The 3-2-1 backup rule explained for everyday users

Hard drives fail, phones get lost, ransomware encrypts files, and everyone has deleted something by mistake. The only real protection against data loss is having copies. But not just any copy: a copy on the same drive, or on a USB stick that's always plugged in, can be lost at the same time as the original.

The 3-2-1 rule is a simple guideline, recommended by cybersecurity agencies and backup vendors alike, to prevent that.

#What the rule says

• 3 copies of your data: the original plus two backups.
• On 2 different types of storage: say, your computer's drive and an external drive.
• 1 copy off-site: in the cloud, or on a drive kept somewhere else.

The idea is that no single incident — a hardware failure, theft, fire or malware — can wipe out every copy at once.

#Syncing isn't backing up

This is the most common mix-up. Services like Google Drive, OneDrive and iCloud sync: they keep the same version of your files on all your devices. That means:

• Delete a file on your computer and it's deleted in the cloud too — usually after a spell in the recycle bin.
• If ransomware encrypts your files, the encrypted versions sync to the cloud.
• Overwrite a document by mistake and the change spreads.

Many of these services keep previous versions and a recycle bin for a while, which helps, but within limits. A real backup stores earlier states independently and isn't instantly affected by what happens to the original.

#Applying the rule at home

A practical setup for a personal computer:

For step-by-step backups on Windows, see how to back up a Windows PC. On a Mac, the built-in tool is Time Machine.

#What about your phone?

• Turn on the system backup (Google One on Android, iCloud on iPhone).
• Photos are often the most precious: as well as the cloud copy, download them to your computer now and then so they're included in its backup.
• Some apps, such as WhatsApp, have their own backup — see WhatsApp backup.

#What to back up

Most people don't need a full system image. Prioritise what's irreplaceable:

1. Personal photos and videos.
2. Documents: work, study, contracts, invoices.
3. Creative projects.
4. Data from important apps — accounts, game saves.
5. An encrypted export of your passwords, if you use a manager.

Software can be reinstalled; your photos can't.

#What makes a backup actually useful

• Automate it. Manual backups get forgotten.
• Unplug the external drive when it isn't backing up, so ransomware can't encrypt it too.
• Test restoring. Every few months, recover a couple of files from the backup. A backup you can't restore is worthless.
• Encrypt off-site copies containing sensitive data. Many services and tools offer this.
• Keep more than one version: if you only keep the latest backup and a file got corrupted three weeks ago, it's corrupted in the backup too.

#Variations

Some specialists suggest extensions such as 3-2-1-1-0: adding an immutable or offline copy that can't be modified, and zero errors when verifying restores. For home users, doing 3-2-1 properly and testing restores is already a very high level of protection.

#The bottom line

The 3-2-1 rule boils down to one sentence: no single incident should be able to take all your copies. Keep three copies, on two types of storage, with one off-site; automate them, unplug external drives, and test restoring now and then. If you need somewhere for the off-site copy, see how to choose a cloud storage service. And if you've already lost something, follow our steps to recover deleted files.