The strongest lock on a door means nothing if there is no door at all. That is the simple, powerful idea behind air-gapping: keep the most sensitive thing completely disconnected, so a remote attacker has no path to it. Our GetMyPassword team explains what air-gapping is and where it can protect what matters most to you.
What air-gapping is
Air-gapping means keeping a device or copy of data physically isolated from the internet and other networks. There is a literal “gap of air” between it and anything online — no Wi-Fi, no cable, no connection an attacker could travel across. Because almost every remote attack needs a network path to reach you, removing that path is one of the most absolute protections there is. If it is not connected, it cannot be hacked from afar.
Why it is so effective
Most threats — phishing payloads, remote intrusions, ransomware spreading across a network — rely on being able to reach their target. An air-gapped system simply is not reachable. A hacker on the other side of the world cannot connect to a drive sitting in a drawer or a wallet that never touches the internet. The trade-off is convenience: you give up easy remote access in exchange for near-total isolation, which is why air-gapping is reserved for things that truly need it.
Where everyday people use it
- Cold crypto storage — a hardware wallet or offline device that signs transactions without exposing keys online.
- Critical backups — an offline copy of your files that ransomware cannot reach to encrypt.
- Recovery information — recovery phrases or codes kept on paper or an offline device, never in a connected note.
- Sensitive archives — documents you keep on a drive that stays unplugged from any network.
Air-gapping protects by absence: there is no connection to attack. For the few things you truly cannot afford to lose, “offline” is a feature, not an inconvenience.
What it does not solve
Air-gapping guards offline things; it does nothing for the connected accounts you use every day. Your email, bank and shopping logins live online by necessity, and isolation is not an option for them. So use air-gapping for the crown jewels — backups, recovery phrases, cold storage — and protect your everyday accounts the normal way: a unique password from our password generator for each one and two-factor authentication. The two strategies cover different ground, and together they cover it well.
Frequently asked questions
What is air-gapping?
It is keeping a device or copy of data physically isolated from the internet and other networks, with no connection an attacker could use. Because remote attacks need a network path, removing it provides very strong protection.
When should I use air-gapping?
Use it for the few things you cannot afford to lose or expose: cold crypto storage, critical offline backups that ransomware cannot reach, and recovery phrases or codes kept offline. It trades convenience for near-total isolation.
Does air-gapping protect my online accounts?
No. It protects offline devices and data, but your everyday accounts must stay online. Secure those with a unique password per account and two-factor authentication, while reserving air-gapping for backups, recovery info and cold storage.