Quick answer
The 3-2-1 rule means you have at least three copies of your data, on two different media, one of which is off-site. This protects you from disk failure, ransomware, flood or fire. The rule does not require expensive tools: a local disk, an external disk and a cloud service you already use are enough.
How to recognize the problem
- All important files are on one disk, with no copy at all
- A copy exists, but it is on the same computer or the same external disk
- The cloud is used for sync, so errors or deletions spread everywhere
- No one in the company knows where the backups are or when they were last made
- A backup exists, but restoring data has never been tested
Most common causes
One copy in one place
If files exist only on one disk, failure of that disk means losing everything. The same applies to a copy on the same computer, because ransomware encrypts that too.
Sync is confused with backup
OneDrive and Google Drive sync changes in real time, so deletion or encryption spreads to the cloud as well. That is not an independent backup.
Copies are in the same location
An external disk next to the computer does not help in case of fire, flood or theft. The 3-2-1 rule therefore requires one copy to be off-site.
Backup is not verified
A copy that has never been tested may be incomplete or unreadable. Without a restore test you do not know whether the backup actually works.
Step-by-step fix
- 1
List what must be preserved
Make a short list: documents, photos, databases, business files, configurations. On Windows, most of it is usually in the folders
C:\Users\<name>\Documents,Pictures,DesktopandDownloads. For a company, add shared folders and application data. The goal is to know the total size, because it determines how much space you need for copies. - 2
Define three copies
The first copy is the original files on the computer. The second is a local backup on another medium, for example an external disk. The third is an off-site copy, in the cloud or on a disk you keep at another address. All three must not depend on the same device.
- 3
Use two different media
The original is on the computer's SSD or HDD, and the copy is on an external HDD or NAS device. Avoid having both the original and the copy on partitions of the same physical disk. If you have a NAS, it is a good second medium for multiple computers on the network.
- 4
Set up automatic local backup
On Windows, open
Settings > System > Storage > Advanced storage settingsand choose backup options, then enable File History with an external disk as the destination, or use another automatic backup tool. Select the external disk as the destination and leave the schedule to run on its own while the disk is connected. Manual backup gets forgotten, so automation makes the difference. - 5
Add an off-site copy
Enable cloud sync for the most important folders or use a dedicated cloud backup. For large amounts of data, it is more practical to occasionally take an external disk to another location and make a copy. It is important that the third copy is not in the same room as the original.
- 6
Enable ransomware protection
Make sure the backup disk is not permanently connected and available as a regular drive letter, because ransomware can encrypt it. If you use automatic backup to an external disk, connect the disk before the scheduled time and disconnect it afterwards, or use a cloud with versioning and the option to restore an older version. For business files, check whether the service keeps previous versions.
- 7
Test the restore
Once a month, restore a few files from the backup to a temporary folder and check that they open. The check takes a few minutes and reveals a faulty disk or a wrongly configured schedule. Write down the date of the last successful check.
- 8
Write down the plan and schedule
Determine what is copied, how often and where the copies are located. For home data, a daily local backup and cloud for the most important folders is enough. For a company, add a weekly off-site copy and a monthly restore check.
When 3-2-1 is not enough
If data must be available without interruption, consider an additional copy and how quickly you can restore the system, not just files. For companies, it is useful for one copy to be immutable or out of reach of the account used daily, because ransomware often has access to the same accounts. Also, if you have a database running non-stop, ordinary file copying can produce an inconsistent copy, so it is better to use the intended export method or the application's own backup tool. Do not forget to check whether the cloud service keeps deleted files and for how long, because that determines whether you can recover after accidental deletion.
How to prevent it
- Check that your backup is automatic, not manual
- Keep one copy off-site and off a permanently connected disk
- Test file restore once a month
- Write down where the copies are and who is responsible for checking
When to call a professional
If you have a server, a database or dozens of computers, or if backup must comply with business rules, it is better to leave setup and verification to an IT professional. The same applies if you suspect ransomware or if a copy exists but you cannot restore it.
IT infrastructure maintenance · Servers, networks, backup, security and helpdeskFAQ
Is the cloud enough for the 3-2-1 rule?
The cloud can be the third off-site copy, but it is not enough by itself. If the cloud is only sync, deletion or ransomware spreads there too, so you also need an independent local copy.
How often should I make a backup?
For home documents and photos, once a day automatically is usually enough. For business data that changes during the day, backup should be more frequent, in line with how much loss you can accept.
Does 3-2-1 apply to phones too?
Yes, the principle is the same: photos and contacts should exist on the phone, in a local copy on the computer and in a cloud service. Check that sync is enabled and that photos actually appear on another device.