Synology setup guide for secure home and studio storage

Quick setup overview

This Synology setup guide focuses on the decisions to make before you trust the NAS with important files: installing DSM, choosing a storage pool, creating shared folders, securing access, and setting up backups. The practical sequence is straightforward: install the drives, connect the NAS to your router or switch with Ethernet, find it with Synology Web Assistant or Synology Assistant, install DSM, create a new administrator account, build a storage pool and volume, then add user accounts and shared folders. Before moving live data onto it, enable updates, multi-factor authentication, Auto Block, notifications, and at least one separate backup destination. For more practical setup articles, browse our Installation Guides archive.

Plan the installation before you power on

A Synology NAS is easy to start, but some early choices are difficult to change once files are stored. Before you insert drives, define the role of the NAS. A home media library, a furniture design studio, a remodeling project archive, and a small office document server will not use the same folder structure, redundancy level, or remote access policy.

Start with the physical environment. Place the NAS somewhere stable, ventilated, and away from dust, paint spray, direct sunlight, and vibration. A unit used near workshops or renovation areas should not sit close to sawdust or high humidity. Use the supplied power adapter or cable, connect the NAS to the network with Ethernet, and avoid a power strip shared with heavy tools or appliances. If the files matter, plan for a UPS so the NAS can shut down cleanly during a power loss.

Drive planning matters just as much. Synology documentation notes that storage pools must use compatible drive types and that some features vary by model. In practical terms, avoid mixing HDDs and SSDs in the same storage pool, avoid mixing SATA, SAS, and NVMe drive classes, and check your exact model before assuming that M.2 SSDs can be used as a storage pool rather than cache. If you are reusing drives, confirm that all existing data is backed up elsewhere because DSM installation and storage pool creation can erase them.

• Use drives sized for at least two years of growth, not only today’s files.
• Label drive bays before a future replacement, especially on four-bay and larger units.
• Keep the NAS on the same local network as the computer you will use for setup.
• Write down the planned server name, admin username, and backup destination before starting.

Install DSM and complete first-run setup

DiskStation Manager, usually called DSM, is Synology’s browser-based operating system. After installing the drives and connecting power and Ethernet, start the NAS and locate it from a computer on the same network. Synology’s official setup path is to use Web Assistant in a browser or the Synology Assistant desktop utility. If the browser method does not find the unit, check that the computer and NAS are on the same network, the router is assigning addresses, and no VPN or firewall rule is isolating the computer.

When the setup wizard finds the NAS, connect to it and install DSM. Depending on the model and network conditions, the wizard may download the correct DSM version or ask for an installation file. Follow the prompts, then create a server name and administrator account. Use a unique username rather than relying on a default administrator name, and set a long password that is not reused anywhere else.

After DSM starts for the first time, do not begin copying files immediately. Complete the basic system settings first:

1. Open the update area and install available DSM updates that apply to your model.
2. Set the correct time zone and enable time synchronization.
3. Configure email, mobile, or push notifications for drive health, updates, login attempts, and backup results.
4. Create a second administrator account only if another trusted person needs management access.
5. If any default administrator account is enabled, disable it after confirming your new admin account works.

These steps reduce the chance that a small setup mistake becomes a larger security or recovery problem later.

Choose storage pool, RAID, and file system settings

The most important storage decision is the storage pool. Synology’s DSM storage documentation lists common RAID options such as Basic, SHR-1, SHR-2, JBOD, RAID 0, RAID 1, RAID 5, RAID 6, RAID 10, and RAID F1, but the available options depend on the model, drive count, and drive type. For many home offices and small studios, Synology Hybrid RAID is the most approachable choice because it is designed to simplify mixed-capacity drive use compared with traditional RAID. Simple does not mean automatic, though. You still need to understand the redundancy trade-off.

Setup choice	Useful when	Watch for
Single-drive Basic	You have a one-bay NAS or noncritical temporary storage.	No drive-failure redundancy. A separate backup is essential.
SHR-1 or RAID 1	You want one-drive fault tolerance on a two-bay or larger NAS.	Usable capacity is reduced because data is protected across drives.
SHR-2 or RAID 6	You have a larger NAS and want tolerance for two drive failures.	Requires more drives and gives up more raw capacity for protection.
RAID 0 or JBOD	You need maximum usable capacity for replaceable data.	Not recommended for important archives because redundancy is limited or absent.

Next choose the file system. Current DSM storage specifications describe Btrfs and ext4 as volume file system options, with model support varying. Btrfs is usually the better choice when your model supports it and you want snapshots, file self-healing features, shared-folder replication, and stronger tools for recovering from accidental changes. Synology notes that some Btrfs protection features require the data checksum option on shared folders and a supported redundant RAID configuration. Ext4 remains a straightforward option for older models, simpler workloads, or cases where Btrfs is not available.

For a project-based office, a sensible default is one main storage pool, one Btrfs volume if supported, and separate shared folders for active projects, finished archives, finance, scans, and backups from computers. Avoid creating many volumes unless you have a clear reason. Shared folders and permissions usually handle organization needs more flexibly.

Create shared folders, users, and local access

Once the volume is ready, create shared folders around work patterns rather than individual devices. A furniture or building-materials workflow might use folders such as Projects, Product photos, CAD exports, Invoices, Supplier documents, and Archive. A simple structure makes permissions easier to apply and helps ensure the right data is included in backups later.

Create individual user accounts for each person instead of sharing one login. Then create groups such as Admins, Designers, Accounting, Workshop, or Read only. Assign permissions to groups first, and use individual exceptions only when necessary. Synology’s DSM permission model gives No access priority over Read/Write and Read only, so a careless deny rule can block a user who appears to have access through another group. If someone cannot open a share, check group membership and explicit deny settings before changing unrelated network settings.

For most homes and small offices, SMB is the primary local file-sharing protocol. Synology’s SMB documentation describes access from Windows, Mac, and Linux clients that support SMB or CIFS. Enable SMB in DSM file services, then connect from Windows File Explorer or macOS Finder using the server name or local IP address. If network discovery is unreliable, map the share manually and save the credentials for the user’s own NAS account.

Do not give every user administrator rights just because it solves a permission problem. Administrator access should be reserved for system management. Everyday users should only have the shared-folder access they need to work. See also: BUILDING MATERIALS.

Security settings to enable before storing important files

A NAS is often more exposed than users expect. Even if you do not publish it to the internet, laptops, phones, browser sessions, and weak passwords can create risk. Synology’s security guidance for DSM emphasizes features such as multi-factor authentication, Auto Block, Account Protection, firewall rules, certificates, and regular updates. Enable the basics before the NAS becomes the main copy of your project files.

• Use multi-factor authentication: Require a second verification step for administrator accounts, and consider it for all users who can access sensitive files.
• Enable Auto Block and Account Protection: These features help limit repeated failed login attempts against DSM and supported services.
• Review firewall rules: Allow only the services and networks you actually use. A small office usually does not need every DSM service reachable from every network.
• Keep DSM and packages updated: Security advisories and package updates are part of NAS maintenance, not optional cleanup.
• Use HTTPS and certificates for browser access: Certificates help protect browser sessions and reduce confusion about whether users are reaching the correct device.
• Be cautious with remote access: QuickConnect can simplify access without manual port forwarding, but remote access should still be limited to users who need it. For administration, a VPN-style approach is often safer than exposing DSM management ports directly.

Security also depends on routine administration. Store the recovery codes for multi-factor authentication in a safe place, document who has administrator rights, and remove old user accounts when people leave a project or company.

Backups and recovery are part of the setup

RAID can help keep a NAS running after a drive failure, but it is not a backup. It does not protect you from accidental deletion, ransomware, theft, fire, failed updates, or a mistaken folder sync. Treat backup planning as part of the first installation, not as a task to revisit after the NAS is full.

Synology’s Hyper Backup documentation describes destinations including local shared folders, external storage devices, cloud services, file servers, and another Synology system. A practical small-office plan is to combine at least two layers: a fast local backup or snapshot for quick recovery, and a separate off-device backup for disaster recovery. If your NAS supports Btrfs snapshots, use them for version recovery, but still maintain a backup that is not permanently writable from the same user account.

A basic recovery plan should answer four questions:

1. Which folders are critical?
2. How often do they change?
3. How far back do you need to restore previous versions?
4. Where is the backup if the NAS, office, or account is compromised?

After creating a backup task, test a restore with a small folder. A backup that has never been restored is only an assumption. Schedule regular reports, review failed jobs, and update the backup plan when you add new shared folders or packages.

Common first-run mistakes and fixes

Problem	Likely cause	Practical fix
The setup page cannot find the NAS.	The computer is on a different network, a VPN is active, or the router has not assigned an address.	Connect the computer to the same router or switch, disable the VPN temporarily, and try Web Assistant or Synology Assistant again.
Usable capacity is lower than expected.	Redundancy, file system overhead, and drive-size math reduce raw capacity.	Check Storage Manager and compare the selected RAID type with your capacity and fault-tolerance goals.
A user can see a folder but cannot edit files.	Read-only permission, inherited ACL settings, or a group conflict.	Check shared-folder permissions, group membership, and explicit No access rules before changing SMB settings.
Remote access works, but local access is confusing.	The setup focused on QuickConnect before local shares were mapped.	Finish SMB setup, map local shares by server name or IP address, and document the connection method for each user.
The NAS feels ready, but there is no recovery plan.	RAID was mistaken for backup.	Create a Hyper Backup task, add an off-device destination, and test a restore before storing irreplaceable files.

Frequently asked questions

Can I set up a Synology NAS without advanced networking knowledge?

Yes. Basic setup is designed for browser-based installation on a local network. The main networking tasks are connecting Ethernet, finding the NAS, naming it, and enabling local file sharing. More advanced steps, such as firewall rules, VPN access, static addressing, and remote access, can be configured after DSM is installed.

Should I choose Btrfs or ext4 on a new Synology NAS?

If your model supports Btrfs, it is usually the more flexible choice for important files because it supports features such as snapshots and file integrity tools. Ext4 can still be appropriate on older models or simple setups where Btrfs is unavailable. Always check your exact NAS model before deciding.

Is QuickConnect required for normal use?

No. QuickConnect is mainly for remote access through Synology-supported services without manual port forwarding. If everyone uses the NAS only inside the home or office, local SMB access may be enough. If you enable remote access, combine it with strong passwords, multi-factor authentication, updates, and careful permission settings.

How many shared folders should I create at the start?

Create only the folders you can clearly manage. For a small office or studio, five to eight well-named shared folders are often easier than dozens of narrow folders. Use subfolders for project organization and shared-folder permissions for major access boundaries.

Do I still need backups if my NAS uses SHR or RAID?

Yes. SHR and RAID can help with drive failure, but they do not replace backups. You still need a separate copy that can recover deleted, corrupted, encrypted, or accidentally overwritten files. A good setup includes at least one off-device backup and a tested restore process.