An air-gapped computer is exactly what the name says: a machine separated from the internet by a literal gap of air. No Wi-Fi, no ethernet cable, no Bluetooth. Data gets in and out only when you physically carry it there on a USB drive — and that changes everything about what can hurt it.
Why the gap works
Nearly every digital threat — ransomware, spyware, remote hacks, silent cloud leaks — needs a network connection to reach you. Remove the connection and the entire category disappears. It's the difference between locking your door and living somewhere the burglars physically cannot go.
What belongs in an air-gapped vault
The irreplaceable things: scanned identity documents, crypto wallet seed backups, password-manager exports, family photo archives, business records. Not your everyday files — the ones whose loss or theft would be catastrophic.
You can build one for under $35
This used to be intelligence-agency territory. Today a Raspberry Pi, an SD card, and about 90 minutes gets you a fully encrypted offline vault the size of a deck of cards. The complete build — hardware list, encryption setup, safe data-transfer routine — is documented step-by-step in The Air-Gapped Architect.
Pair it with a solid backup habit — the 3-2-1 rule — and an offline vault becomes the "1 offline copy" that ransomware can never touch.