Google Drive’s ransomware detection and file restoration features are now rolling out to all users after a successful beta phase launched in late 2025.

This rollout enhances security for Google Drive, significantly improving its ransomware response capabilities. The public offering utilizes AI detection technology that recognizes 14 times more infections than the beta version, making it a critical addition for users managing sensitive files.

Upon detecting ransomware, Google Drive will automatically pause syncing to prevent further spread of malicious files. Users will receive immediate notifications about affected files, with additional alerts sent to connected users as needed. This proactive approach aims to safeguard data across devices, particularly in organizational settings.

In addition to real-time detection, Google Drive has introduced a file restoration feature, allowing users to revert files to previous versions, which aids in data recovery following a ransomware attack. These ransomware protection features will be enabled by default for all Google Drive users moving forward.

To access the new features, users must ensure they are on Google Drive version 114 or later. Users have the flexibility to disable these settings in the app’s Settings menu, where they can also adjust the detection level to suit their workflow.

According to Google, these enhancements reflect a commitment to improving user security and data protection. Enhanced ransomware defenses align with broader industry trends focusing on cybersecurity in cloud services.

Google Drive offers 15GB of free cloud storage to users with a Google account, making it a widely utilized storage solution across various platforms.


Featured image credit