An air gapped computer is a machine with no network connection—not wireless, not wired, completely isolated from the internet and other computers

The term air gap refers to the physical and electronic separation between a computer and any network. A computer sitting in your home office with Wi-Fi turned off is not air gapped if the ethernet cable is plugged in somewhere. A computer with both Wi-Fi and ethernet disabled, in a room with no wireless signals reaching it, is air gapped. The goal is to make it impossible for data to move in or out without someone physically carrying it on a USB drive, external hard drive, or other removable media.

Air gapping is a security practice, not a computer type. Any computer—a laptop, desktop, server, or even a smartphone—can be air gapped. The isolation is the feature. It prevents malware, hackers, and data thieves from reaching the machine remotely because there is no remote path to reach it.

Key Takeaways

  • An air gapped computer has no network connection of any kind—no ethernet, no Wi-Fi, no cellular—making remote attacks impossible.
  • Data moves on and off an air gapped machine only through physical media like USB drives, which must be scanned for malware before use.
  • Air gapping is used for high-security environments: government agencies, banks, power plants, and cryptocurrency storage.
  • The trade-off is inconvenience—you cannot check email, read updates, or access cloud storage without moving files manually.
  • An air gapped computer is only as find as the person using it; inserting an infected USB drive defeats the entire purpose.

Why Organizations Use Air Gapped Computers

Air gapping removes the largest attack surface in computing: the network. A computer connected to the internet can be targeted by malware, ransomware, phishing, and remote exploits. An air gapped machine cannot be reached that way because there is no path in. This makes air gapping the strongest defense for systems that hold the most sensitive data or control critical infrastructure.

Government agencies use air gapped computers to store classified information. Banks use them for offline transaction processing and backup systems. Power plants and water utilities use them to control equipment that cannot be allowed to fail or be remotely hijacked. Cryptocurrency exchanges and hardware wallet manufacturers use air gapped machines to generate and store private keys—the digital equivalent of a vault's combination.

The cost of a breach in these environments is so high that the inconvenience of manual data transfer is worth it. A hospital cannot afford ransomware on its patient records. A power grid cannot afford malware on its control systems. For these organizations, air gapping is not optional.

How Data Moves On and Off an Air Gapped Machine

Because an air gapped computer has no network connection, all data transfer happens through removable media. A USB drive, external hard drive, or SD card is the only bridge between the air gapped machine and the outside world. Someone physically carries the drive to the air gapped computer, plugs it in, transfers the file, and carries it away.

This process introduces a new risk: the removable media itself could be infected. A USB drive that touched an infected computer can carry malware to the air gapped machine. To manage this risk, organizations use a transfer computer—a separate machine that scans all incoming USB drives for malware before they are plugged into the air gapped system. The drive is scanned, cleaned if necessary, and only then connected to the isolated machine.

The same process works in reverse. Files leaving the air gapped computer go onto a USB drive, which is scanned on the transfer computer before being used elsewhere. This two-step process—scan, then transfer—is slower than a network connection, but it prevents infected files from entering or leaving the isolated system.

The Difference Between Air Gapping and Other Security Methods

Air gapping is not the same as a firewall, antivirus software, or a virtual private network (VPN). Those tools reduce risk by filtering traffic or encrypting connections, but they still allow the computer to be networked. A firewall can be misconfigured. Antivirus software can miss a new threat. A VPN can be compromised. An air gapped computer eliminates the network entirely, so those weaknesses do not matter.

A computer behind a firewall is still connected to the internet and can be attacked if the firewall fails or is bypassed. An air gapped computer cannot be attacked remotely no matter what happens, because there is no remote path. The trade-off is that air gapping is more restrictive—you lose the convenience of the internet—while firewalls and antivirus let you stay connected.

For most people and small businesses, a firewall, antivirus, and regular updates are sufficient. Air gapping is for situations where the value of what you are protecting is so high that the inconvenience is justified.

Common Mistakes That Defeat Air Gapping

Air gapping only works if it is done correctly and consistently. The most common mistake is plugging an untrusted USB drive directly into the air gapped machine without scanning it first. A single infected drive can compromise the entire system. Another mistake is using the same USB drive for both incoming and outgoing data without cleaning it in between, which can spread malware from the outside world into the isolated machine.

A third mistake is leaving the air gapped computer in a room where wireless signals from outside can reach it. If the machine has Wi-Fi hardware installed but disabled in software, an attacker with physical access could re-enable it. True air gapping sometimes requires removing Wi-Fi and Bluetooth hardware entirely, not just turning them off.

A fourth mistake is assuming that an air gapped computer never needs updates. Malware can still spread through USB drives, and security patches still matter. An air gapped machine should receive updates through scanned USB drives on a regular schedule, even if it is less frequent than a networked computer.

Air Gapping at Home Versus in Organizations

Most home computer users do not need air gapping. The data on a personal laptop is usually not valuable enough to justify the inconvenience. However, some people use air gapped machines for specific purposes: storing cryptocurrency private keys, keeping financial records offline, or protecting sensitive documents.

If you want to air gap a home computer, the setup is straightforward: disable Wi-Fi and ethernet, remove any wireless USB adapters, and do not plug in any network cables. Use a USB drive to transfer files to and from the machine. Scan the USB drive on another computer before plugging it in. That is the entire process.

In organizations, air gapping is more formal. There are written policies about which USB drives can be used, who can access the air gapped machine, how often it is updated, and how data is transferred. The goal is to prevent mistakes and make sure the isolation is maintained consistently.

When Air Gapping Is Not Enough

Air gapping protects against remote attacks, but it does not protect against physical theft, insider threats, or social engineering. If someone steals the air gapped computer itself, the data on it is compromised. If an employee with access to the machine is bribed or coerced, they can copy the data to a USB drive and walk out with it. If someone tricks an employee into plugging in a malicious USB drive, the isolation is defeated.

Organizations that use air gapped computers also use other security measures: encryption so that stolen data cannot be read, access controls so that only authorized people can use the machine, and monitoring so that suspicious activity is detected. Air gapping is one layer of defense, not the only one.

Frequently Asked Questions

Can an air gapped computer get a virus?

Yes, through infected USB drives or other removable media. An air gapped computer is protected from remote attacks, but malware can still enter if someone plugs in an infected drive. This is why organizations scan all USB drives on a separate computer before connecting them to the air gapped system.

Is my computer air gapped if I just turn off Wi-Fi?

Not necessarily. Turning off Wi-Fi in software is not the same as removing the hardware or disabling it at the BIOS level. A determined attacker with physical access could re-enable it. True air gapping usually means removing Wi-Fi and Bluetooth hardware entirely or disabling them in the computer's firmware so they cannot be turned back on.

Can I use an air gapped computer for everyday tasks like email and web browsing?

No. An air gapped computer has no internet connection, so you cannot browse the web, check email, or use cloud services. It is designed for specific high-security tasks only. If you need internet access, the computer is not air gapped.

How do I update an air gapped computer?

You read updates on a networked computer, transfer them to a USB drive, scan the drive on another machine, and then plug it into the air gapped computer to install the updates. It is slower than automatic updates, but it keeps the machine isolated while still receiving security patches.

Do government agencies really use air gapped computers?

Yes. Agencies that handle classified information use air gapped systems to store and process sensitive data. The isolation prevents foreign governments and hackers from accessing classified material remotely. Military networks, intelligence agencies, and other government systems often use air gapping as part of their security architecture.