How to protect important files on Windows
Protecting important files on a Windows PC takes a few habits, not one tool: keep Windows and your apps updated, use Windows Security, secure your accounts with strong unique passwords and two-step verification, encrypt the disk, be careful with downloads and email, and keep tested backups. This checklist walks through each in order of importance and says what each does and does not protect you from.
Start with what can go wrong
Files are lost or exposed in a handful of ordinary ways: a drive fails, a laptop is lost or stolen, you delete or overwrite something by mistake, malware damages files, or someone gets into one of your accounts. Different habits cover different risks, so it helps to know which each checklist item is for.
Which habit protects against which problem
| Habit | Mainly protects against |
|---|
| Updates and Windows Security | Malware and attacks that use known weaknesses |
|---|
| Strong passwords and two-step verification | Someone else getting into your accounts |
|---|
| Disk encryption | Someone reading files from a lost or stolen device |
|---|
| Careful downloads and email | Malware and scams that start with you clicking |
|---|
| Backups and restore tests | Hardware failure, deletion, damage, loss, theft |
|---|
Note that only backup protects against losing the files themselves in every one of these cases. The rest reduce how often you need it.
1. Keep Windows and your apps updated, and use Windows Security
Updates fix weaknesses that attackers use. Turn on automatic updates in Windows Update and restart when asked. Keep your browser and the programs that open documents, such as PDF readers and office suites, updated as well.
Windows includes Windows Security (Microsoft Defender Antivirus), which is on by default unless you install other security software. Leave real-time protection on and run a scan if something looks wrong. Using more than one real-time antivirus product at once can cause conflicts, so choose one.
2. Secure your accounts with strong, unique passwords and MFA
Most account takeovers use a password that was reused from another site or was easy to guess. Use a long, unique password for every account that matters, and store them in a reputable password manager rather than in a document or your browser's notes.
- Turn on two-step verification (MFA) for email, your cloud storage, your backup account and your banking. Email matters most, because it can reset every other password.
- Use an authenticator app where you can; it is generally safer than a code sent by text message.
- Use a standard (non-administrator) Windows account for daily work, and sign in as an administrator only when installing or changing system settings.
3. Encrypt the disk on laptops and other portable devices
If a laptop is lost or stolen, disk encryption makes it very hard for someone to read your files by removing the drive. Depending on your edition of Windows and your hardware, Windows offers Device encryption or BitLocker drive encryption. Open Settings and search for Device encryption or BitLocker to see what your PC supports.
- Save the recovery key somewhere safe and separate from the PC, such as your Microsoft account or a printed copy in a secure place. Without it, you may lose access to your own files.
- Disk encryption protects a switched-off or locked device. It does not protect files from malware running while you are signed in, and it is not a backup.
- Combine it with a sign-in password and a short screen lock timeout.
4. Be careful with downloads, email and links
Many infections start when someone opens an attachment or runs an installer from the wrong place. A few rules prevent most of them.
- Download software only from the publisher's official website. The guide Is it safe to download backup software? is a checklist you can apply to any installer.
- Be suspicious of unexpected attachments, urgent requests and links that ask you to sign in. If a message claims to be from your bank or an employer, go to the real site yourself instead of using the link.
- Do not run files whose purpose you cannot explain. Do not tell Windows or your security software to ignore a warning unless you understand exactly why.
- Remove programs you no longer use. Fewer programs mean fewer things to keep updated.
5. Keep backups, and test restoring from them
Backup is the habit that protects your files whatever goes wrong, which is why it belongs on every list. Follow the idea of keeping more than one copy, with one stored away from the PC: see the 3-2-1 backup strategy.
- Decide what matters. Documents, photos, work folders, email archives. What should you back up on a Windows PC? helps.
- Back up automatically. A backup you have to remember to run is a backup that gets skipped.
- Keep history. Versions let you go back after a bad edit or damage. See File versions and Trash explained.
- Test a restore. Restore a few files and open them. Do it again every few months and after any big change.
Also remember that a backup account is an account like any other. Protect it with a strong password and two-step verification.
How Tornova helps with part of this list
Tornova Backup covers the backup part of the list, and some of the account part. It is not antivirus, not a firewall and not a disk-encryption tool, and it does not detect ransomware today.
- Backup: cloud backup of the files, folders or drives you choose on Windows, with optional versions and Automatic Backup on a schedule you set.
- Account protection: optional two-step verification (TOTP). If it is on, extra verification is needed to start a restore.
- Data in the cloud: encrypted in transit (TLS 1.2 or later) and encrypted at rest in cloud storage; storage is never publicly accessible. The article Encrypted cloud backup explained says what that does and does not mean.
- Restore control: you choose and start restores on the website; Tornova App on the selected PC completes them.
See Features and the security page. The companion guide Data protection and backup safety tips adds more everyday habits.
The one-page checklist
- Windows Update is on and Windows has restarted recently.
- Windows Security (or one other trusted security product) is on.
- Every important account has a unique password and two-step verification.
- Laptops use Device encryption or BitLocker, with the recovery key saved elsewhere.
- Software comes only from official sites; unexpected attachments stay unopened.
- Important files are backed up automatically, in more than one place.
- You have restored a real file from the backup in the last few months.
Frequently asked questions
Is Windows Security enough, or do I need other antivirus software?
For many home users, Windows Security with sensible habits is a sound baseline. If you add another security product, use one real-time antivirus at a time.
Does BitLocker replace a backup?
No. Encryption protects files from being read on a lost or stolen device. It does nothing if the drive fails or files are deleted or damaged, so you still need backups.
Are cloud storage folders enough to protect my files?
A synced folder mirrors changes, including mistakes and deletions. It can help, but a backup with its own history is a safer way to recover. See the guide on backup vs sync.
How often should I check that my backup works?
Look at the backup status regularly, and restore a real file every few months. Do it after you change your setup or replace a drive too.
Does Tornova Backup encrypt my files before they leave the PC?
No. Today data is encrypted in transit and at rest in cloud storage. Client-side encryption is planned but not available.
Keep reading
JavaScript is needed to sign in, buy a plan or use the dashboard.