The safest backup is a recovery system, not a storage subscription. For important files, use three copies in at least two storage environments, keep one copy off-site, and protect at least one copy with offline or immutable retention. Add encryption, multi-factor authentication, monitoring, and regular restore tests. A practical household setup is an automatic local backup plus a separate cloud backup; a business should add documented recovery procedures, immutable retention, and tested full-system recovery.
Start with the loss you need to survive
Different failures require different safeguards. Accidental deletion and bad migrations call for file versions. A failed disk may require an image restore. Theft, fire, and flood require an off-site copy. Ransomware and account takeover require an isolated or immutable copy that an attacker cannot alter or delete through the normal user account. Long-term legal or family records may need an archive with defined retention and retrieval procedures.
Write down what must be restored, how much recent work you can lose, and how quickly you must resume. These two targets are more useful than comparing storage capacity alone:
- Recovery point objective (RPO): the maximum acceptable data loss. A 24-hour RPO may suit daily backups; an hourly RPO needs hourly or continuous protection; a minutes-level RPO may require replication, snapshots, or specialized systems.
- Recovery time objective (RTO): the maximum acceptable downtime. A several-day RTO can use inexpensive archive storage; same-day recovery favors a local copy; minutes or hours may require image recovery, spare hardware, virtualization, or a disaster-recovery service.
A backup can report success and still fail your RTO if restoring hundreds of gigabytes over a slow connection takes several days.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minute#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Inventory everything that needs protection
Before choosing software, list devices, accounts, applications, and data. Include:
- Documents, Desktop, Downloads, photos, video, music, and creative projects.
- Email archives, browser profiles and bookmarks, tax and financial records, and password-manager emergency kits.
- Source code, repositories, databases and exports, virtual machines, containers, and application configuration.
- NAS shares, phones and tablets, and collaboration data in Microsoft 365, Google Workspace, Salesforce, Dropbox, or Box.
- Encryption keys, certificates, recovery codes, software licenses, installers, infrastructure-as-code, and restoration documentation.
CISA advises keeping “golden images” and the installers, licenses, source code, and configuration needed to rebuild an environment because an image may not boot on different hardware or a different platform. See the CISA ransomware guide.
Backup, sync, storage, archive, and disaster recovery are different
| Function | What it does | What it does not guarantee |
|---|---|---|
| Sync | Keeps selected files similar across devices for access and collaboration. | Independent retention, application recovery, or protection from a synchronized deletion, overwrite, or ransomware event. |
| File backup | Stores selected files and historical versions for later recovery. | A bootable operating system or every hidden application dependency. |
| Image backup | Captures an entire disk or system, including the operating system, applications, settings, and files. | Automatic compatibility with replacement hardware or a clean state if the image already contains malware. |
| Cloud storage | Provides remote capacity for files or backup targets. | A complete backup workflow unless scheduling, versioning, retention, security, and restore tools are configured. |
| Archive | Preserves data for long retention, often with slower retrieval. | Fast recovery for active systems. |
| Disaster recovery | Restores systems, accounts, applications, and data after a major outage. | Continuity while systems are unavailable; that is the role of business-continuity planning. |
OneDrive, Google Drive, Dropbox, and iCloud can offer version history and recycle bins, but a synchronized deletion, compromised account, incorrect overwrite, or retention expiry can affect the synchronized copy. Microsoft distinguishes ordinary cloud file storage from protected ransomware recovery and recommends resilient recovery copies in its ransomware guidance.
Use 3-2-1 as a baseline, then strengthen it
The 3-2-1 rule means three total copies of important data (including the production copy), on two different media or storage environments, with one copy off-site. CISA presents this model in its backup-options guidance.
For ransomware and administrator-error resistance, use a stronger variant:
- 3-2-1-1-0: three copies, two media types, one off-site, one offline or immutable, and zero unverified backup errors.
- 3-2-1-1-1: add a separate security domain or account so one compromised administrator cannot control every copy.
- Offline rotation: disconnect encrypted drives and rotate them between locations.
- Immutable retention: use append-only or retention-locked storage that cannot be modified or deleted during the configured period.
These are design principles, not guarantees. Three copies in one cloud tenancy, controlled by one compromised account, can share the same failure mode. Immutability is not encryption or isolation, and encryption is useless if its key is lost.
Rank #2
- Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Choose an architecture
External drives
Two encrypted external drives provide inexpensive, fast local recovery. Rotate them, keep one disconnected, and store one at another location. A permanently connected drive remains exposed to ransomware, theft, fire, electrical damage, and forgotten backup jobs.
Network-attached storage (NAS)
A NAS centralizes household or office backups and can provide snapshots and quick restores. RAID improves availability after some disk failures but does not protect against deletion, corruption, ransomware, theft, or fire. Use separate credentials, restricted permissions, retained snapshots, off-site replication, and an immutable or offline copy; then test restores.
Managed cloud backup
A managed service automates scheduling, versioning, and off-site storage without local hardware maintenance. Check upload and restore speed, device and platform coverage, retention, account-security controls, support, export options, and any physical-restore or egress charges. “Unlimited” plans can still limit computers, NAS devices, mobile data, retention, fair use, or restore bandwidth.
Object storage
S3-compatible services scale from gigabytes to petabytes and can provide lifecycle rules and Object Lock. They require backup software or scripting and careful management of credentials, encryption, retention, monitoring, API requests, retrieval, and data-transfer costs. The UK NCSC advises checking whether a cloud design prevents attackers from denying access to every copy, changing encryption keys, or destroying the management plane in its ransomware-resistant cloud backup principles.
Tape and deep archive
Tape and deep archive suit compliance records and very large, rarely accessed datasets. They need media management, hardware, slower retrieval, and periodic readability tests; they are usually a poor sole backup for active personal files.
Compare backup types
File-and-folder backup
Use it for personal documents and media when simple individual-file recovery matters most. It may omit hidden application data and leaves you to rebuild the operating system and applications after a disk failure.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #3
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Full image backup
Use it for complete workstation or server recovery, operating-system failures, and migrations. Images require more capacity and careful hardware and driver planning, and may preserve malware or corruption if retention is inadequate.
Full, incremental, and differential jobs
- Full: copies every selected item.
- Incremental: copies changes since the previous backup of any type, reducing storage and backup time but potentially requiring more segments during recovery.
- Differential: copies changes since the last full backup, using more space than incremental jobs but usually simplifying restore.
- Synthetic full: constructs a newer full backup from existing components without rereading all source data.
Continuous protection, snapshots, and replication
Continuous protection reduces RPO for active files but can replicate corruption or ransomware quickly, so it needs version history and delayed retention. Snapshots and replication speed recovery but are not sufficient alone when they remain on the same array, account, or network as the primary data.
Security requirements that matter
- Encryption in transit and at rest; understand whether the provider can decrypt data.
- Optional client-side or private-key encryption, with offline key copies and a tested key-recovery process.
- Multi-factor authentication, preferably security-key support where available.
- Separate backup identities, least-privilege roles, and no shared administrator account.
- Immutable or append-only retention, Object Lock or equivalent, and an offline copy.
- Audit logs and alerts for failed jobs, unusual deletion, policy changes, and retention changes.
- Physically or logically separate regions and protection against deletion of the backup-management account.
CISA recommends offline, encrypted, regularly tested backups, while Microsoft recommends immutable storage for critical enterprise recovery. A backup can be immutable yet unusable if its encryption key is lost, or encrypted yet deletable by an attacker with console access.
Privacy, compliance, and data location
Check where data is stored, whether the provider can read it, how private-key mode affects previews and assisted recovery, and whether business data requires a processing agreement, legal hold, defined retention, or a particular country or region. A SOC 2, ISO, or similar certification does not automatically make your configuration compliant; access controls, encryption, retention, monitoring, and procedures still matter.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Evaluate services with a consistent scorecard
Score each candidate from 1 (poor) to 5 (excellent) for:
- Coverage of your operating systems, devices, servers, NAS units, applications, and SaaS accounts.
- Individual-file, whole-computer, and full-environment recovery.
- RPO and RTO fit, including realistic upload and restore speeds.
- Offline, immutable, air-gapped, or isolated retention.
- MFA, encryption, access controls, logging, and key management.
- Ease of configuration, automation, monitoring, and support.
- Version-history depth, portability, and scalability.
- Predictable total cost, including local hardware, retrieval, egress, support, and administration.
- Vendor resilience and service continuity.
Current products by use case
The following signals were checked on August 18, 2026, for the United States. Prices and features can change; distinguish promotional pricing from renewal pricing and storage from device limits.
Rank #4
- Easily store and access 4TB of content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
| Use case | Examples and current signals | Best fit | Important caution |
|---|---|---|---|
| Simple managed computer backup | Backblaze Computer Backup; the personal page advertises a two-year plan at $189, while its business page states $99 per computer. | Individuals or businesses wanting straightforward computer backup. | It is not interchangeable with Backblaze B2 and is not a universal NAS, server, or SaaS platform. |
| Capacity-based multi-device backup | IDrive lists 5 TB at $9.99 per month, with a discounted first-year rate of $6.99 per month, plus larger tiers. | Households or small organizations backing up several computers. | Check renewal price, device limits, version history, NAS/server support, and restore terms. |
| Small-business managed endpoint backup | CrashPlan for Small Business and its pricing page. | Small organizations seeking managed endpoint backup. | Do not assume family-plan pricing or complete enterprise workload coverage; verify the current regional price. |
| Technical object-storage target | Backblaze B2 starts at $6.95 per TB per month and advertises free egress up to three times stored data, subject to terms. It supports S3 compatibility and Object Lock. IDrive e2 is another S3-compatible option and notes a minimum fee associated with 1 TB of active storage. | NAS owners, technical users, backup applications, and MSPs. | Budget for software, transactions, retrieval, egress, local hardware, and administration. |
| Business security-and-backup suite | Acronis Cyber Protect and its business cloud page. | Organizations wanting backup, endpoint security, and disaster-recovery controls. | Pricing varies by workload, channel, term, storage, and geography; complexity may exceed a personal need. |
| Microsoft-centered files | OneDrive and Microsoft 365. | Synchronization, collaboration, versioning, and recycle-bin recovery. | Use independent Microsoft 365 backup and administration for critical business data; it is not a complete image backup. |
| Google-centered personal storage | Google One. | Drive, Gmail, and Photos storage for Google households. | It does not provide full-system image backup or independence from the Google account boundary. |
| Apple-centered devices | iCloud+ and Apple’s support guidance. | Integrated device backup, photos, and synchronization. | iCloud device backup, iCloud Photos, and Mac Time Machine are different functions; add an independent local or cloud layer. |
| Configurable archive and infrastructure | Amazon S3 and S3 Glacier. | Technical users with lifecycle and automation requirements. | Requests, retrieval, lifecycle transitions, and data-transfer charges can dominate the apparently low storage rate. |
Match the design to your situation
- One Windows or Mac computer: managed computer backup plus an encrypted external drive. Confirm external-drive, NAS, and version-history support.
- Family with several devices: multi-device capacity-based service, local drive or NAS, and a separate cloud copy. Handle mobile photos and shared accounts explicitly.
- Photographer or video editor: fast local storage plus object storage or managed cloud backup. Upload, egress, and restore capacity often outweigh headline storage price.
- Linux user: choose software with explicit Linux support or build a self-managed workflow; do not assume consumer compatibility.
- NAS owner: NAS-aware backup software targeting off-site object storage, with snapshots and an offline or immutable copy.
- Freelancer: automatic workstation backup plus a separate client/project archive, with privacy and retention matched to contracts.
- Small business: endpoint and server backup, local recovery, immutable off-site retention, SaaS and identity protection, and documented drills.
- Larger organization: policy-based backup and disaster recovery with orchestration, reporting, immutability, and tested RPO/RTO performance.
Calculate the total cost
Use this formula rather than comparing advertised storage alone:
Total cost = subscription or license + local hardware + storage growth + restore and retrieval charges + support + administration time.
Also price initial upload, replacement drives, physical restore media, API requests, egress, version-history retention, encryption-key administration, compliance reporting, and a spare machine if downtime is expensive. A low monthly rate is poor value when recovery is slow or the service cannot protect your actual devices.
Build and test the setup
- Inventory devices, data, applications, SaaS accounts, keys, and licenses.
- Set an RPO and RTO for each important workload.
- Configure an automatic local file or image backup.
- Configure a separate off-site cloud backup.
- Enable versioning, retention, and delayed deletion where available.
- Protect backup administration with MFA, separate credentials, and least privilege.
- Store encryption keys and recovery codes offline; document who can use them.
- Disconnect, rotate, or retention-lock at least one high-value copy.
- Restore sample files monthly and perform a larger restore quarterly.
- For a business, run a full disaster-recovery exercise at least annually from a clean device or alternate location.
- Review coverage, retention, accounts, and documentation after major operating-system, application, hardware, or organizational changes.
NIST treats backup as a lifecycle that includes conducting, maintaining, and testing backup files, not merely creating them. Its guidance is available at Protecting Data from Ransomware and Other Data Loss.
Recover safely after ransomware or corruption
- Isolate affected systems and stop synchronization that could spread encrypted or corrupted files.
- Identify the infection or corruption window and select a known-good restore point.
- Use a clean recovery environment; do not trust the compromised operating system.
- Rotate credentials, repair vulnerabilities, and verify backups before reconnecting systems.
- Restore and test applications, permissions, encryption keys, and data before returning to production.
If a provider account is compromised, use MFA, separate administrators, offline recovery codes, deletion alerts, and independent monitoring. If private-key encryption is enabled, keep an offline key copy, use at least two trusted custodians for a business, and test recovery with the stored key.
Quick Recap
Final checklist
- At least three total copies exist.
- Copies use two or more storage environments.
- One copy is off-site.
- One copy is offline, air-gapped, or immutable for its retention period.
- Backups are encrypted and MFA protects administration.
- Versions last long enough to cover delayed discovery of deletion or ransomware.
- Individual files and complete systems can both be restored.
- Restore tests have actually succeeded.
- Keys, recovery codes, licenses, installers, and instructions are available offline.
- RPO, RTO, costs, ownership, and review dates are documented.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitches
