The 3-2-1 backup rule
The 3-2-1 rule is the simplest backup strategy that actually works, and it's been the standard advice of IT professionals for years because it survives the ways backups usually fail. It says: keep 3 copies of your important data, on 2 different types of storage, with 1 copy offsite. Here's what each part means and how to build it at home without making it a second job.
What the numbers mean
- 3 copies. Your original plus two backups. Why three? Because backups fail too — a backup drive can die, a cloud sync can propagate a deletion, a backup can turn out to be corrupt. Two copies means one failure away from loss; three gives you margin.
- 2 different media types. Don't keep all copies on the same kind of storage. Two external hard drives from the same batch can share the same weaknesses; a drive plus cloud storage (or a drive plus a NAS, or a drive plus archival discs) spreads the risk across different failure modes.
- 1 copy offsite. Fire, flood, theft, or a power surge through the whole house can take out everything in one room. One copy needs to live somewhere else — cloud storage, or a drive you keep at a relative's house or your office.
A practical home setup
You don't need enterprise gear. One straightforward 3-2-1 setup for a typical home PC:
- Copy 1 — your computer itself (the original).
- Copy 2 — an external USB hard drive plugged in on a schedule, or a small NAS on your home network. Use your OS's built-in backup feature or any reputable backup program; the key is that it runs automatically.
- Copy 3 — cloud backup from a reputable provider, running continuously in the background. This is your offsite copy.
That's it: original + external drive + cloud = 3 copies, on 2 media types (local drive, cloud), 1 offsite (the cloud). A second external drive that you swap with a relative every month or two is a fine no-subscription alternative to cloud for the offsite copy.
Make it automatic, then verify it
The number one reason home backups fail is that they depend on someone remembering to run them. Set the schedule once — daily or weekly for the local backup, continuous for cloud — and then do the thing almost nobody does: test a restore. Pick a random file, restore it from the backup, and confirm it opens. A backup you've never tested is a hope, not a backup. Repeat the test every few months.
Common mistakes that break 3-2-1
- "My files are in two folders on the same drive." That's one copy, not two. Same drive, same failure.
- RAID is not a backup. A mirrored array protects against one drive failing, but not against deletion, ransomware, or the whole machine being stolen. It counts as one copy.
- Sync is not backup. Cloud sync services mirror your files — delete a file locally and the sync deletes it everywhere. True backup software keeps version history, so you can recover last month's version of a file. For your offsite copy, use actual backup software, not just a sync folder.
- The always-connected backup. A backup drive that's plugged in 24/7 is exposed to the same ransomware, power surge, or accident as the original. If your second copy is a USB drive, consider unplugging it between scheduled backups — an offline copy can't be encrypted by malware.
- Encrypting without saving the key. Encrypted backups are good practice, especially offsite. An encrypted backup whose password you've lost is just a very secure way to lose your data — store the recovery key somewhere safe and separate.
What to back up (and what to skip)
Back up what's irreplaceable: documents, photos, financial records, work files, email archives, and the little configuration details you'd hate to redo. You can skip what you can reinstall: the operating system, applications, and anything re-downloadable. Most backup tools let you pick folders — point them at your user folder or documents library and you're covering nearly everything that matters. Also back up things people forget: phone photos (enable cloud photo backup), browser bookmarks, and password-manager vaults.
Start today, improve later
Don't let the perfect setup be the enemy of any setup. If you have zero backups right now, one external drive with an automatic backup scheduled tonight is an enormous improvement — that's copies 1 and 2 done. Add the offsite copy next. The rule is a target to work toward, and every step closer meaningfully reduces your risk. Your future self, staring at a clicking drive, will be very glad you started.