An information protecting apparatus includes: a storage configured to store data; a communication device configured to perform communication over a network by using first setting information; and a controller configured to control reading and writing of the data from and to the storage. The controller stores the first setting information into the storage. The controller determines whether second setting information is identical to the first setting information stored in the storage. The second setting information is acquired over the network after the first setting information is stored into the storage. The controller restricts the reading and writing of the data from and to the storage when the first setting information and the second setting information are not identical to each other.