iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
An air-gapped computer or network is physically separated from other systems and networks. It has no permanent network interface to the outside environment; any approved exchange normally happens through controlled removable media or a purpose-built cross-domain solution. That separation can reduce direct attack paths, but it is not a guarantee of security. Forgotten maintenance links, wireless interfaces, unsafe file transfers, insiders, and physical access can still defeat the boundary.
Organizations accept the cost of isolation when a compromise could endanger people, essential services, safety-critical operations, or exceptionally sensitive information. The decision is a risk-and-workflow choice, not a claim that an isolated system is automatically safer in every respect.
What does “air-gapped” mean?
The CISA NICCS glossary defines an air gap as “the physical separation or isolation of a system from other systems or networks.” Read the definition at CISA’s NICCS glossary. Physical separation is the key requirement: a firewall rule, virtual LAN, VPN policy, or ordinary network segmentation can restrict traffic, but none of those controls alone creates an air gap.
What a strict air gap looks like
In a strict design, the protected environment has no continuously connected cable, Wi-Fi link, radio interface, or other permanent path to a less-trusted network. Its computers may still communicate with one another inside the isolated enclave, but the enclave is separated from corporate, internet, cloud, and vendor networks. A high-trust “high side” can therefore operate without depending on a lower-trust domain.
#1 Best Overall
- FIPS 197 with XTS-AES 256-bit Encryption: Provides business-grade security with hardware-based encryption to protect your sensitive data
- Brute Force and BadUSB Attack Protection: Safeguards against unauthorized access attempts and malicious USB attacks with digitally-signed firmware
- Multi-Password Option with Complex/Passphrase modes: Offers flexible password configuration options to meet various security requirements and user preferences
- New Passphrase Mode: Enhanced security feature allowing users to create longer, more memorable password phrases for easier access without compromising protection
- Dual Read-Only (Write-Protect) Settings: Enables write protection functionality to prevent accidental data modification or deletion when needed
“Air-gapped” does not necessarily mean that every device is powered off or that data can never leave. It describes the normal architecture. When information must cross the boundary, the transfer mechanism becomes a temporary or deliberately controlled connection that needs its own security policy.
Why do organizations use air-gapped networks?
The purpose is to remove ordinary network paths from a system whose compromise or disruption would have unusually serious consequences. Eliminating a route does not eliminate every threat, but it can make remote exploitation, credential theft through an adjacent network, and automated spread substantially harder.
Situations where isolation can be justified
Australian Government cross-domain guidance identifies military and intelligence networks, industrial control systems, financial services, and life-critical systems such as medical equipment and avionics as examples where physical isolation may be maintained or tightly controlled. These are examples of high-consequence environments, not a claim that every organization in those sectors uses a complete air gap.
NIST’s Guide to Operational Technology (OT) Security, SP 800-82r3 (September 28, 2023), describes OT as programmable systems and devices that interact with the physical environment or manage devices that do so. Its examples include industrial control, building automation, transportation, physical access control, and environmental monitoring or measurement. In OT, a cyber incident can affect safety, physical processes, reliability, and availability—not just the confidentiality of files—so the acceptable exposure and recovery strategy may differ from that of an office network.
The decision is about consequence, not prestige
An air gap is most defensible when the expected harm from compromise is greater than the operational burden of isolation. A business should weigh the people and services at risk, the sensitivity of the information, the realistic attack paths, how often updates and vendor support are needed, and whether the isolated system can continue safely when external services disappear.
How does the boundary work in practice?
No permanent interface in the strict model
A pure air gap has no always-on interface to an outside domain. If a network gateway, data diode, remote-maintenance link, or other device continuously connects the environments, the architecture is no longer a pure air gap; it is a connected design with a controlled boundary. Calling it an air gap can hide the fact that the connection itself must be secured, monitored, and maintained.
Removable media as a temporary bridge
The Australian Cyber Security Centre states that “Data can only enter or leave air-gapped environments via removable media or a secure CDS capability.” Its Fundamentals of Cross Domain Solutions publication is available at cyber.gov.au/publication/fundamentals-of-cross-domain-solutions.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
A USB device or other removable medium does not preserve isolation during a transfer. It carries files from one security domain into another and can bring malware, manipulated configuration data, or uncontrolled content with it. Treat the medium and the people handling it as part of the security boundary.
Rank #2
- Certified to FIPS 197 - High-level information security standard approved by the U.S. Government
- Brute-Force Password Attack Protection - Data is automatically erased after 6 failed access attempts. The data and encryption key are securely destroyed and the crypto drive is reset
- Rugged Double-Layer Waterproof* Design - Protects the crypto drive against knocks, drops, break-in and submerging in water. The electronics are shielded by a hardended inner case. The rubberised silicone outer casing provides a final layer of protection
- Auto-lock - The crypto drive will automatically encrypt all data and lock when removed from a PC/Mac or when the screen saver or "computer lock" function is activated on the host PC/Mac
- Secure Entry - Data cannot be accessed without the correct high-strength alphanumeric 8-16 character password. A password hint option is available. The password hint cannot match the password
A controlled transfer workflow
Organizations should adapt the following workflow to their policy, system classification, and applicable safety requirements:
- Authorize the exchange. Record the business purpose, source and destination domains, permitted direction, responsible users, and allowed file types before media is issued.
- Use identified media. Assign an inventory identity and custody record. Do not allow personal or unknown devices into the process.
- Prepare on the source side. Collect only the required files, verify their origin and integrity, and remove unnecessary metadata or executable content where policy requires it.
- Inspect and scan. Use the approved scanning and content-inspection process before the medium enters the protected environment. Scanning is a control, not proof that a file is harmless.
- Enforce direction and destination. Move the medium through the designated transfer station and copy only to approved systems and locations. Do not reverse the direction without a new authorization.
- Verify the result. Check file hashes, signatures, configuration versions, or application-level validation appropriate to the data. Confirm that the receiving system accepted exactly the intended content.
- Record and close the transfer. Log the users, timestamps, media identity, files or package identifiers, scan results, approvals, and disposition. Sanitize, quarantine, or return the medium according to policy.
These steps are implementation considerations, not a certification that any particular storage product is safe. A hardware-encrypted drive can be useful only when the organization’s policy permits removable media and the same authorization, inspection, custody, and audit controls apply.
Secure cross-domain solutions
A cross-domain solution (CDS) is a deliberately controlled capability for moving information between security domains under a defined policy. It may enforce one-way or two-way flows, inspect content, authenticate users, and preserve audit records. Because a CDS is a connection, its design, software, administration, failure behavior, and monitoring must be evaluated directly; deploying one does not make a connected architecture equivalent to a pure air gap.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Can an air-gapped computer be hacked?
Yes. Physical separation removes some attack paths but does not make compromise impossible. The first question should be whether the environment is actually isolated, rather than whether it carries the label.
Overlooked and accidental connections
CISA’s 2023 joint advisory on common cybersecurity misconfigurations reports that assessment teams reached OT networks described as air-gapped by finding special-purpose, forgotten, or accidental connections. Typical places to investigate include engineering laptops, modem or cellular links, vendor-maintenance equipment, wireless adapters, building-management interfaces, temporary test cables, and remote-support appliances.
Maintain an accurate asset inventory and current network diagrams. Physically inspect interfaces, document every approved exception, and review changes after maintenance. A single undocumented route can invalidate assumptions made by risk assessments and incident-response plans.
People, media, and supply chains
Authorized staff can carry malicious files or connect an unapproved device. A compromised update package, engineering tool, or vendor laptop can cross the boundary during routine maintenance. Physical theft, tampering, and insider abuse also remain relevant because an air gap is a network property, not a complete physical-security program.
Isolation is not a substitute for security controls
Use least privilege, application allow-listing where appropriate, secure boot and configuration control, malware inspection, logging, backups, recovery exercises, and physical access controls alongside isolation. The UK National Cyber Security Centre warns that “Relying solely on disconnection creates a false sense of security.” Its OT guidance is available at ncsc.gov.uk/collection/operational-technology/using-paws-in-ot-environments.
Rank #3
- Certified to FIPS 197 - High-level information security standard approved by the U.S. Government
- Brute-Force Password Attack Protection - Data is automatically erased after 6 failed access attempts. The data and encryption key are securely destroyed and the crypto drive is reset
- Auto-lock - The crypto drive will automatically encrypt all data and lock when removed from a PC/Mac or when the screen saver or "computer lock" function is activated on the host PC/Mac
- Secure Entry - Data cannot be accessed without the correct high-strength alphanumeric 8-16 character password. A password hint option is available. The password hint cannot match the password
- SuperSpeed USB 3.0 - Transfer all your confidential files and folders faster than ever before. Works on both PC & Mac
Air gap versus highly constrained connectivity
Some organizations compare a strict air gap with a design that permits only essential services through tightly restricted, documented routes. Neither option is universally superior. The right choice depends on consequence, workflow, and whether the controls work under real operating conditions.
| Decision factor | Strict air gap | Highly constrained network |
|---|---|---|
| Impact of compromise | Removes ordinary network paths and can limit direct remote exposure. | Retains a connection, so allowed routes and their failure modes must be defended. |
| Updates and patching | Usually requires staged packages, removable media, or an approved CDS. | Can use limited update services, but those services become part of the trusted design. |
| Monitoring | Central telemetry and remote administration may be unavailable or delayed. | Selected telemetry and administrative services can remain available if explicitly allowed. |
| File exchange | Uses removable media or a CDS, creating a controlled transfer boundary. | Uses permitted network flows that must be authenticated, filtered, logged, and reviewed. |
| Vendor support | Requires escorted, staged, or otherwise controlled access; informal workarounds are a risk. | May support a narrowly defined service, but third-party access must be limited and monitored. |
| Resilience | Can continue without internet, cloud, or corporate services if isolated operation is tested. | Must be able to fail safely when supporting services or links are unavailable. |
| Operating burden | Decentralized patching, logging, ownership, and media handling increase workload. | Connectivity simplifies some operations but expands the set of components that require security and maintenance. |
What isolation costs in day-to-day operations
Full separation can reduce visibility into privileged activity, make patching slower, and complicate central administration. The NCSC identifies pressure to use USB media for logs and configuration files as one consequence of isolation. If staff cannot obtain approved updates or troubleshoot efficiently, they may create undocumented links—the opposite of the intended control.
Patching and supported software
Define how updates are acquired, verified, staged, tested, transferred, installed, and rolled back. Keep an inventory of software versions and dependencies, and assign an owner for each step. The process must account for emergency fixes as well as routine maintenance.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallMonitoring and incident response
Decide what events are logged locally, how logs leave the enclave, how long they are retained, and who reviews them. If central monitoring is unavailable, establish a collection and review schedule that works during extended isolation. Prepare offline incident procedures, spare equipment, trusted recovery media, and a way to validate restored configurations.
Third-party and maintenance access
Document every vendor route, maintenance laptop, diagnostic tool, and temporary connection. Require authorization, time limits, supervision, malware inspection, and post-maintenance verification. Remove temporary connections when work ends and update diagrams immediately.
How to decide whether an air gap fits
Use a documented decision rather than adopting isolation because it sounds stronger than segmentation.
- Classify the consequences. Identify potential effects on people, safety, essential services, operations, sensitive information, and the environment.
- Map required data flows. List updates, licensing, monitoring, backups, engineering files, reporting, vendor support, and every other exchange. Mark direction, frequency, volume, and urgency.
- Compare threat scenarios. Consider remote intrusion, malware introduced by media, insider actions, supply-chain compromise, physical access, and loss of supporting services.
- Choose the boundary. Select strict isolation, a CDS, or a highly constrained connection only after specifying the controls, owners, and failure behavior for each required flow.
- Design for safe degradation. Confirm that the system can continue safely if cloud, internet, corporate identity, time, monitoring, or vendor services are unavailable.
- Test the assumption. Conduct physical and logical discovery for hidden links, rehearse media transfers and emergency patching, and run sustained-isolation exercises. Record what failed and correct the design.
- Review continuously. Reassess after hardware changes, new vendors, software upgrades, facility work, or changes in the consequences of failure.
Operational checklist for an air-gapped environment
- Maintain an authoritative inventory of computers, interfaces, removable media, transfer stations, and supporting equipment.
- Keep network and data-flow diagrams current, including temporary and vendor connections.
- Define who may authorize transfers, which directions are allowed, and which content types are permitted.
- Use controlled media custody, inspection, scanning, content validation, and audit records.
- Provide a tested process for offline patches, signatures, backups, and emergency updates.
- Log privileged activity locally and establish a dependable method for reviewing and exporting logs.
- Control physical access to rooms, consoles, ports, transfer stations, and recovery media.
- Test operation during prolonged loss of external services and verify safe recovery.
- Train staff to report unofficial links, unapproved devices, unexpected files, and requests to bypass transfer controls.
Bottom line: when is air-gapped computing appropriate?
Use an air gap when the consequences of unauthorized access or disruption justify the loss of convenience and when the system can operate safely with carefully managed transfers. It is especially relevant to high-consequence military, intelligence, industrial, financial, medical, transportation, and other OT environments, but sector membership alone is not a decision rule. Inventory the real boundary, control every transfer, preserve enough monitoring and patching to run responsibly, and test isolated operation. If those requirements cannot be met, a narrowly constrained, well-monitored connection may be safer in practice than an air-gap label that staff routinely bypass.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
