Three Copies, Two Media, One Offsite: The 3-2-1 Backup Rule
The 3-2-1 backup rule keeps your files safe from failure, theft and ransomware. Learn what it means and how to set it up step by step at home or work.
Sooner or later, every storage device fails, gets lost or is hit by something unexpected. A laptop can be stolen, a drive can stop spinning, a cup of coffee can find a keyboard, and ransomware can lock every file you own. A good backup plan means these events are an inconvenience and not a disaster. The simplest widely used plan is called the 3-2-1 rule.
What the 3-2-1 rule means
The rule is easy to remember:
- 3 copies of your data: the original plus two backups.
- 2 different types of storage, so one kind of failure cannot take out everything.
- 1 copy off-site, away from the place where the originals live.
The idea is to remove single points of failure. If one copy is damaged, another is probably fine. If your home or office is hit by fire, flood or theft, the off-site copy survives.
Why each part matters
| Part of the rule | What it protects against |
|---|---|
| Three copies | Accidental deletion, a corrupted file, or one backup that quietly failed. |
| Two storage types | A fault that affects one kind of media, such as a failing drive or a faulty cloud sync. |
| One off-site copy | Fire, flood, burglary and any disaster that affects the whole location. |
Sync is not backup
This is the most common misunderstanding. Folder-syncing tools keep files identical across devices. That is convenient, but if you delete a file or ransomware encrypts it, the change is copied everywhere. A real backup keeps older versions, so you can go back to how things were yesterday or last month. Look for a backup or sync service that offers version history and recovery of deleted files, and treat that feature as essential.
What to back up
Start by listing what you would be upset to lose. For most people that includes:
- Photos and videos, especially family memories that cannot be recreated.
- Documents, tax records, contracts and scans of important papers.
- Email archives and contacts, if you do not rely entirely on an online service.
- Password manager data and recovery codes.
- Work projects, source code, accounting data and customer records for a small business.
Operating systems and programs can usually be reinstalled, so focus first on personal data. Some people also keep a full system image to restore a computer faster, which is a useful extra.
Examples of a 3-2-1 setup
Here is how the rule can look in real life.
- Home user: the files on your laptop (copy 1), a regular backup to an external hard drive (copy 2, a different device), and an automatic encrypted backup to an online backup service (copy 3, off-site).
- Family with a shared network drive: files on each computer, a backup to a network storage device at home, and a second copy sent to cloud storage or to a drive that lives at a relative's house.
- Small business: the working files on a server or computers, a nightly backup to a local storage device, and an encrypted copy sent daily to a cloud backup location.
How to set it up step by step
- Take inventory. Find where your important files actually live, including phones, tablets, old drives and email.
- Choose your local backup. An external drive or network storage device works well. Many operating systems include built-in backup tools that are simple to configure.
- Choose your off-site backup. Use an online backup service, or rotate an external drive to a different location such as a relative's home or a safe deposit box.
- Automate it. Backups that depend on remembering never happen for long. Schedule them to run daily or at least weekly.
- Encrypt it. Turn on encryption for backup drives and cloud backups, and keep the password in your password manager. An unencrypted drive that is lost or stolen exposes everything on it.
- Test your restores. Pick a few files and restore them to see that it works.
Protecting backups from ransomware
Modern ransomware often looks for connected backup drives and network shares and encrypts them too. To reduce the risk:
- Keep at least one backup disconnected from the computer when it is not running. A drive in a drawer cannot be encrypted by malware.
- Use backup services with version history, so you can roll back to a clean copy.
- Where available, use immutable or write-protected backup storage that cannot be changed for a set period.
- Protect your backup accounts with strong, unique passwords and two-factor authentication.
- Keep your devices updated and be careful with email attachments.
Common mistakes
- Keeping the backup next to the computer. A fire or theft takes both. The off-site copy matters.
- Relying on one external drive. Drives wear out. One drive means one failure away from losing the backup.
- Never checking. Backup software can stop working silently. Read the status or error messages from time to time.
- Forgetting phones and tablets. Photos taken on a phone are often the most precious files, so make sure they are included.
- Losing the encryption password. If you encrypt a backup and lose the key, the data cannot be recovered. Store the password safely.
Beyond 3-2-1
Some organizations extend the rule to 3-2-1-1-0: one extra copy that is offline or immutable, and zero errors after verification. You do not need that level at home, but the idea is useful. The more important the data, the more carefully you should protect and verify your backups.
Final thoughts
The 3-2-1 rule is simple because it needs to be followed under stress. Keep three copies, on two kinds of storage, with one stored elsewhere. Automate it, encrypt it and test it. An hour of setup now can save you from losing years of work and memories later.
