Configuring a NAS for External Drive Cold Storage
A NAS can centralise family photos, business documents, media libraries and backups, but a permanently connected backup drive is still exposed to electrical faults, ransomware and accidental deletion. An external disk used as a cold storage dump adds a separate copy that can be disconnected and stored away when the transfer is complete.
This arrangement suits Synology and QNAP systems, including models used in homes, small offices and remote work setups across Australia. The process is straightforward, but reliable results depend on drive preparation, backup scheduling, safe ejection and a storage location that is physically separate from the NAS.
What Cold Storage Means for a NAS
Cold storage is a backup copy kept offline for most of its life. An external USB hard drive or SSD is connected to the NAS, receives a selected backup, and is then safely ejected and unplugged. When disconnected, it cannot be encrypted by ransomware running on the NAS or reached through a compromised network account.
This is different from USB storage used as an always-available expansion volume. A permanently attached drive may provide extra capacity, but it behaves like part of the active system. It can be affected by user mistakes, malware, power surges and failures that damage the NAS itself.
For many households, a rotating pair of external drives offers a practical cold backup system. One disk can remain at home while the other is stored at a relative’s house, workplace or secure location. In Brisbane, for example, keeping a second copy away from the property can reduce the impact of flooding or severe storm damage. Sydney and Melbourne users should also consider theft, apartment fire and building-level power incidents.
Preparing the External Drive
Check the NAS manufacturer’s compatibility guidance before buying a drive. A USB 3.x enclosure with a conventional desktop hard disk is usually cost-effective for large photo collections and business archives. An SSD is faster and more resistant to movement, although its higher price per terabyte makes it less attractive for a large cold archive.
Format the disk using a filesystem supported by the NAS and suitable for the intended computer access. EXT4 or the vendor’s preferred Linux filesystem can work well when the drive will be managed exclusively by the NAS. exFAT is convenient when the disk must also be read by Windows or macOS, but support may require a licence or package on some NAS models. NTFS and HFS+ support varies, so confirm the current specifications for the exact Synology or QNAP model.
Use a clear volume label such as ColdBackup-A, and avoid placing the drive in a location where it can be confused with a working shared volume. If the data is sensitive, enable backup encryption where the software supports it, or encrypt the external volume. Store the recovery key separately from the drive. A locked filing cabinet or fire-resistant safe can help, although a safe should not be the only copy because heat, moisture and access problems remain possible.
Creating the Backup Job
Synology users can typically create a local USB backup with Hyper Backup, while QNAP users may use HBS 3, Hybrid Backup Sync. These applications can copy shared folders, selected files, applications and configuration data, depending on the model and package version. A backup job should be designed around recovery needs rather than simply copying everything visible on the NAS.
For a basic cold storage dump, select irreplaceable shared folders such as family photographs, accounting records, project files and exported device configurations. Media that can be downloaded again may have a lower priority, but personal recordings and edited video often deserve protection. Include the NAS configuration, user information and package settings if the software offers a system backup option.
Choose a versioned backup when space allows. A single mirror protects against disk failure, but it may preserve a file after it has been accidentally deleted or encrypted. Version retention can keep older copies, though it increases storage use and makes the job longer. For a simple archive, a dated folder structure can be easier to inspect manually.
Set the job to run only when the external drive is connected, or start it manually before disconnecting the disk. Disable automatic sleep interruptions that could cause a long copy to fail, and check the completion log. A successful job should report that the transfer finished and that no files were skipped because of permissions, unsupported names or insufficient capacity.
| Backup approach | Connection pattern | Main strength | Important limitation |
|---|---|---|---|
| USB cold archive | Connect, run, eject, unplug | Strong protection from online threats | Requires manual handling |
| USB mirror | Drive remains connected | Simple and convenient | Exposed to ransomware and power events |
| NAS-to-NAS backup | Scheduled over the network | Fast, automated versioning | Both systems may share the same physical risk |
| Cloud backup | Continuous or scheduled upload | Off-site geographic protection | Ongoing fees, upload limits and privacy considerations |
| Rotating external drives | Alternate two or more disks | Practical protection against local disasters | Needs a written rotation routine |
Making the Workflow Safe and Verifiable
Before starting a large transfer, connect the drive directly to the NAS rather than through an unpowered hub. Confirm that the NAS detects the correct volume and that the backup application is writing to the intended destination. Accidentally selecting a live shared folder or the wrong USB disk can create a false sense of protection.
After the job completes, inspect the log and open a sample of files from the backup. Test several file types, including photographs, documents, videos and compressed archives. A backup is useful only when it can be restored. Schedule a full test restore every few months, using a temporary folder on the NAS or a separate computer.
Use the NAS interface to eject the external drive before unplugging it. Pulling the USB cable during a write operation can corrupt the filesystem or leave the backup incomplete. Once the device disappears from the NAS, disconnect its power if applicable, cap or protect the connectors, and record the date of the backup in a simple log.
Australian conditions make storage location important. Avoid garages and sheds in Adelaide, Perth or regional areas where summer heat can become extreme, and keep disks away from humidity and dust. A cold drive stored in a stable indoor cupboard is preferable to one left in a car. For a small business, document who may access the backup under the Australian Privacy Principles if it contains customer, employee or health information.
Building a Repeatable Rotation
A cold backup works best as a routine rather than an occasional emergency measure. Label two or three drives with letters or dates, and keep one disconnected while another is being updated. After verifying the new backup, move the older drive to the alternate storage location and bring the next disk back for the following cycle.
A monthly schedule may suit a household with mostly static files, while a business producing invoices, design work or customer records may need weekly or daily online backups combined with a less frequent cold archive. A NAS snapshot is useful for quick recovery, but it should not replace an offline copy because snapshots generally remain inside the same storage system.
External drive prices and availability change across the Australian market. Comparing capacity and warranty terms at retailers such as Officeworks, JB Hi-Fi or specialist suppliers such as Scorptec can help, especially during sales. Allow for the cost of a second drive, a suitable USB enclosure and any encryption or backup software requirements rather than choosing solely on the cheapest per-terabyte price.
Safeguards for a Reliable Cold Backup
- Use at least two external drives and rotate them rather than relying on one disk.
- Keep the backup drive disconnected except during a planned transfer and verification.
- Encrypt confidential material and store recovery keys independently.
- Check backup logs, test sample files and perform a scheduled restore exercise.
- Keep one copy in a different building or suburb to reduce local disaster risk.
- Replace ageing disks before failure and record serial numbers, dates and storage locations.
A NAS cold storage dump should be simple enough to perform consistently and detailed enough to restore without guesswork. Keep a short recovery note with the backup application used, the filesystem, encryption details, retention policy and the location of the latest verified disk. If the NAS fails, that information can save considerable time.
Start by preparing a labelled external drive, selecting the essential shared folders and running one supervised backup. Verify several files, eject the disk through the NAS interface and store it in a cool, secure location. Repeat the process on a written schedule, rotate the drives, and treat every completed backup as a recoverability test rather than an assumption.