Three copies, two kinds of storage, one off-site. What the 3-2-1 backup rule means in plain English and a setup you can finish in an afternoon.
Cloud & Security
Last updated: October 2026.
Most people only think about backups the day after they needed one. A laptop is stolen, a phone goes into a lake, a folder of client files turns out to have been deleted “weeks ago”. The 3-2-1 rule exists so that day is an inconvenience instead of a disaster.
It sounds technical, but it is really just a memorable way to answer one question: if this copy disappears, where is the next one? This guide explains the rule in plain English and shows a setup an ordinary person can finish in an afternoon.
Short answer: The 3-2-1 backup rule says to keep 3 copies of your important files, on 2 different kinds of storage, with 1 copy in another place. For most people that means: the files on your computer, a backup on an external drive at home, and a backup in a separate online backup service. Cloud sync (Google Drive, iCloud, OneDrive, Dropbox) counts as at most one of those copies, not a backup on its own.
The rule
3-2-1, explained
Each number protects you from a different kind of bad day.
The original files you work with count as copy one. Copies two and three are backups. Why two backups rather than one? Because backups fail too: an external drive dies quietly in a drawer, or a backup app stopped running months ago and nobody noticed. With two, the odds of both being broken at the moment you need them are very small.
Two copies on the same drive (say, a “Backup” folder next to the originals) protect you from nothing except your own deletion. If the drive fails, both go. Using two different kinds of storage, such as your laptop’s internal drive plus an external drive or an online service, means a single fault is unlikely to destroy both.
When the rule was written, “media” meant things like hard drives, DVDs and tape. Today most people read it as “two separate devices or services”, and that is fine.
Fire, flood and burglary do not care how many drives are on your desk. One copy needs to live somewhere else: an online backup service, a drive kept at a relative’s house or your office, or a second cloud provider. The OVHcloud fire in 2021 showed the same lesson at data centre scale: customers whose backups were in the same building lost both.
The 3-2-1 rule is usually credited to photographer Peter Krogh, who described it in The DAM Book, his guide to managing digital photo archives, in the mid-2000s. Photographers were among the first ordinary people with tens of thousands of irreplaceable digital files and no IT department. The rule spread because it is easy to remember and hard to argue with; the US government’s cybersecurity agency, CISA, recommends it by name in its Data Backup Options guide for home users and businesses.
This is the part that catches most people out. Google Drive, iCloud Drive, OneDrive and Dropbox are sync services. Their job is to make every device show the same files. That is wonderful until the change you made was a mistake.
Sync vs backup
They look similar. They are not.
What happens in each when something goes wrong
Sync services do keep some version history, within limits. Backup tools keep history by design.
So where does your cloud storage fit? It can be one of your three copies, and a very good one. It just should not be the only thing standing between you and losing your files. We explain the reasons, with real cases, in Is cloud storage safe? Real ways people lose data.
Here is a setup that works for most people with a laptop or desktop and a phone. It takes an afternoon to set up and then runs largely by itself.
You do not need to back up the whole computer to be safe. Programs can be reinstalled. What cannot be replaced is usually: photos and videos, documents and work files, anything you created yourself (writing, spreadsheets, designs, code), and records you need to keep, such as tax papers and contracts. Make sure these live in a few known folders, not scattered across the desktop.
Your working files are copy one. If you already use Google Drive, iCloud or OneDrive, that is fine: it keeps your devices in step and gives you a short trash window. Just do not count it as a backup.
Buy an external drive with comfortably more space than the files you want to protect, then switch on the backup tool built into your computer:
Leave the drive plugged in, or plug it in at least once a week. Automatic is the key word: a backup you have to remember to make will not be there when you need it.
For the off-site copy, most people should use an online backup service: an app that runs in the background and uploads copies of your files to a provider that is separate from your everyday cloud account. Look for three things: continuous or daily automatic backup, version history of at least 30 days (longer is better), and an easy way to restore a single file as well as everything.
Prefer not to pay a subscription? Use a second external drive and swap it every week or two with one kept at work or a relative’s house. It is cheaper but relies on you remembering.
Phones hold most people’s photos. Turn on your phone’s own backup (iCloud Backup on iPhone, Google One backup on Android) and your photo library sync. Then make sure photos also reach your computer or an online backup service now and then, so they are covered by the rest of your 3-2-1 setup and not only by one account.
The only backup you can trust is one you have restored from. Once a month, or at least after setting up, pick a file, delete a copy of it, and restore it from each backup. It takes five minutes and turns “I think I’m covered” into “I know I am”.
Quick check
Is your setup 3-2-1?
Answer in order. The first “no” is what to fix next.
Businesses, and anyone worried about ransomware, often extend the rule. The most common version is 3-2-1-1-0, popularised by backup software vendors: add one copy that is offline or immutable (it cannot be changed or deleted for a set period, even by someone with your password), and aim for zero errors by checking that backups actually restore. For a household, an external drive that you unplug after each backup gets you most of the “offline” benefit.
If you handle client or employer data, check what your organisation requires before putting work files into personal backup services.
Keep three copies of anything important, on two different kinds of storage, with one copy in a different place. In practice: your computer, an external drive and an online backup service.
It can count as one of your copies, but it is a sync service, not a backup. Deletions and changes sync to every device, and deleted files are usually kept for only about 30 days on personal plans. Keep at least one copy outside your main cloud account.
Yes. The tools have changed, but the risks it covers (device failure, mistakes, theft, fire, ransomware and losing access to an account) have not. Most modern variations, such as 3-2-1-1-0, build on it rather than replace it.
As often as you can afford to lose work. For most people, automatic hourly or daily backups to an external drive and continuous online backup are ideal. If you would be upset to lose a day’s work, back up at least daily.
No. Back up your personal files first: photos, documents, work files and anything you created. A full-system backup (Time Machine does this by default) is a convenience that makes restoring a new computer faster, but your own files are what matter most.
Only as a short-term extra copy. USB sticks are easy to lose, have limited space and are not designed for long-term storage. An external hard drive or SSD with an automatic backup tool is much more reliable.
New to all this? Start with The cloud is just someone else’s computer to see where your files really live, then read Is cloud storage safe? for the real ways people lose data.
Keep reading
Short, free guides that take you from zero to your first real analysis. No sign-up needed.
Join our newsletter for new data guides, tool reviews and free resources.
By subscribing you agree to our Privacy Policy and consent to receive emails from DataFume.
© 2026 DataFume. All rights reserved.
