How Effective Are VPS Backups at Protecting Against Ransomware?

VPS backups should keep your information safe from ransomware, however, do they really do so? I am going to explain that below.

What Are VPS Backups?​

Most VPS companies provide daily backups, automatic snapshots and offsite storage. Sounds pretty safe. However, not all backup solutions are identical - most only retain backups for a 7 - 14 day period. Therefore if the ransomware sits dormant for a few months, it can pose a major problem

Make sure that you can restore your VPS from a specific date/time because a single backup will not cut it (especially in times of panic).

Issues Not Visible To You​

The next concern I have is related to how the VPS backup relates back to the source servers. Ransomware can propagate or replicate itself into the VPS backups, which could cause your 'safe' backup to be infected. I tend to routinely check and test my backups, which may take a while, but it certainly will save me long term headaches.

Ways To Better Secure Your VPS​

If you want to ensure your VPS is protected, you can follow these recommendations:

• Store your backups offsite using another system.
• Create multiple versions of your backups so that you can restore from different points in time if necessary.
• Use backup solutions that cannot be modified by ransomware.

While it may seem like extra work at first, following these guidelines will pay off in the end. For example, I have lost important information due to a friend's VPS having limited backups available to them.

In Conclusion​

Are backups of your VPS enough to prevent ransomware attacks? Yes and no. They do help prevent ransomware attacks, however, I would not recommend relying solely on them for protection against ransomware attacks. Think of backups as your safety net—if your safety net has been well designed, built and tested, then the likelihood that you will become a victim of a ransomware attack is reduced.

Have you ever stored backups of your VPS offsite and created multiple versions of them? If not, I would highly recommend doing so for the future benefit of your information.