Backups: The Answer to Loss and Ransomware

Some disasters can't be prevented, only survived. A hard drive can die without warning, a laptop can be stolen, a wrong click can delete the wrong folder, and ransomware can lock up every file you own. The thing that turns any of these from a catastrophe into a bad afternoon is a backup.

A backup is a separate, safe copy of your data that you can restore from if the original is lost, broken, or locked away. It is the direct answer to ransomware, to hardware that fails, and to plain human mistakes.

Think of a spare set of house keys. If you hang the spare on a hook by the front door, it is lost in the very same fire or break-in as everything else — it protects nothing. But if you leave it with a trusted friend across town, it is the thing that gets you back inside when your own keys are gone. A backup works the same way: its whole value comes from being kept somewhere apart.

What Is a Backup?

A backup is an independent copy of data, kept separately, that lets you bring the original back if it is ever lost, corrupted, or locked. The key word is independent: it is a second copy that exists on its own, not a part of the live system.

Olivia's photos live on her phone. If those photos are also copied to a service she doesn't touch day to day, that second copy is a backup. When her phone falls in a lake, the originals are gone, but the copy is untouched — and she can restore her photos onto a new phone from it.

Backups defend the availability of data — the goal of information still being there when you need it. An attack or accident takes the original away; the backup is how you get it back.

Why Separate and Offline Matters

Here is the trap. If a backup sits on the same computer as the original, or on a drive that is always plugged in and reachable, then whatever destroys the original can usually destroy the backup too. Ransomware that encrypts your files will happily encrypt a connected backup drive in the same sweep. A thief who takes the laptop takes the copy folder sitting right next to your work.

This is why a backup is only trustworthy when it is isolated — kept somewhere the main system can't freely reach. The separation is doing all the work. A copy that shares the fate of the original is not really a second copy at all; it is the same copy wearing a different name.

Isolation can mean a different physical place, a drive that stays disconnected until it is needed, or a service the everyday system has no power to delete from. The form varies. The principle does not: a backup must be able to survive the event that takes out the original.

The Ransomware Answer

Ransomware is malicious software that locks your files by scrambling them, then demands payment to unlock them. Faced with it, a person without a backup has two grim choices: pay strangers and hope they keep their word, or accept that the files may be gone for good.

A clean backup removes that dilemma. Instead of paying, you wipe the locked machine and restore your data from the separate copy. The attacker still has their scrambled version, but it no longer matters — you never needed it. This is why backups are the single most reliable defense against ransomware: they turn an extortion attempt into a chore. One honest limit: a backup restores your access to the data — it can't un-steal a copy an attacker already took, which is why the double-extortion attacks from Chapter 6 still sting even when your backups are perfect.

The catch sits in the word clean. The backup only saves you if it was made before the attack and kept out of the attacker's reach. That is, again, why isolation is not optional.

A Backup You Can't Restore Isn't a Backup

It is easy to assume that making copies is the whole job. It isn't. A backup proves its worth only at the moment you restore from it — and that is the worst possible time to discover it doesn't work.

Backups fail quietly in ways nobody notices until the emergency: a copy that was secretly incomplete, a file format nothing can open anymore, a process that stopped running months ago. If no one ever restores from a backup to check it, the backup is a guess, not a guarantee.

So the real test of a backup is a successful restore. A copy you have actually brought back to life is a backup. A copy you merely hope works is a wish. The two look identical right up until the day they don't.