I keep my backup hard drive unplugged whenever I'm not actively creating or restoring a backup so malware cannot modify or encrypt it. The drive is an internal WD Black SATA HDD, and opening the computer case to reconnect it is inconvenient. Is there a practical kill switch, removable bay, or other method that would let me leave it installed while completely cutting its power when it isn't needed?
4 Answers
Windows can mark the disk offline in Disk Management, or you can disable it in Device Manager. That prevents normal access, but it is not a true air gap because the drive remains powered and connected. Malware with sufficient privileges could potentially bring it back online, so physically removing power is safer.
The cleanest solution is probably putting the HDD in a USB 3 external enclosure or docking station. Connect it only when you need to back up, then disconnect it and store it somewhere safe. For an occasional image backup, the small amount of convenience and speed lost compared with an internal connection usually isn’t significant.
Consider the recovery plan as well as the switch. A single internal backup can still be lost to ransomware, a power event, theft, or a fire. Ideally rotate two backup drives, keeping one disconnected and preferably another in a different location. If you can only afford one drive right now, a physical power switch or external enclosure is still better than leaving it continuously available.
You can install a SATA power switch or a front-accessible hot-swap drive bay. These devices interrupt power to the drive while leaving the data cable in place, so the disk is actually offline rather than merely unmounted. Make sure the drive is safely unmounted or the computer is powered down before switching it off.
A SATA power cable with a physical on/off switch might be the simplest option. I’ll probably use one of those rather than opening the case every month.