Hardening
3-2-1 Immutable Backup Planner
Design and export a 3-2-1 backup architecture with air-gapped cold storage schedules, encryption passphrases, and recovery drills.
Total Data Copies
1 Primary working disk + 2 Independent verified backup sets
Distinct Media Types
e.g., Local Fast NVMe SSD + Network Attached Storage (NAS) / Blu-Ray M-Disc
Offsite / Immutable Cloud
Geographically separate encrypted cloud (Wasabi, Backblaze B2, or S3 Glacier with Object Lock)
Immutable Backup Verification Checklist
- Test disaster restore quarterly (an untested backup is not a backup).
- Enable S3 Object Lock or WORM (Write Once Read Many) to prevent ransomware encrypting the backup targets.
- Keep the backup encryption passphrases recorded in non-digital physical paper/metal seeds.
This module is guided content rather than a processing tool. It walks you through steps on the systems you already use, and nothing about your setup is sent to us.
No single tool makes an account or a device secure. This module reduces one specific category of risk. It does not detect malware already running on your device, it cannot recover data you lose the key to, and it does not replace keeping software updated and using unique credentials everywhere.
If your device itself is compromised, anything you type into any tool — including this one — can be observed. Treat device hygiene as the foundation everything else sits on.