storage growth, compliance obligations and restoration costs are understood.
- The recovery plan prevents infected systems from being reintroduced.
Immutable backups help stop ransomware from turning an incident into a permanent loss by preserving recovery data that attackers cannot simply erase. The strongest design combines that storage control with offline or isolated copies, encryption, least-privilege administration, complete coverage and rehearsed restoration.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
