# Overview
**Xopero ONE uses data stores to efficiently organize, manage, and secure backup data. Each data store can be configured on local or network-attached storage, cloud services, or hybrid storage solutions, allowing flexible allocation of backup targets. Administrators can monitor datastore health, available capacity, and job performance directly from the storage dashboard, providing a clear view of storage utilization and operational status.**
***
## General information
**Xopero ONE** supports [nine types of storage](https://helpcenter.xopero.com/xopero-one-en/storage/supported-storage-types), including network storage, local directories, and S3-compatible storage solutions such as **Wasabi**, **MinIO**, and **Backblaze B2**. The system allows users to define multiple datastores and assign them to any backup plan.
For example, you can use network resources as storage by connecting them to your local computer using the iSCSI protocol and then adding them as a local directory. Local S3 buckets can be integrated with **Xopero ONE** using **MinIO** to enhance functionality — this configuration provides additional benefits, such as improved security through the use of access key and secret key authentication to protect your storage resources.
The **Xopero ONE Management Service** does not interact directly with the storage system. Instead, all storage operations are handled by a designated backup agent (worker). When an operation is initiated through the **Management Service**, the request is routed to the agent, which performs the required storage tasks. The agent then writes the data directly to the selected storage without external intervention.
{% hint style="warning" %}
When configuring storage, review the default worker, which specifies the backup agent responsible for managing communication with the storage system. **The designated agent must have direct access to the storage in order to execute backup operations successfully.**
{% endhint %}
***
## Storage credentials
Most storage types require credentials (passwords or tokens) for added security. **Xopero ONE** allows you to store these credentials in the **Password Manager** — a secure and encrypted password vault integrated with the **Xopero ONE Management Service**.
The **Password Manager** allows you to store, manage, and update credentials as needed. It can be accessed through the  **Settings** menu in the **Management Service**.
***
## Immutable storage
**Xopero ONE** supports S3-compatible immutable storage as a backup location. This feature is available for certain cloud storage providers, including **AWS**, **Wasabi**, **Backblaze B2**, and **Google Cloud Storage**.
Datastores of this type allow data to be freely saved and read, but modifications and deletions are only possible once the bucket’s retention policies have been met.
{% hint style="info" %}
Learn more about immutable storage and supported storage types in [this article](https://helpcenter.xopero.com/xopero-one-en/storage/supported-storage-types).
{% endhint %}
***
## Ransomware-proof storage
Ransomware-proof storage uses immutable technology, air gapping, and encryption to ensure that stored data cannot be altered, encrypted, or deleted by unauthorized actors.
The ransomware-proof status applies to **Xopero Cloud Storage**, **Xopero Unified Protection**, and S3-compatible data stores that support Object Lock for immutability.
Key characteristics of ransomware-proof storage include:
1. Non-executable backup files — **Xopero ONE** secures data by compressing, encrypting, and storing it in non-executable formats, preventing ransomware from affecting other files within the storage.
2. Backup encryption capability — data is encrypted using the AES (Advanced Encryption Standard) algorithm, ensuring it remains unreadable if accessed by unauthorized parties. You can select the encryption level to balance backup duration and device resource usage.
{% hint style="info" %}
Learn more about the encryption and data security in [this article](https://helpcenter.xopero.com/xopero-one-en/backup-plans-and-features/encryption-and-data-security).
{% endhint %}
3. Secure access to storage — **Xopero ONE** restricts access to the credential store. Even if the source machine is compromised by ransomware, the credentials remain protected because they are stored in a separate location.
***
## Storage dashboard
The storage dashboard in the **Xopero ONE Management Service** displays all data stores added to **Xopero ONE**. It allows you to monitor and manage storage directly from the dashboard.
The available storage management options include:
* Restore data from the selected storage.
* Edit the storage name and description.
* Run storage cleanup to remove files left after deduplication.
* Remove the storage.
The storage list is displayed in a table with adjustable columns, including: storage type, name, description, location, usage, status, data sent, saved data, compression status, and immutable storage status.
{% hint style="success" %}
The enhanced storage list in the **Xopero ONE Management Service** displays the exact physical location of **Xopero Cloud Storage** in the location column, allowing administrators to quickly verify data residency.
{% endhint %}
***
## Useful links and items
{% content-ref url="supported-storage-types" %}
[supported-storage-types](https://helpcenter.xopero.com/xopero-one-en/storage/supported-storage-types)
{% endcontent-ref %}
{% content-ref url="../backup-plans-and-features/encryption-and-data-security" %}
[encryption-and-data-security](https://helpcenter.xopero.com/xopero-one-en/backup-plans-and-features/encryption-and-data-security)
{% endcontent-ref %}
{% content-ref url="xopero-cloud-storage" %}
[xopero-cloud-storage](https://helpcenter.xopero.com/xopero-one-en/storage/xopero-cloud-storage)
{% endcontent-ref %}
{% content-ref url="../management/password-manager" %}
[password-manager](https://helpcenter.xopero.com/xopero-one-en/management/password-manager)
{% endcontent-ref %}
