Ransomware Protection on PC: Controlled Folder Access and Backups
Ransomware is a type of malware that tries to lock up your files (photos, documents, spreadsheets) and demand payment. You can’t control everything attackers do, but you can make your PC a much harder target by combining two practical defenses:
- Controlled Folder Access (blocks untrusted apps from changing protected folders)
- Good backups (so you can restore your data if something goes wrong)
Below are simple, Windows-friendly steps that work well for everyday users.
1) Turn on Controlled Folder Access (Windows Security)
Controlled Folder Access is a Windows security feature designed to help prevent unauthorized apps from changing files in protected locations. It’s not perfect, but it can stop a lot of “silent file encryption” behavior that ransomware relies on.
How to enable it
- Open Windows Security (search for it from the Start menu).
- Select Virus & threat protection.
- Choose Ransomware protection (you may need to scroll).
- Turn on Controlled folder access.
What it protects (and what to check)
By default, Windows protects common folders like Documents, Pictures, Desktop, and more. That’s great—but it only helps if your important files are actually stored there.
- Tip: If you keep important files in a custom folder (for example, D:Work or a special project folder), consider adding it to protected folders.
If an app gets blocked
Sometimes legitimate apps (older software, custom tools, or less common programs) get blocked from saving to protected folders. If you see a notification that an app was blocked:
- First, confirm it’s an app you recognize and trust.
- Update the app if possible (newer versions are less likely to trigger blocks).
- If you’re confident it’s safe, you can allow that specific app through Controlled Folder Access.
Safety note: Only allow apps you’re sure you installed intentionally. If you’re unsure, don’t allow it—ask someone you trust or look for an official installer/source you already use.
2) Backups: the part that actually saves your files
Controlled Folder Access helps prevent damage. Backups help you recover if prevention fails (or if files are deleted, corrupted, or overwritten for any reason). A solid backup plan doesn’t have to be complicated.
A simple “two-layer” backup that works
- Layer 1: Local backup to an external drive (USB hard drive/SSD).
- Layer 2: A second copy (another drive stored separately, or a trusted cloud sync/backup you already use).
If you only do one thing: make sure you have at least one backup that isn’t always connected to your PC.
Best practice: unplug or disconnect when not backing up
Ransomware can sometimes reach connected drives and network locations. For a basic home setup, a strong habit is:
- Connect the backup drive.
- Run the backup.
- Disconnect the drive when finished.
This “offline” step is simple and surprisingly effective.
Test your backups (quick check)
Backups only help if you can restore from them. Once in a while:
- Open your backup drive and confirm recent files are present.
- Try restoring one small file to make sure the process works.
3) Extra settings that reduce risk (without getting complicated)
Keep Windows and apps updated
Many infections rely on known security holes. Keeping Windows and common apps updated reduces those opportunities.
- Use Windows Update regularly.
- Update browsers, Office apps, PDF readers, and any security software you use.
Use standard (non-admin) daily, if you can
Using an administrator account all the time can make some malware changes easier. If you’re comfortable with it, use a standard account for everyday work and only approve admin prompts when needed.
Be picky with downloads and email attachments
Most ransomware infections still start with a bad attachment, a “cracked” installer, or a fake update prompt. If something feels off, pause—closing the window is often the best move.
Quick checklist
- Turn on Controlled Folder Access.
- Add any important custom folders to protection.
- Set up regular backups (at least one that’s not always connected).
- Occasionally test a restore.
- Keep Windows and key apps updated.
If you want, tell me which Windows version you’re on (Windows 10 or 11) and whether you use an external drive or cloud storage now—I can suggest a simple backup routine that fits your setup.





