For a small business backing up laptop data, choose a portable drive if staff need a copy they can carry and disconnect; consider network-attached storage when several devices need a shared local destination, or an online copy when staff work across locations. The choice is not complete until the business can keep a recovery copy separate from live systems, control access to it and test that files can be restored. The Information Commissioner's Office and National Cyber Security Centre both advise against relying on a single, continuously connected copy.
Staff moving between home, office and travel locations need a backup they can carry, protect and store away from the working laptop. The Information Commissioner's Office and National Cyber Security Centre advise keeping removable backups secure and disconnected when they are not in use.
Businesses carrying customer, employee or other personal information on removable media need to assess encryption, authorised access and how they would recover the data if credentials were lost. The Information Commissioner's Office treats encryption as a risk-based security measure, rather than a product-level compliance certificate.
A small office backing up several work devices may need shared local storage. Someone must also manage its access and maintain a separate recovery copy: the National Cyber Security Centre warns that network-connected backups need a means of isolation.
Choose the backup destination around where work happens, then plan how to separate and restore the copy. A portable SSD, external hard drive, encrypted drive, shared local system and online copy solve different parts of that problem; none makes a continuously exposed, untested backup recoverable on its own.
Consider it: when staff regularly carry a local copy between work locations.
Allow for: a second protected copy and a way to disconnect this one after backup.
Consider it: when a larger local backup set can usually stay in secure storage rather than travel with staff.
Allow for: careful physical handling and separation from the working device.
Consider it: when removable copies need device-level authentication and controlled staff access.
Allow for: documented PIN or password custody, lockout rules and recovery arrangements.
Consider it: when several devices need a shared backup destination at a fixed base.
Allow for: account administration and another copy that can be isolated from the network.
Consider it: when remote staff have reliable internet access and need a copy away from their laptop or office.
Allow for: account protection, retention and restore checks, alongside a disconnected local copy where appropriate.
| Concern | What to check | Who this matters to |
|---|---|---|
| Recoverability and separation | Can a copy be disconnected or isolated, and can you restore an earlier version of a representative file? | If a laptop is lost or its files are damaged, I need a copy that the same event cannot reach. Around 33% of consumers put recoverability and separation first. |
| Mobile workflow | Check the laptop connection and the exact drive's capacity and stated physical protection. | When I move between work locations, the backup needs to be practical to carry and use regularly. For around 25% of consumers, that mobile workflow is the primary concern. |
| Access and credentials | Check how encryption is set up, who can unlock the drive and what happens after failed attempts or a lost credential. | If a removable copy contains sensitive files, I need to control who can read it without losing the ability to recover it. Access and credential management come first for around 25% of consumers. |
| Shared local storage | Check device and user access, administrator controls and how a separate copy of shared backups will be kept. | When several work devices need one local destination, I need manageable access rather than a drive passed between colleagues. Around 17% of consumers chiefly need shared local storage. |
The drive and laptop could be lost together, while a connected drive could be affected by the same malicious activity. The Information Commissioner's Office and National Cyber Security Centre advise separating backups from live data and keeping removable storage secure.
Disconnect the drive after backup, keep an appropriate recovery copy away from the main workplace and restore representative files periodically to check the process.
Authentication settings and failed-attempt rules vary by model. For example, Kingston says its IronKey Vault Privacy 80ES can erase its encryption key after repeated incorrect password attempts; that behaviour makes credential custody part of the recovery plan.
Check the exact drive's setup, administrator and user roles, lockout behaviour and recovery procedure before issuing it to staff.
A speed rating does not establish how quickly an actual backup or restore will finish; the host connection and the backup workflow also matter.
Match the interface to the work laptops, allow capacity for retained versions and test a representative backup and restore.
A network-connected backup may still be reachable through a compromised device or account. The National Cyber Security Centre advises making backup systems isolatable as far as reasonably practical.
Control accounts and administrator access, and maintain a further isolated or separately stored copy appropriate to the business's risk.
Its T7 Shield is a portable SSD to consider when a backup drive will travel with staff.
Its diskAshur M² is a removable-storage option for teams considering PIN-authenticated access.
The Vault Privacy 80ES is a portable SSD option for teams assessing touchscreen authentication and separate administrator and user access.
These portable SSDs and external hard drives offer local-copy options for staff moving between work locations or storing backup sets securely. Their storage features are not a substitute for choosing backup software, separating copies and testing restoration; shared NAS and online-copy arrangements are separate decisions.
No image available
A portable local-copy option for staff carrying backups between work locations.
1 TB; USB 3.2 Gen 2. Check the host connection and password setup for the intended workflow, and disconnect the drive after backing up.
No image available
A portable hard-drive option when a 2 TB local backup set needs to be stored and moved carefully.
Check the intended backup software's scheduling and version-retention settings, then test restoration. Disconnect and store the drive separately when it is not in use.
No image available
A portable-copy option for staff using a compatible USB connection.
The title states transfer speeds up to 2000 MB/s; actual speed depends on host support. Check access protection separately if backups will contain sensitive information.
No image available
A 4 TB portable SSD option when the local copy needs room for a larger backup set.
USB Type-C, USB 3.2 Gen 2. Check software setup before relying on password protection; this T7 should not be confused with the IP65-rated T7 Shield.
No image available
A 4 TB external hard-drive option for a local backup set that can be stored securely between uses.
USB 3.0. Protect it from physical shocks and check the required encryption, device compatibility and backup software before storing business data.
No: the Information Commissioner's Office says UK GDPR does not specifically require encryption of all personal information. It calls for security appropriate to the risk and advises using encryption for personal information on removable media. Assess what the drive will hold and how it could be lost or accessed; buying an encrypted product alone does not establish compliance.
Not on its own. The Information Commissioner's Office and National Cyber Security Centre warn that a backup connected to live systems can be affected by malicious activity. Disconnect removable media when backup is complete and keep another appropriately protected recovery copy where the risk calls for one.
Choose according to internet reliability and how staff would restore their files. The National Cyber Security Centre identifies external storage as an option without reliable internet and advises considering both online and storage-device backups so that loss or failure of one copy does not remove every recovery option.
Record who may use it, who holds administrator or recovery credentials, where it is stored and who tests restoration. Check the exact model's lockout and reset rules: iStorage describes PIN access for the diskAshur M², while Kingston describes crypto-erase after repeated incorrect attempts on the Vault Privacy 80ES.
No. A network-attached storage system remains connected unless its backup access can be isolated. The National Cyber Security Centre advises making backup systems isolatable as far as reasonably practical; plan controlled access and a separate recovery copy rather than treating shared storage as the only backup.