Ransomware encrypts your files and demands payment. The defense is unglamorous but effective: backups attackers can't reach plus basic hygiene. Work through the checklist — your score updates live.
About This Tool
What this tool does
The Ransomware Prevention Checklist helps you protect your devices and data from ransomware — malicious software that encrypts your files and demands payment for their release. Ransomware typically arrives through phishing emails, malicious downloads, or unpatched software, and it targets home users, schools, hospitals, and businesses alike.
The checklist organizes prevention into layers: backups that survive an attack, software updates that close the entry points, email caution that stops the most common delivery method, and access controls that limit the damage if something gets through. No single step is enough; the layers work together.
It is for home users, parents, freelancers, and small-business owners. Prevention is far cheaper and more reliable than recovery — paying the ransom does not guarantee your files come back, and it funds further attacks. Work through this list before you ever need it.
How to use it
- Set up offline, versioned backups first — this is the single most important defense, because it makes the ransom demand powerless.
- Turn on automatic updates for your operating system, browser, and applications.
- Work through the email safety items: verifying senders, not opening unexpected attachments, and disabling macros in office documents.
- Review who has administrator access on each device and remove it where it is not needed.
- Enable your operating system's built-in ransomware protection features, such as controlled folder access.
- Share the key habits with everyone who uses the devices — one careless click can affect the whole network.
Defensive security tips
- Backups beat ransoms. With clean, offline backups you can wipe an infected machine and restore without paying anyone. Test your restores regularly.
- Patch promptly. Many ransomware campaigns exploit known vulnerabilities for which fixes already exist. Updates close those doors.
- Be ruthless with email attachments. Unexpected invoices, shipping notices, and "urgent" documents are classic ransomware delivery. Verify through another channel before opening.
- Use standard accounts daily. Browsing and email from a non-administrator account limits what malware can do if it runs.
- Segment your network. Keep guest devices and smart-home gadgets on a separate network so an infection cannot spread to every machine you own.
FAQs
Should I pay the ransom if I get infected?
Law enforcement agencies advise against paying. Payment does not guarantee decryption, it marks you as a willing payer for future attacks, and it funds criminal operations. Restore from backups and report the incident instead.
Can antivirus alone stop ransomware?
Antivirus helps but is not sufficient on its own — new ransomware variants regularly evade detection at first. Backups, updates, and cautious email habits are the defenses that hold up when antivirus misses.
How does ransomware usually get in?
Most commonly through phishing emails with malicious attachments or links, and through unpatched software exposed to the internet. Both entry points are addressed by this checklist.
What do I do in the first minutes of an attack?
Disconnect the device from the network immediately to stop the spread, do not turn it off if you can avoid it (memory evidence helps investigators), and do not pay. Then follow an incident response plan — see our incident response playbook guide.