{"post":{"slug":"nas-backup-strategy-2026","title":"NAS Backup Strategy: RAID Is Not a Backup","excerpt":"A network drive with redundancy survives a disk failing. It does not survive deletion, ransomware, fire, or theft — which is what backups are for, and they are different things.","category":"tech","date":"January 1, 2026","author":"ByteLedger Team","content":"<span class=\"dropcap\">\"</span>It is on the NAS, and the NAS has RAID.\" That sentence describes protection against exactly one failure mode — a disk dying — and none of the others.\n\nRAID is availability. Backup is recoverability. Conflating them is the most common reason people lose data they believed was safe.\n\n## What changed in 2026\n\n- **Ransomware kept targeting network storage.** Attacks specifically sought and encrypted network shares and connected backups.\n- **Immutable snapshot support spread.** More NAS platforms offered snapshots that cannot be deleted before an expiry.\n- **Cloud backup pricing stabilised.** Off-site storage remained affordable for typical home volumes.\n- **Larger drives lengthened rebuild times.** Higher capacities meant longer, riskier RAID rebuilds.\n\n## What RAID does and does not do\n\n| Threat | RAID | Backup |\n| --- | --- | --- |\n| Disk fails | Protects | Protects |\n| Accidental deletion | No — replicates instantly | Protects |\n| Ransomware | No — encrypts the array | Protects, if isolated |\n| File corruption | No — corrupts on all disks | Protects |\n| NAS hardware failure | No | Protects |\n| Fire, flood, theft | No | Protects, if off-site |\n| Bad software overwriting files | No | Protects |\n\nOnly the first row is a RAID job. Every other row requires a separate copy that is not the live one.\n\nThe rebuild risk is worth noting: replacing a failed disk means reading every remaining disk completely, which is exactly when a second failure is most likely. With large drives that read takes a long time, and a second failure during it loses the array. That is a reason to have backups, not a reason to avoid RAID.\n\n## The 3-2-1 rule\n\nThree copies of the data, on two different media types, with one off-site.\n\n**Three copies.** The live data plus two backups. Two copies means one failure away from one copy.\n\n**Two media.** Not two disks in the same array, and ideally not identical drives bought together — drives from the same batch can fail together.\n\n**One off-site.** This is what covers fire, flood, and theft, and it is the one people skip. Cloud backup or a drive kept elsewhere both work.\n\nFor a NAS specifically: the array is copy one. A local backup — an external drive or a second NAS — is copy two. Cloud or a rotated off-site drive is copy three.\n\nThe off-site copy should be **write-limited from the NAS side** where possible. A backup the NAS can freely overwrite is a backup ransomware on the NAS can destroy.\n\n## Snapshots and immutability\n\nSnapshots are point-in-time views of the filesystem, cheap to take and fast to restore from. They are excellent against deletion and against ransomware — provided they cannot be deleted.\n\nThat is the crucial qualifier. Ransomware that gains administrative access will delete snapshots before encrypting, so snapshots only defend if the platform supports **immutable** snapshots that cannot be removed until they expire, regardless of credentials.\n\nPractically: enable frequent snapshots with a retention schedule, make them immutable where supported, and keep administrative credentials separate from everyday ones.\n\nSnapshots are not a substitute for off-site copies. They live on the same hardware, so they do nothing for fire, theft, or controller failure.\n\nFor the personal-document version of the same problem, [document vault](/blog/document-vault-guide-2026) covers what to protect first.\n\n## Test restores\n\nThe step everyone skips, and the one that determines whether the strategy works.\n\nA backup that has never been restored is a hypothesis. Common failure modes discovered only at restore time: the job silently stopped months ago, the encryption key is on the machine being restored, the backup contains a folder nobody needed, or the restore takes days.\n\n**Test quarterly.** Restore a handful of files to a different location and verify the contents. Occasionally test a full restore to understand how long it takes.\n\n**Check that alerts work** by deliberately failing a job. A monitoring system that has never fired is also a hypothesis.\n\n**Store credentials and keys separately** from the system being backed up.\n\n## Common mistakes\n\n- **Treating RAID as backup.** Different problem entirely.\n- **Sync as backup.** Deletion propagates.\n- **Backup drive permanently connected and writable.** Ransomware reaches it.\n- **Snapshots that are not immutable.** Deleted before encryption.\n- **No off-site copy.** Fire and theft unaddressed.\n- **Never testing restores.** Failure discovered when it matters.\n- **Encryption keys stored only on the source.** Unrecoverable.\n\n## FAQ\n\n**Is cloud sync a backup?**\nNo. Sync replicates changes, including deletions and encryption. Versioning helps and has limits — retention windows are frequently shorter than the time it takes to notice a problem.\n\n**How many disks should a NAS have?**\nEnough redundancy that a single failure does not lose data, plus backups regardless. More disks in the array is not a substitute for the second copy.\n\n**What about backing up the NAS to another NAS?**\nReasonable as copy two, particularly with a pull-based configuration so the source cannot write to the destination. It still needs to be off-site to count as copy three.\n\n**How often should backups run?**\nFrequently enough that losing the interval is acceptable. Daily suits most home use; more often for actively changing work.\n\n## Where to go next\n\nFor power protection on the NAS itself, read [UPS sizing](/blog/ups-sizing-guide-2026). For personal document protection, [document vault](/blog/document-vault-guide-2026), and for the flash storage side, [USB flash endurance](/blog/usb-flash-endurance-2026).","hue":244,"metaTitle":"NAS Backup Strategy: RAID Is Not a Backup","metaDescription":"Why RAID is redundancy rather than backup, how the 3-2-1 rule applies to a NAS, and what snapshots and off-site copies actually protect against.","keywords":["nas backup strategy","raid is not backup","3-2-1 backup rule","immutable snapshots","off-site backup","ransomware protection","restore testing","hardware 2026"],"tldr":["**RAID protects against disk failure only** — deletion and corruption replicate instantly.","**Follow 3-2-1** — three copies, two media, one off-site.","**Snapshots defend against ransomware** — if they are immutable.","**A backup you have never restored is a hypothesis** — test it.","**Skip:** treating cloud sync as backup. Sync propagates deletion faithfully."],"readTime":"4 min read","wordCount":902},"related":[{"slug":"what-is-3-2-1-backup-rule-2026","title":"What Is the 3-2-1 Backup Rule in 2026","excerpt":"The 3-2-1 backup rule is the simplest framework for not losing data: three copies, two kinds of storage media, one copy off-site. Here is what it means in 2026 and how to apply it.","category":"tech","date":"July 16, 2026","author":"ByteLedger Team","readTime":"4 min read","hue":38},{"slug":"what-is-ransomware-protection-2026","title":"What Is Ransomware Protection? The 2026 Guide","excerpt":"Ransomware protection is more than antivirus. Here is what actually stops an attack in 2026, from behavioral detection to offline backups, and where each layer falls short on its own.","category":"tech","date":"July 23, 2026","author":"ByteLedger Team","readTime":"3 min read","hue":215},{"slug":"photo-backup-strategy-2026","title":"Photo Backup Strategy: Not Losing Twenty Years of Photos","excerpt":"Cloud sync is not a backup. Deleting a photo on your phone deletes it everywhere, instantly, and that is the failure mode that actually takes people down.","category":"guides","date":"August 18, 2026","author":"ByteLedger Team","readTime":"5 min read","hue":165}],"sameCategory":[{"slug":"ev-charging-at-home-2026","title":"EV Charging at Home: What the Install Actually Involves","excerpt":"The charger is the cheap part. What determines cost and feasibility is your electrical panel, the cable run, and whether your supply can carry another large load.","category":"tech","date":"August 19, 2026","author":"ByteLedger Team","readTime":"5 min read","hue":232},{"slug":"microled-vs-oled-2026","title":"MicroLED vs OLED: What the Wait Is Actually For","excerpt":"MicroLED promises OLED contrast without burn-in at far higher brightness. Here is why it is still not affordable, and what OLED did in the meantime.","category":"tech","date":"August 19, 2026","author":"ByteLedger Team","readTime":"3 min read","hue":235},{"slug":"nas-buying-guide-2026","title":"NAS Buying Guide: Sizing Storage You Will Not Outgrow","excerpt":"A network attached storage box is a small always-on server. Here is how to size drives and bays, why RAID is not a backup, and what actually matters in the specs.","category":"tech","date":"August 19, 2026","author":"ByteLedger Team","readTime":"4 min read","hue":225},{"slug":"nvme-endurance-explained-2026","title":"NVMe Endurance: Will Your SSD Actually Wear Out?","excerpt":"Drive endurance ratings sound alarming and rarely constrain real use. Here is how to read the specification and what actually kills drives.","category":"tech","date":"August 19, 2026","author":"ByteLedger Team","readTime":"4 min read","hue":251}],"newer":{"slug":"low-volatility-investing-2026","title":"Low Volatility Investing: The Anomaly That Should Not Exist","excerpt":"Theory says higher risk earns higher return. Historically, the least volatile stocks delivered comparable or better returns with less variability, which nobody has fully explained.","category":"finance","date":"January 1, 2026","author":"ByteLedger Team","readTime":"4 min read","hue":294},"older":{"slug":"passive-activity-losses-2026","title":"Passive Activity Losses: Deductions You Cannot Use Yet","excerpt":"Your rental property produced a loss and it did not reduce your salary tax. Passive losses can generally only offset passive income, and the rest waits.","category":"finance","date":"January 1, 2026","author":"ByteLedger Team","readTime":"4 min read","hue":274}}