The 3-2-1 Backup Rule: How to Never Need Data Recovery

We recover data for a living — and we’d genuinely rather you never need us. Almost every recovery case has the same root cause: there was only one copy. The fix is a backup strategy simple enough to actually follow. It’s called the 3-2-1 rule.

The rule

3 copies of your data, on 2 different types of media, with 1 copy offsite.

That’s it. Break it down:

• 3 copies — the original plus two backups. If one copy fails, you still have two.
• 2 media types — don’t keep all copies on the same kind of device. An internal drive plus an external drive plus the cloud beats three folders on one machine. Different media fail for different reasons, so mixing them reduces the odds of losing everything at once.
• 1 offsite — at least one copy somewhere physically separate (the cloud counts). This survives theft, fire, flood, and “I spilled coffee on the laptop and the backup drive next to it.”

A simple setup that satisfies it

You don’t need enterprise gear. A common, effective combination:

1. Copy 1 — your computer. The working original.
2. Copy 2 — a local external drive, via Time Machine (Mac) or File History / a backup tool (Windows). Automatic, and fast to restore from.
3. Copy 3 — cloud backup, via Backblaze, iCloud, OneDrive, Google Drive, or similar. This is your offsite copy.

That’s three copies, two media types (local disk + cloud), one offsite (cloud). Done.

The details that make it actually work

• Automate it. A backup you have to remember is a backup you won’t have. Schedule it or use a service that runs continuously.
• Keep versions. Ransomware and corruption can quietly overwrite your files and your backup. Versioned backups (Time Machine, most cloud services) let you roll back to before the problem.
• Keep one copy offline or immutable. A backup drive that’s always plugged in can be encrypted by ransomware or fried by the same power surge as your PC. An occasionally-disconnected drive, or immutable cloud storage, survives that.
• Test your restores. An untested backup is a hope, not a plan. Every few months, actually restore a file or two and confirm it works.
• Don’t rely on RAID or a NAS alone. Redundancy is not backup — it protects against a drive dying, not against deletion, corruption, or ransomware. A NAS still needs its own backup.

What to back up first

If starting from scratch, prioritize the irreplaceable: photos and videos, documents and financial records, and anything creative or work-related you couldn’t recreate. Apps and the OS can be reinstalled; your kid’s first birthday video cannot.

The bottom line

Three copies, two media, one offsite — automated, versioned, and occasionally tested. Set it up once and a failed drive becomes a minor annoyance instead of a panicked search for a recovery lab.

And if you’re reading this after the drive already died with no backup — that’s what we’re here for. Start a recovery and we’ll get to work, no charge unless we succeed.