Choose a backup arrangement according to the files and devices you need to recover, and the kinds of failure you want it to withstand. A disconnected local drive can provide a separate copy, while an appropriately protected off-site copy can help if an incident affects your home; the National Cyber Security Centre advises keeping backups separate and checking that they can be restored. A connected drive, NAS or synchronised cloud folder should not automatically be treated as an independently recoverable backup.
If household or business documents would be difficult to replace, consider whether your copies would remain available after a device or location failure. The National Cyber Security Centre advises keeping backups separate from the original data.
If important files are spread across household computers or work devices, check which devices, folders and file types your chosen arrangement actually covers. The National Cyber Security Centre's small organisations guidance discusses using more than one backup destination.
If your files include financial or client-related information, weigh access protection against the need to recover files if a password or encryption key is lost. The Information Commissioner's Office and service providers describe different considerations for encryption and recovery.
Choose when: You want a local copy and can connect the drive for scheduled backups, then disconnect it.
Trade-off: A drive kept at home does not by itself protect against an incident affecting that location.
Choose when: Compact storage and frequent transfers matter alongside keeping a local copy.
Trade-off: Portability is not the same as a separately stored or off-site copy; check the exact model's encryption features.
Choose when: Several devices need a shared local destination and you are prepared to configure and maintain it.
Trade-off: A NAS needs its own backup to another destination; RAID does not remove the risk of data loss.
Choose when: Off-site access matters and your connection can handle the uploads and restores you need.
Trade-off: Check account access, encryption, recovery of earlier versions and the restore process for the specific service.
Choose when: You want copies in separate locations or arrangements to address more than one kind of failure.
Trade-off: You will need to manage multiple destinations and test that files can be restored from them.
For household and self-employment records, start by deciding what must be recoverable, then check whether the backup includes those files, preserves useful versions and can be restored.
| Concern | What to check when buying | Who this matters to |
|---|---|---|
| Recovery after failure | Where each copy is kept, when it runs and whether a sample file can be restored. | If I need records after a device failure or an incident at home, I want a copy that is separate and retrievable; about 31% of consumers put recovery across failures first. |
| Confidentiality and access | Whether encryption is available and enabled, how account access is protected, and what happens if a key is lost. | When files include financial or client information, I want to limit access without locking myself out of a restore; about 25% of consumers prioritise confidentiality. |
| Earlier file versions | Whether the service or backup method retains previous versions and how it handles deletion. | If a file is overwritten or deleted by mistake, I want to retrieve an earlier copy; about 25% of consumers prioritise recoverable file history. |
| Capacity and device coverage | Measure the files and devices to include, allow room for planned backup history, and check compatibility. | When records are spread across devices or growing in size, I want the arrangement to cover them all; about 19% of consumers prioritise coverage and capacity. |
Unwanted changes or an attack can affect connected USB and network storage as well as the original files. The National Cyber Security Centre warns that connected backup drives may also be affected by ransomware.
Check whether the service retains earlier versions and protects against deletion. Keep a separately protected copy and test restoring a file.
Synology advises backing up NAS data to another destination because RAID and local versions do not remove the risk of data loss.
Plan the additional destination and how it will be backed up before choosing a NAS configuration.
A separate backup destination may require another storage arrangement.
Some services require an encryption key to create a restore. Backblaze says its optional Private Encryption Key must be supplied for a restore.
Before relying on a product or service, set up and test a safe way to retain and recover the credentials it requires.
The backup needs to fit the files and the history you plan to retain, and it must work with the devices you intend to use.
Measure the backup set, check the exact model's compatibility and leave room for the history you want to keep.
The Expansion portable hard drive is a local-copy option for buyers considering a separately kept drive.
The T7 portable SSD is a local-storage option for people comparing compact drives and frequent transfers.
The DiskStation DS223 is a NAS option for consolidating files from several devices and arranging local backups.
Proton Drive is a cloud-storage option for files that need off-site access.
Personal cloud backup is a route to compare with general-purpose cloud file storage.
These Joybuy options are portable drives for keeping a local copy of household or work files. A local drive does not replace a separately protected off-site copy.
No image available
A portable local drive for keeping a duplicate of important files.
2 TB capacity; USB Type-C 3.2 Gen 2; optional AES 256-bit hardware encryption with password protection.
A local drive is not an off-site copy. The National Cyber Security Centre warns that connected USB backup drives can also be affected by ransomware.
No image available
A portable local-storage option for keeping duplicate files.
4 TB capacity; USB Type-C; USB 3.2 Gen 2x2; AES 256-bit hardware encryption with password authentication.
A local drive is not an off-site copy. The National Cyber Security Centre warns that connected USB backup drives can also be affected by ransomware.
No image available
A portable local copy for documents and other files.
1 TB capacity; USB 3.2 Gen 2; optional AES 256-bit hardware encryption with password protection.
A local drive is not an off-site copy. The National Cyber Security Centre warns that connected USB backup drives can also be affected by ransomware.
No image available
A portable local-storage option for keeping a duplicate of important files.
1 TB capacity; USB Type-C 3.2 Gen 2; IP65 resistance and stated drop resistance up to 3 metres.
The product description specifies temporary water exposure and warns against long-term submersion. A local drive is not an off-site copy.
No image available
A portable local drive for keeping files and backups.
2 TB capacity; stated read speeds up to 800 MB/s; stated drop protection up to 2 metres.
A local drive is not an off-site copy. The National Cyber Security Centre warns that connected USB backup drives can also be affected by ransomware.
Measure the files on each device you intend to cover, then allow room for the backup history you plan to retain. Check the exact device and backup software's usable capacity and compatibility; Samsung notes that displayed capacity can differ from labelled capacity because of measurement conventions.
Schedule copies and practise restoring a sample file before relying on the arrangement. UK cyber-security guidance advises disconnecting an external drive when a backup is not running; keeping another copy can help if that drive is lost or fails.
No. Synology advises backing up NAS data to a different destination because RAID crashes and hard-drive failures can still cause data loss.
The Information Commissioner's Office says the UK GDPR does not specifically require encryption of all personal information. Where the UK GDPR applies, security measures should reflect the risk; the ICO specifically advises encryption for personal information on removable media. It also says purely personal or household activities are outside the UK GDPR, so assess work or client records separately rather than assuming they are household-only.
For cloud storage, check the chosen plan's storage, version recovery and account recovery terms. For a drive, check compatibility and the warranty for the exact model and region: Seagate's cited datasheet specifies a 2-year EMEA limited warranty for that Expansion generation and says its recovery service is not available in every country. Neither a service nor a warranty replaces a usable second copy.