Ransomware Protection Checklist

How it works

1. 1

   Prove a restore before shopping stop-rates

   Free

   Test a restore. Backups connected 24/7 to the same PC can be encrypted too. Prefer at least one offline, versioned, or immutable copy for documents you cannot lose.

   • Versioned backups for critical folders
   • At least one offline or immutable copy
   • Restore test documented in the last quarter
2. 2

   Reduce entry points

   Free

   Most ransomware arrives via phishing, exposed services, or stolen credentials. MFA on email, unique passwords, and skepticism toward unexpected invoices matter more than suite slogans.

   • MFA on email
   • Unique passwords for email and finance
   • Careful with office macros and unexpected invoices
3. 3

   Patch and least privilege

   Free

   Close known holes and stop daily work as a local admin when you can. Disable unused remote desktop exposure on home networks. Unpatched VPN appliances and old plugins are common business entry points; consumers should still keep routers and NAS firmware current.

   • OS and browser updates current
   • Daily account is not a permanent admin when avoidable
   • Unused remote access services off
4. 4

   Endpoint protection without stop-rate marketing

   Free

   Keep Defender or one paid suite enabled. On Windows, optionally review Controlled folder access. Do not invent blocks 99% of ransomware claims. Prefer one real-time product.

   • Real-time protection on
   • Controlled folder access optional review on Windows
   • Avoid dual always-on antivirus stacks
5. 5

   Incident notes before more licenses

   Free

   Write who to call, which backup to restore from, and which accounts to rotate if a PC looks encrypted. Buying another scanner without a restore plan is shelfware.

   • Name a restore owner
   • List critical accounts to rotate from a clean device
   • Skip paying if backups still do not exist
6. 6

   Product analysis: backups beat stop-rate shopping

   Optional paid

   Bitdefender and Malwarebytes published prices are shopping context only after restore-tested backups exist (Antivirus Plus from $24.99/yr first-year; Malwarebytes Windows Individual Standard from $59.99/yr, 2026-08-09). Microsoft Defender Controlled folder access remains a free Windows control. We invent no ransomware stop-rates.

   • Document a restore test first
   • Enable free Defender controls on Windows
   • Buy suites only for named leftover coverage
7. 7

   Scenario: shopping AV because of a news headline

   Free

   Pause the cart. Complete backup, patch, and MFA checklist items first. Fear headlines are not a lab score and not a purchase order.

   • Restore-test one file today
   • Patch OS and browsers
   • Revisit paid AV only if free controls are done
8. 8

   Scenario: only one PC, backups never tested

   Free

   Do not buy a suite to compensate for untested backups. Restore one file from your backup tool first. Paid AV is optional after that free resilience step, not a substitute.

   • Restore-test one document or photo today
   • Keep at least one offline or versioned copy
   • Defer suite CTAs until the restore works
9. 9

   Scenario: cloud sync mistaken for ransomware-ready backup

   Free

   Folder sync that mirrors ransomware encryption into the cloud is not a restore plan. Keep a versioned or offline copy you can restore from, then reassess paid AV. We invent no ransomware stop-rates for suite logos.

   • Confirm version history or an offline copy exists
   • Restore-test one file before suite shopping
   • Treat AV as optional after resilience, not instead of it
10. 10

    Scenario: shopping two engines after a ransomware headline

    Free

    Pick at most one paid leftover after Controlled folder access and restore tests. Bitdefender for multi-device suite seats or Malwarebytes for cleanup, not both always-on. Dual engines do not invent a stop-rate.

    • Enable free Defender ransomware controls on Windows first
    • Name one leftover job only
    • Refuse dual always-on stacks
11. 11

    Scenario: paying a ransom without a restore path

    Free

    Payment theater is outside this checklist. Focus on isolation, credential rotation, and restore-tested copies. Suite logos never replace a backup you already proved.

    • Isolate the affected device from shared drives
    • Rotate passwords from a clean device with MFA
    • Restore from a known-good copy when available
12. 12

    Final verdict

    Free

    Backups and free Windows controls first. After restore tests: Bitdefender when multi-device seats remain; Malwarebytes when cleanup is the leftover job. Overall score is not assigned. We invent no ransomware stop-rates.

    • Restore-test documented
    • Free controls enabled where available
    • One leftover job named or stay free
13. 13

    Optional paid suite after free resilience

    Optional paid

    Bitdefender fits multi-device suite leftovers after backups exist (from $24.99/yr Antivirus Plus). Malwarebytes fits cleanup after a scare (from $59.99/yr Standard). Neither replaces offline copies. Re-check checkout.

    • Backups already restore-tested
    • Seat count and leftover job named
    • Affiliate links use our own tracking only