Choose backup storage around the recovery you need: a disconnected external drive can work when internet access is unreliable, while centrally managed NAS or cloud backup may better suit several devices. Whichever route you use, test a restore and protect at least one recoverable copy from the same incident that could damage the original files.
The number of devices, the reliability of the connection and how staff handle removable media all affect the choice.
A local copy can be made without a dependable online connection. The National Cyber Security Centre advises disconnecting external backup storage when it is not in use; arrange secure storage and a way to test restoration too.
Central administration or automatic endpoint backup can reduce reliance on each person remembering to copy files. Check that every required device and location is covered, and that an earlier copy remains recoverable after a device failure or cyber incident.
For removable backup media, check encryption on the exact model, who controls access and how authorised staff would recover the files. Physical custody still matters when a drive travels between locations.
Start with what must be restored and from which devices, then check how each copy will be protected and accessed when needed.
| Priority | What to check | Your needs |
|---|---|---|
| Earlier versions | Check how long deleted or overwritten files remain recoverable, and perform a test restore. A synchronised current copy alone may reproduce an unwanted change. | I need to retrieve a clean version after accidental deletion, corruption or ransomware, not just keep another copy of today’s files. |
| Copy isolation | For a local drive, plan when to disconnect and store it. For connected NAS or cloud backups, check separate administrator access, deletion controls and protected versions. The National Cyber Security Centre warns that attackers can target backups as well as original data. | One compromised device or account must not be able to alter every copy I would use for recovery. |
| Device coverage | List the computers, phones, shared folders and online services to protect. Check supported systems, enrolled devices, selected folders and the restore permissions for each service. | Our staff work across several devices; I need to know which files are actually covered, including work kept in online services. |
| Portable access | Check the exact drive’s encryption and connector, who holds its password or PIN, and what happens after failed access attempts. Keep another recoverable copy. | If a removable drive containing customer files is misplaced, I still need controlled access to a separate backup. |
| Connection and capacity | Compare the files to be backed up, expected growth and connection reliability with the route you plan to use. A manual drive needs a copying schedule; an online service needs connectivity when backups run. | Internet access is unreliable, or our files span several devices. I need a routine that staff can complete and a copy large enough for the data selected. |
The National Cyber Security Centre warns that ransomware can affect connected USB and network storage, while attackers may also target backup infrastructure.
Keep an earlier version that can be restored and protect at least one copy from destructive changes, such as by disconnecting storage after a backup. Test the restore before relying on it.
Central storage and snapshots do not, by themselves, prevent one incident from affecting both working files and connected backups.
Check the exact NAS model’s snapshot support, administrator access, compatible drives and destination for a further offline or off-site copy.
A further storage device or location, configuration work and ongoing administration may be needed.
Western Digital warns that forgetting the password on a supported drive using WD Security can mean erasing the drive and losing its data. Password behaviour must be checked for the particular product, not assumed across brands.
Assign responsibility for credentials, check the model’s recovery procedure and test authorised access with a separate, non-essential copy. Do not make one encrypted device the only backup.
Retention settings affect whether an earlier file can still be restored. Backblaze documents a 30-day default version history for its computer backup service, with longer options that must be selected.
Check the chosen service and configuration for version retention, deletion behaviour, restore steps and coverage of the devices or online workloads you use.
These examples illustrate features to check on particular product lines; a brand name alone does not establish what an individual drive, NAS or service includes.
Relevant when considering direct-attached external drives for local copies.
Relevant to controlled portable copies of a limited set of critical files.
Relevant to centrally managed NAS arrangements for several devices.
Relevant where a NAS backup arrangement calls for protected earlier versions.
Relevant to centrally managed backup of Macs and PCs used across locations.
These portable SSDs, an encrypted USB drive and an external hard drive suit different local-copy needs. Plan how each copy will be made, disconnected where appropriate and restored; choosing a storage device alone does not establish a complete backup routine.
No image available
A portable local-copy option when a drive can be disconnected after backup. The named variant has 1 TB of storage and USB 3.2 Gen 2; check software compatibility, password recovery and your restore routine before using it for sensitive files.
No image available
This USB Type-C, USB 3.2 Gen 2 drive is another portable choice for a local copy. If customer files will be stored on it, check the exact password-protection setup and recovery procedure, and keep a separate recoverable copy.
No image available
A 1 TB USB Type-C option for a portable local copy. Check that the computers used for backup and restoration support the connection you intend to use, and establish the drive’s access-recovery and file-restoration procedures before relying on it.
No image available
Its stated 16GB capacity makes this a choice to assess for a limited set of critical files rather than an assumed full-device backup. Check the Keypad 200’s access and recovery rules, connector compatibility and the actual size of the files to be copied; do not treat a certification described as pending as completed.
No image available
This USB 3.0 external drive offers a 4TB local-copy option when backups cannot depend on internet access. Check the file system against the computers that must restore it, confirm encryption requirements separately, and disconnect and store the drive after each backup.
No. The National Cyber Security Centre advises using an external storage device when reliable internet access is unavailable. A local drive can provide a copy without that connection; disconnect it after use, store it securely and test that the files can be restored.
Not on its own. The National Cyber Security Centre warns that connected USB and network storage can be affected during an incident. Check isolation, separate backup credentials, recoverable earlier versions and a further offline or otherwise protected copy.
Check encryption on the exact model, its capacity and connector, who administers access, and what happens if a password or PIN is forgotten or entered incorrectly. Keep the device in controlled custody and maintain another recoverable copy; features described for one encrypted-drive series do not automatically apply to another.
No. Snapshots can offer an earlier point to restore from, but a NAS remains connected storage unless the wider arrangement protects its backup copies. Check snapshot retention, separate administration and an additional offline or off-site recovery location.
Set a documented interval that reflects how much data loss and downtime the organisation can tolerate. Test the actual files, restore steps and access credentials, and repeat the test after a significant change to the backup arrangement.