How to Back Up Your Data to Protect Against Ransomware

Ransomware is one of the few computer problems that can turn a normal day into a crisis in minutes. One wrong click, and your photos, documents, and business files are encrypted by criminals who demand payment for a key that may never work. Paying is expensive, uncertain, and discouraged by security agencies — and it does nothing to guarantee your files come back clean.

There is, however, a defence that reliably takes the power away from attackers: good backups. If you can restore your files from a copy the ransomware never touched, an attack becomes a bad afternoon instead of a disaster. The catch is that backups only work if they are set up correctly before anything goes wrong.

This guide explains the backup approach security professionals recommend, how to set it up step by step at home or in a small business, and how to test it so you know it will actually save you.

Quick Answer

Follow the 3-2-1 rule: keep three copies of important data, on two different types of storage, with one copy offline or off-site. Disconnect external backup drives after each backup, turn on cloud version history, and test restoring files regularly so ransomware cannot encrypt or delete your only copy.

How Ransomware Attacks Your Backups Too

Modern ransomware is designed to find backups. Once it gets onto a computer, it often spreads across the home or office network, encrypts shared folders, and deletes the built-in shadow copies Windows uses for quick recovery. If your backup drive is plugged in all the time, or your cloud folder simply mirrors your files, the encrypted versions can replace the good ones within minutes.

That is why the goal is not just “have a backup” but “have a backup the attack cannot reach”. Every recommendation below — offline copies, version history, separate accounts — exists to create that unreachable copy.

The 3-2-1 Backup Rule Explained

• Three copies. Your original files plus two backups. If one backup fails or is damaged, another survives.
• Two different types of storage. For example, an external hard drive and a cloud service. Different media means one kind of failure cannot wipe out everything.
• One copy off-site or offline. A cloud backup, or a drive kept disconnected and ideally in a different building, protects you against ransomware, theft, fire, and flooding all at once.

National cyber agencies promote this same approach for homes and small organisations. The guidance at CISA’s Stop Ransomware hub on preventing and recovering from attacks stresses offline, tested backups as the most reliable way to recover without paying.

How to Set Up Ransomware-Proof Backups Step by Step

1. Decide what matters most. List the folders you cannot afford to lose: documents, photos, finance records, work projects, and email archives. You do not need to back up programs — those can be reinstalled.
2. Choose your external drive. Buy an external hard drive or SSD at least twice the size of the data you are protecting. Label it clearly as your backup drive so family members do not use it for everyday storage.
3. Turn on built-in backup software. On Windows, connect the drive and set up File History or the Windows Backup app to copy your key folders automatically. On a Mac, set up Time Machine with the same drive.
4. Disconnect the drive when the backup finishes. This is the single most important habit. An unplugged drive cannot be encrypted over the network. Store it in a drawer or, even better, away from the computer.
5. Add a cloud backup with version history. Choose a reputable cloud backup or storage service, turn on its version history or file recovery feature for at least 30 days, and protect the account with a unique password and two-factor authentication.
6. Protect backups with a separate account. Never use the same password for your backup service as for your email or computer login. If ransomware steals one password, it should not unlock your backups too.
7. Set a simple schedule. For most households, a weekly plugged-in backup plus continuous cloud backup works well. Busy home offices and small businesses should back up daily. Put the reminder in your calendar.
8. Encrypt sensitive backups. If your drive holds financial or personal records, turn on the backup software’s encryption option and store the recovery key safely in a password manager.

Once this routine is running, it should take only a few minutes of attention each week. Automation does the copying; your job is plugging in, unplugging, and checking the occasional success message.

Back Up Phones and Other Devices Too

Ransomware headlines focus on computers, but phones and tablets hold irreplaceable photos and messages. Turn on your phone’s cloud backup, and occasionally copy its photos to the same external drive as part of your weekly routine. Also export truly critical items — such as scans of documents and your password manager’s emergency information — in a form you can open without special software.

Do not forget cloud-only files either. If you work in online documents, make sure your provider’s version history and recycle bin retention are turned on, and include those folders in your periodic downloads. Explore our data protection and home tech guides on Network Ustad for more routines that keep family files safe.

Test Your Backups — The Step Everyone Skips

An untested backup is a hope, not a plan. Drives fail quietly, software settings drift, and cloud syncing sometimes excludes the folder you cared about most. Every few months, do this quick test:

1. Pick three real files — a photo, a document, and something from your most important folder.
2. Restore them from the external drive to a test folder and open each one.
3. Restore an older version from the cloud using version history, to prove you could roll back to before an infection.
4. Check the dates. Confirm the most recent backup is as new as you expected, and fix the schedule if it is not.

Common Mistakes to Avoid

• Leaving the backup drive plugged in permanently. This is the most common failure. Ransomware will find and encrypt a connected drive.
• Relying on sync alone. A syncing folder faithfully copies encrypted or deleted files too. You need version history or a true backup, not just sync.
• Backing up to the same computer. A second partition or folder on the same drive offers no protection if that drive fails or is encrypted.
• Sharing passwords between accounts. If your backup uses your everyday password, one phishing email can expose everything.
• Never testing a restore. Discovering a broken backup during an attack is the worst possible timing. Test quarterly.
• Planning to pay the ransom. Payment does not guarantee recovery, can be illegal in some situations, and funds further crime. Backups are cheaper and safer.

Conclusion

You cannot stop criminals trying ransomware, but you can decide in advance that it will not work on you. Three copies, two kinds of storage, one copy offline or off-site, a separate protected account, and a tested restore turn the worst-case scenario into a recoverable inconvenience.

Set the system up this week while everything is calm. The drive, the cloud account, and the weekly unplugging habit cost little — and on the one day you need them, they are priceless.

Frequently Asked Questions

How often should I back up my files?

Ask yourself how much work you can bear to lose. For most home users, continuous cloud backup plus a weekly external drive backup is a good balance. If you create important work daily, back up daily.

Is cloud storage alone enough protection?

Only if it includes version history and a recovery window, and the account is protected with a unique password and two-factor authentication. Pure sync without versions can overwrite good files with encrypted ones.

What size external drive do I need?

Choose a drive at least twice the size of the data you back up. That leaves room for multiple versions and future growth. Drives are inexpensive compared with the cost of losing your files.

Should I pay if ransomware hits and I have no backup?

Security agencies advise against paying: there is no guarantee of recovery, and payment encourages more attacks. Report the incident, get professional help, and focus on rebuilding safely. Then set up backups so you are never in that position again.

Can I use a USB stick as my offline backup?

For a small set of vital documents, yes, but sticks are easy to lose and wear out. For photos and larger collections, use a proper external drive for your main offline copy and keep a stick only as an extra.