{"id":32689,"date":"2026-10-07T18:13:02","date_gmt":"2026-10-07T16:13:02","guid":{"rendered":"https:\/\/eu.wedoback.com\/?page_id=32689"},"modified":"2026-10-07T18:37:37","modified_gmt":"2026-10-07T16:37:37","slug":"what-is-an-immutable-backup","status":"publish","type":"page","link":"https:\/\/eu.wedoback.com\/en\/guides\/backup\/what-is-an-immutable-backup\/","title":{"rendered":"What is an immutable backup?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"32689\" class=\"elementor elementor-32689 elementor-31923\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5e6df38 e-con-full wdb-g e-flex e-con e-parent\" data-id=\"5e6df38\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-0ec9763 e-con-full wdb-g-hero e-flex e-con e-parent\" data-id=\"0ec9763\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-4824b98 e-con-full wdb-g-hero-in e-flex e-con e-parent\" data-id=\"4824b98\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c69cba3 elementor-widget elementor-widget-text-editor\" data-id=\"c69cba3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-crumb\"><a href=\"\/en\/\">Home<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/\">Guides<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/backup\/\">IT backup<\/a><\/p><p class=\"wdb-g-pill\" style=\"--pill:#01adb9\">IT backup<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-91e2600 elementor-widget elementor-widget-heading\" data-id=\"91e2600\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">What is an immutable backup?<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c8ffd16 elementor-widget elementor-widget-text-editor\" data-id=\"c8ffd16\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-lead\">An immutable backup is a copy that nobody can modify or delete before a fixed period ends: not the user, not the administrator, and not an attacker who has stolen their credentials. When the period ends, the copy can expire or be renewed; until then, it remains read-only.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-775f563 elementor-widget elementor-widget-text-editor\" data-id=\"775f563\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-meta\"><span>Updated <b>October 2026<\/b><\/span><span><b>3 min<\/b> read<\/span><span><b>4<\/b> sources cited<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e0a89e8 e-con-full wdb-g-body e-flex e-con e-parent\" data-id=\"e0a89e8\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-14c3820 e-con-full wdb-g-grid e-flex e-con e-parent\" data-id=\"14c3820\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-d57872c e-con-full wdb-g-article e-flex e-con e-parent\" data-id=\"d57872c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c2282f1 elementor-widget elementor-widget-text-editor\" data-id=\"c2282f1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-key\"><h2>Key points<\/h2><ul><li>Immutability is enforced <strong>by the storage itself<\/strong>, not by a setting that the administrator could untick.<\/li><li>It protects copies against deletion by ransomware or a stolen account, but replaces neither encryption, nor antivirus software, nor restore tests.<\/li><li>Against ransomware, 30 to 90 days is a common target; for a legal obligation, the period set by the law, applied only to the documents concerned.<\/li><li>The ANSSI, France&#8217;s national cybersecurity agency, recommends keeping at least one offline copy: immutability is its logical equivalent for a copy that stays online.<\/li><\/ul><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d624d68 elementor-widget elementor-widget-text-editor\" data-id=\"d624d68\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Why immutability exists<\/h2><p>Conventional backups remain files that the backup software is able to delete. This is useful to avoid filling up storage. It is also exactly what ransomware does when it takes control of the console: delete the copies before encrypting production, leaving no choice but to pay. Immutability moves the decision: deletion is refused <strong>by the storage itself<\/strong> for N days, not by a checkbox the administrator can untick.<\/p><p>It also serves as evidence. An accounting document or a record that must be presented unaltered cannot live on a volume where any operator can rewrite the history.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-76a2dde elementor-widget elementor-widget-text-editor\" data-id=\"76a2dde\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Immutable, offline, conventional: three levels of protection<\/h2><p>The ANSSI reiterates the \u201c3-2-1\u201d rule: three copies of the data, on two different media, one of which is offline. The offline copy remains the safest defence against ransomware, because no connected account can reach it. The immutable copy plays the same role for a backup that must stay online, and therefore be quick to restore.<\/p><table><thead><tr><th><\/th><th>Conventional backup<\/th><th>Immutable backup<\/th><th>Offline copy<\/th><\/tr><\/thead><tbody><tr><td>Deletion by an administrator<\/td><td>Possible<\/td><td>Refused until expiry<\/td><td>Impossible without physical access<\/td><\/tr><tr><td>Resistance to a stolen account<\/td><td>Low<\/td><td>High<\/td><td>High<\/td><\/tr><tr><td>Restore speed<\/td><td>High<\/td><td>High<\/td><td>Slower (medium must be brought back)<\/td><\/tr><tr><td>Discipline required<\/td><td>Low<\/td><td>Low<\/td><td>Regular media rotation<\/td><\/tr><\/tbody><\/table>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0ff4028 elementor-widget elementor-widget-text-editor\" data-id=\"0ff4028\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What immutability is not<\/h2><ul><li><strong>It is not encryption.<\/strong> Encryption prevents reading without the key. It does not prevent deletion.<\/li><li><strong>It is not retention.<\/strong> Retention says \u201cwe keep 30 days\u201d. If the administrator can shorten that period or purge, it is not immutable.<\/li><li><strong>It is not antivirus software.<\/strong> Production can still be encrypted. Immutability lets you recover an earlier version.<\/li><li><strong>It is not instantaneous.<\/strong> The immutable copy is as old as the last successful backup. If the last clean copy is from the day before, you lose a day of work.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e865fee elementor-widget elementor-widget-text-editor\" data-id=\"e865fee\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>How to implement it<\/h2><p>The most widespread mechanism is called WORM: <em>write once, read many<\/em>. You write once, read as often as you like, and never overwrite. Cloud object storage and some NAS devices offer object locking. The lock must still not be liftable by the same account as production, and the period must exceed the time needed to discover the attack.<\/p><p>Three points to check before choosing a solution:<\/p><ol><li><strong>Who can lift the lock?<\/strong> In \u201ccompliance\u201d mode, nobody before expiry. In \u201cgovernance\u201d mode, a privileged account can: that account must then be protected like the rest of the backup infrastructure.<\/li><li><strong>Are actions logged?<\/strong> A refused deletion request is a valuable warning sign.<\/li><li><strong>Is the backup console isolated from production?<\/strong> The ANSSI recommends dedicated, named administration accounts, and backup servers that do not join the production directory.<\/li><\/ol><p>A tape removed from the drive and stored offsite is a physical form of immutability, provided someone really does the rotation.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b7cb258 elementor-widget elementor-widget-text-editor\" data-id=\"b7cb258\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Useful period<\/h2><p>Against ransomware: often 30 to 90 days, sometimes more if detection is slow, as an intrusion can remain unnoticed for several weeks before encryption. For a legal retention obligation: the period set by the law of your country (accounting, tax, health), to be checked with your accountant or the competent authority, applied only to the documents concerned, not to the full server image every night. Example: in France, ten years for accounting documents (Article L123-22 of the French Commercial Code). The details are in <a href=\"\/en\/guides\/backup\/immutable-backup-retention-period\/\">Immutable backup: how long should data be retained?<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1e8e8d2 elementor-widget elementor-widget-text-editor\" data-id=\"1e8e8d2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-brand\"><h2>At WeDoBack<\/h2><p>The IMMUTABLE offer is based on WORM storage. For the chosen period, up to ten years, data can be neither modified nor deleted, even if access to the console were stolen. Every action, including an attempted deletion by an administrator, is logged in a history that cannot be erased. The public price is \u20ac20 excl. VAT per 100 GB block per month, plus one agent per machine. The offer can be taken on its own or in addition to a <a href=\"\/en\/smart-offer\/\">SMART<\/a> or <a href=\"\/en\/integral-offer\/\">INTEGRAL<\/a> backup. When the period ends, simply subscribe again to start a new protection period. The encryption key stays with the client: immutability guarantees that the copy is not altered, but it does not remove the need to keep the key in order to read it.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/immutable-offer\/\">Discover the IMMUTABLE offer<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/quotation\/\">Request a quote<\/a><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-905d760 elementor-widget elementor-widget-text-editor\" data-id=\"905d760\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-faq\"><h2>Frequently asked questions<\/h2><details><summary>Can ransomware encrypt an immutable backup?<\/summary><p>No, as long as the lock period is running: the storage refuses any overwrite. However, if the ransomware encrypted production <strong>before<\/strong> the last backup, that copy contains files that are already encrypted. Hence the value of keeping several versions and being able to go back to a date before the attack.<\/p><\/details><details><summary>Can an administrator shorten the immutability period?<\/summary><p>In a true WORM \u201ccompliance\u201d mode, no: neither the administrator nor the provider can lift the lock before it expires. Some products offer a \u201cgovernance\u201d mode in which a privileged account can lift it; this mode protects against mistakes, not against an attacker who has stolen that account.<\/p><\/details><details><summary>Should all your backups be made immutable?<\/summary><p>Rarely. Immutability is reserved for data whose loss would be critical or that must be kept unaltered. The rest of the IT estate can stay on conventional backup with history, which costs less and remains more flexible.<\/p><\/details><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9fc13e8 elementor-widget elementor-widget-text-editor\" data-id=\"9fc13e8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Further reading<\/h2><div class=\"wdb-g-related\"><a href=\"\/en\/guides\/backup\/what-is-worm-storage\/\"><small>IT backup<\/small>What is WORM storage?<\/a><a href=\"\/en\/guides\/backup\/protect-backups-from-ransomware\/\"><small>IT backup<\/small>How do you protect your backups against ransomware?<\/a><a href=\"\/en\/guides\/backup\/backup-vs-archiving\/\"><small>IT backup<\/small>What is the difference between backup and archiving?<\/a><a href=\"\/en\/guides\/what-to-do-if\/ransomware-just-struck\/\"><small>What to do if\u2026<\/small>Ransomware has just struck<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c6c6abd elementor-widget elementor-widget-text-editor\" data-id=\"c6c6abd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-sources\"><h2>Sources<\/h2><p class=\"wdb-g-src-date\">Documents consulted in October 2026.<\/p><ol><li><a href=\"https:\/\/messervices.cyber.gouv.fr\/documents-guides\/anssi_fondamentaux_sauvegarde_systemes_dinformation_v1.1.pdf\" target=\"_blank\" rel=\"noopener\">Backing up information systems \u2013 The fundamentals (ANSSI-BP-100, v1.1, 27 November 2025)<\/a> \u2014 ANSSI (French agency)<\/li><li><a href=\"https:\/\/www.nomoreransom.org\/fr\/index.html\" target=\"_blank\" rel=\"noopener\">No More Ransom: advice and decryption tools<\/a> \u2014 Europol and partners<\/li><li><a href=\"https:\/\/www.legifrance.gouv.fr\/codes\/article_lc\/LEGIARTI000006219327\" target=\"_blank\" rel=\"noopener\">Article L123-22 of the French Commercial Code (retention of accounting documents)<\/a> \u2014 L\u00e9gifrance (example: France)<\/li><li><a href=\"https:\/\/www.wedoback.com\/offre-immuable\/\" target=\"_blank\" rel=\"noopener\">IMMUTABLE offer: WORM storage and prices<\/a> \u2014 WeDoBack<\/li><\/ol><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-41219d4 e-con-full wdb-g-aside e-flex e-con e-parent\" data-id=\"41219d4\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-db255c0 elementor-widget elementor-widget-text-editor\" data-id=\"db255c0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<nav class=\"wdb-g-toc\" aria-label=\"Table of contents\"><p>On this page<\/p><ol><\/ol><\/nav>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b15f6e3 elementor-widget elementor-widget-text-editor\" data-id=\"b15f6e3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-card\"><h3>Planning a backup, DRP or BCP project?<\/h3><p>More than 20 years of experience protecting business data.<\/p><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-tel\" href=\"tel:+33972507828\">+33 9 72 50 78 28<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2120c0a e-con-full wdb-g-cta e-flex e-con e-parent\" data-id=\"2120c0a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-3c3f010 e-con-full wdb-g-cta-in e-flex e-con e-parent\" data-id=\"3c3f010\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8b769a0 elementor-widget elementor-widget-text-editor\" data-id=\"8b769a0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Protect your data with WeDoBack<\/h2><p>Encrypted offsite backup, immutable storage, DRP and BCP: tell us about your servers and we will recommend the right combination.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/offers-and-prices\/\">See offers and prices<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":32686,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"Immutable backup: definition and limitations | WeDoBack","_seopress_titles_desc":"An immutable backup cannot be modified or deleted for a set period, even by an administrator. Definition, limitations and implementation.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/sites\/6\/2026\/10\/wdb-og-sauvegarde.jpg","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/sites\/6\/2026\/10\/wdb-og-sauvegarde.jpg","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":"","_members_access_role":[],"_members_access_error":""},"class_list":["post-32689","page","type-page","status-publish","hentry"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"_links":{"self":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32689","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/comments?post=32689"}],"version-history":[{"count":1,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32689\/revisions"}],"predecessor-version":[{"id":33022,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32689\/revisions\/33022"}],"up":[{"embeddable":true,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32686"}],"wp:attachment":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/media?parent=32689"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}