Backup Basics and the 3-2-1 Rule

Devices fail. Phones fall into water, laptops get stolen, drives stop spinning, and files are deleted by mistake. None of this requires an attacker. A backup is simply a second copy of your data, kept somewhere else, so that a bad day becomes an inconvenience and not a loss.

Most people intend to start backing up and never get to it. This entry gives you a short rule to remember, a clear method to set it up, and the one check that most people skip. You can finish the setup in an evening, and a few minutes now and then keeps it healthy.

What counts as a backup

A backup is a separate copy of your data that you can restore if the original is lost or damaged. Two words in that sentence matter: separate and restore.

Many tools look like backups but are not. A synced folder, for example, keeps the same files on several devices. That is handy, but it copies mistakes too. If you delete a file or a program damages it, the change is mirrored everywhere within moments. A true backup keeps older copies, or sits apart from the thing it protects, so that one mishap cannot reach both.

A quick test: if you deleted a folder right now and noticed next week, could you get it back? If yes, you have a backup. If not, you have a copy.

The 3-2-1 rule

The 3-2-1 rule is an easy way to plan. CISA describes it as a trusted guideline:

Here is a worked example for a family that keeps photos on a laptop.

• Copy 1 is the photo folder on the laptop. This is the original.
• Copy 2 is an external hard drive in a drawer at home. It is a second copy on a separate disk.
• Copy 3 is an online storage account that holds an encrypted copy of the same folder. It is a third copy, and it is off-site by nature.

Count it against the rule: three copies, two kinds of storage (local disks and online storage), and one copy away from home. A burst pipe, a stolen laptop or a failed drive each leave at least one copy intact.

The rule scales up and down. For a business, it might mean a backup server in the office plus a second location. For a student with a thesis, it might mean a laptop, a USB stick and a cloud folder.

Decide what to back up

You do not need to copy everything. Sort your files into two groups:

1. Irreplaceable. Family photos, personal documents, tax records, creative work, notes and anything that exists nowhere else. These must be backed up.
2. Replaceable. Programs you can download again, music you can re-stream, and system files. These are optional.

Write a short list of the folders in group one. Include places people forget: the phone's photo library, a downloads folder with scanned documents, and data inside apps that may need its own export.

Set up a simple routine

Follow these steps:

1. List what matters. Use the folders from the previous section.
2. Pick two destinations. For example, an external drive and an online backup service. Both should be separate from the device you are protecting.
3. Automate it. Most systems include a backup feature that runs on a schedule. A backup that depends on you remembering will eventually stop. Daily or weekly is typical for personal files.
4. Protect the copies. Turn on encryption for backups that hold private data, so a lost drive does not expose your files. CISA advises securing backups with physical protection, encryption and offline copies. You can learn what encryption does in encryption basics.
5. Keep one copy disconnected. After the backup finishes, unplug the external drive and store it. This matters for the next reason.
6. Add a reminder. Put a monthly note in your calendar to check that backups are still running and the drive still has space.

Why an offline copy matters

Ransomware is malware that locks your files and demands payment. CISA's ransomware guide explains that many ransomware variants try to find and delete or encrypt backups they can reach. A drive that is permanently plugged in, or a network folder open to your computer, may be hit along with the original files. An offline copy, disconnected from the device, cannot be reached that way. The malware entry describes ransomware and other types in more detail.

Test a restore

A backup you have never restored is a hope, not a plan. Drives fail quietly. Settings can leave out the folder you care about. A file can copy successfully and still be damaged.

CISA advises regularly testing backups so you can restore data quickly, both fully and partially. For a home user, a small test is enough:

1. Choose three files at random from different folders.
2. Restore them from the backup to a new location on your computer.
3. Open each one and check that it is complete.
4. Note how long it took and whether anything was missing.

Repeat this every few months, and after you change devices or backup tools. If a restore fails, you have found the problem while you still have the originals.

Common mistakes

• Relying on sync alone. Sync mirrors deletions and damage. Add a copy that keeps history or is kept apart.
• Keeping the backup next to the original. A drive beside the laptop is lost in the same fire or theft. Keep one copy elsewhere.
• Never testing a restore. An untested backup may fail when you need it most.
• Leaving the backup drive always connected. Ransomware can reach connected storage. Disconnect it when the job is done.
• Skipping encryption. An unencrypted drive that is lost or stolen exposes everything on it.
• Forgetting phones and tablets. Many people's most precious photos live on a phone that is not covered by the laptop backup.
• Assuming the cloud means safe forever. An online account can be locked, closed or compromised. Treat it as one copy, not the only one.

FAQ

Is cloud storage the same as a backup?

Not by default. Some online services only sync files, while others keep older versions. Check which one yours does. Even a good online backup should count as one copy among three.

How often should I back up?

Think about how much work you could stand to redo. If losing a day of changes would hurt, back up daily, and automate it. For rarely changed files such as old photos, weekly or monthly is fine.

Do I need to back up my whole computer?

Not necessarily. Your irreplaceable files matter most. A full system image makes recovery faster, but you can rebuild the system and programs from scratch.

How long do backup drives last?

There is no fixed answer. Drives can fail without warning, so replace them on a schedule and do not rely on one drive. This is another reason for the "3" in 3-2-1.

Where can I learn the related habits?

Updates, passwords and careful clicking make a backup less likely to be needed. See why updates matter and the other entries in the Security Basics area.