Google Drive is getting powerful new ransomware protection and a one-click file recovery tool

Ransomware is one of the most terrifying and destructive threats on the modern web. The idea that a malicious actor could encrypt all your important files and hold them hostage is a nightmare for both individuals and businesses. In a fantastic new update, Google is rolling out two powerful new features for Google Drive, currently in beta, designed to detect a ransomware attack and help you recover your files with ease.

How the new protection works

The new system works with a smart, two-pronged approach for users of Google Drive for desktop. First is Ransomware detection. Drive will now monitor for suspicious activity on your computer. If it detects a potential ransomware attack in progress, it will automatically pause all file syncing. This is a crucial first step, as it quarantines the threat and prevents the encrypted, malicious files from overwriting the clean versions stored in your cloud. The user and their Workspace administrator will be notified immediately.

The second part is a new, user-friendly File restoration tool. In the event of an attack, this new interface allows a user to select multiple files at once and easily restore them to a clean, unencrypted version from a specific point in time before the attack happened. This gives users a powerful way to recover their data without having to consider paying a ransom.

Who gets these new features?

This is the most important part of the announcement. The powerful new file restoration tool will be available to all Google Drive users, including those with personal Google accounts and Workspace Individual subscribers. This is a massive win for everyone.

The proactive ransomware detection feature, however, will be limited to users on specific Google Workspace business and education plans, including Business Standard/Plus and Enterprise tiers.

These new features are a fantastic and much-needed security upgrade for Google Drive. The admin controls are rolling out now, and the detection and restoration tools will begin their gradual roll-out to end-users on October 14, 2025.