I’ve been looking into getting a home NAS to serve as data backup and have all my media files in one place, ie: pictures, home movies, phone-recorded videos, music and so on.
I know I want to start with a four bay NAS system, running the QuTS Hero OS with a raid5, (or RAID-Z2?). However, I also want to make sure it is also running something I read about called checksums, scrubbing and whatever else needed to protect against bit rot. With all that, I want to keep the data organized by each family member, ie: myself, wife, children, my parents and so on.
Here are my questions:
Is there some kind of easy to follow guide that can help me with setting up a new NAS to allow for everything I mentioned above?
I’ve read that QuTS Hero OS is based on ZFS, but does it bit rot protection built in the same way it does raid?
I’m planning on buying a Qnap NAS that can hold four drives to start with, and I want to set up with one drive as hot swappable, which type of raid should I use? RAID-5 or RAIDZ2? Something else?
what about regularly monitoring drive health with something called S.M.A.R.T. tests? Is that part of Qnap’s OS or will I need a separate app for that?
I’ll need suggestions on setting up security such as antivirus, firewall, data encryption and so on. Will I need to find separate apps for all of that? Or does some of those come bundled in with QuTS Hero OS??
With regards to setup of data backups, protection and security, is there anything I missed?
Thank you ahead of time for all of your help people!
Not sure what you mean ? All drives will be hotswappable up to the point your max parity is reached and your RAID collapses (RAIDz can have up to one drive swapped at a time, RAIDz2 up to two drives)
Yes
No need to sacrifice resources for that, simple rule: Never ever ever expoose your NAS to WAN. No need for antivirus and malware scans on the NAS (resource waste)
@dolbyman’s answers are good. The biggest question is do you NEED QuTS. Some people feel bit rot is a real problem. QuTS has some self-healing features.
RAID5 allows you to have one drive fail. It’s what I use on both my NAS units. RAID and ZFS are two different things. ZFS is the drive format, RAID is the physical array of drives.
QNAP OS does a lot of monitoring and will alert you to issues.
As @dolbyman said - NEVER expose your NAS directly to the WAN. If there is some app that requires exposure, then do it in a container or pay $4 a month to run it on a VPS.
Backup, Backup, Backup - To another location locally as well as to the cloud. Have copies of your data in multiple places.
I would highly recommend an X86 based NAS. IMHO, get a NAS with as good a CPU as you can afford. I have 3 QNAPs. One has been upgraded to an i7. The NAS with the i7 is remarkably faster and easier to use than the other two. Only you can decide how large your budget is. But I would say away from ARM units and not buy the bottom end X86 unit.
Also, I would get as much RAM as you can afford. Don’t buy QNAP RAM. They say you need that. Bull-$*%@. You don’t. Just buy good RAM of the right speed and format from a name brand place (ie: Kingston, etc.). Don’t buy the cheap RAM.
A guide to set all this up. Yes — QNAP’s official “Beginner’s Guide: How do I get started with my QNAP NAS?” is the best starting point. It walks through choosing the OS, initializing the NAS, creating per-user private folders, and setting up PC/mobile backups — almost exactly your list: Beginner's Guide - How do I get started with my QNAP NAS? | QNAP For storage specifically, the “Storage & Snapshots Quick Start Guide for QuTS hero” covers creating your pool and volume, and scrubbing is documented in the QuTS hero manual.
Is bit-rot protection built into ZFS the same way RAID is? Essentially yes — and it’s worth correcting a common framing: ZFS isn’t just a file system sitting on top of a separate RAID layer. ZFS integrates volume management, RAID (mirror, RAID-Z1/Z2/Z3), and data integrity into one system. Every block carries a checksum that’s verified on read; when you have redundancy (which RAID-Z gives you), a block that fails its checksum is automatically repaired from a good copy — this is “self-healing.” A periodic scrub proactively walks the whole pool to find and fix silent corruption before it spreads. So checksums, scrub, and self-healing aren’t add-ons; they’re inherent to how ZFS manages your array. This is exactly what traditional ext4-plus-RAID (QTS) cannot do, and for irreplaceable family photos and home videos, it’s the single best reason to run QuTS hero.
RAID-5 or RAID-Z2 on a 4-bay? First, a small clarification of an earlier point: on a 4-bay NAS all drives are hot-swappable — the question isn’t swappability, it’s how many drives can fail before the array is lost. RAID-Z1 (the ZFS equivalent of RAID 5) tolerates one drive failure; RAID-Z2 tolerates two. For large modern drives holding data you can’t replace, I’d lean toward RAID-Z2: with high-capacity disks, rebuilds take a long time, and the window where a second drive could fail (or hit an unrecoverable read error) during that rebuild is a real risk. RAID-Z2’s second parity drive covers that. The trade-off is usable capacity — on 4 bays, RAID-Z2 gives you the equivalent of 2 drives’ space rather than 3. For precious archives, that’s usually a trade worth making. (And note: on QuTS hero you’ll be selecting RAID-Z1/Z2, not the ext4-style “RAID 5” — same idea, ZFS implementation.)
SMART monitoring — built in? Yes, fully built in. In Storage & Snapshots you can schedule SMART tests (a quick rapid test plus a periodic full test) per drive — no extra app needed. For an extra layer, DA Drive Analyzer is an optional cloud-based tool that uses AI to predict drive failures before SMART flags them; worth enabling for data you care about.
Security — what’s bundled vs. separate? Most of it is built in, no extra apps required:
Firewall: QuFirewall is available from the App Center.
Encryption: QuTS hero supports shared-folder/volume encryption — well worth enabling for sensitive family data, so the disks are useless if a drive ever leaves your house.
Access security: turn on 2-step verification (2FA) for your accounts, and use Security Center for a guided security checkup.
Antivirus: it’s worth understanding what the tools actually do. ClamAV (the antivirus app) doesn’t protect the NAS’s own OS — it scans the files stored on the NAS for malware that could infect the Windows/Mac machines those files travel to. Malware Remover is a separate tool aimed at intrusion attempts, including emergency response to 0-day campaigns and detection of known attack patterns targeting QNAP devices. Neither is real-time endpoint protection.
The single most important security measure costs nothing: never expose your NAS directly to the WAN. If you need remote access, use the built-in VPN (QVPN) rather than port-forwarding. This point from the earlier replies is 100% correct and worth repeating.
Anything you missed on backup/protection? One key mindset, which others rightly flagged: RAID is not a backup, and neither are snapshots. They protect against drive failure and let you roll back, but they live on the same machine. Aim for the 3-2-1 rule: your data on the NAS, a local backup to a second device (an external drive or another NAS via HBS 3), and an offsite/cloud copy. HBS 3 keeps versioned backups, which also protect against accidental deletion and ransomware. Two more easy wins: enable snapshots (great for instant rollback of mistakes), and put the NAS on a UPS so a power cut during a write doesn’t corrupt data — and so it shuts down cleanly.
You’re approaching this exactly the right way. Get the pool and a good backup in place first, enable snapshots, SMART, and a UPS, keep it off the open internet, and your family’s photos and videos will be in very safe hands.
An issue with that quick start guide is that under, how do I back up my computer to my NAS, it talks about QSync. The problem is that QSync is synchronisation tool NOT a backup one. You need a back tool for that - like Veeam. (Update - no longer the case with V6 of QSync)
That used to be true, but it’s worth updating — Qsync has changed.
Historically you’re right: Qsync was a synchronization tool, and sync is not backup. But as of Qsync 6.0, QNAP added a genuine file-level backup capability that’s separate from sync. It does scheduled/real-time/manual backups with multi-version restore, so you can roll a file back to an earlier point in time rather than just mirroring the current state. The official page lays this out: Qsync | One-stop file backup & sync solution | QNAP
So the current picture is roughly:
File-level backup of specific folders, with version history — Qsync 6.0 (Qsync Central on the NAS, Qsync Client on the computer). File backup shipped on the Windows client first, and the Mac client has just entered beta as well, so Mac users can now try it too.
Whole-machine / bare-metal backup of a Windows PC — HDP PC Agent, which does full system, disk backup and supports USB-boot bare-metal recovery (Windows + x86 NAS).
Whole-machine Mac backup — use HBS + Mac TimeMachine pointed at the NAS as its destination,
NAS-to-NAS / NAS-to-cloud — HBS 3, with versioning for ransomware and accidental-deletion protection.
Veeam is a perfectly good option too, but for a home user wanting per-folder backup with version history, Qsync 6.0 or HDP PC Agent now cover it natively at no extra cost.