What Is the 3-2-1 Backup Rule?

The 3-2-1 backup rule is a widely accepted best practice in data protection. It states that you should maintain:

  • 3 total copies of your data
  • 2 copies stored on different types of media
  • 1 copy stored offsite (or in the cloud)

Originally coined by photographer Peter Krogh, the rule has been adopted by IT professionals and home users alike because of its simplicity and effectiveness. No single event — hardware failure, theft, ransomware, or natural disaster — can wipe out all three copies simultaneously.

Breaking Down Each Component

Three Total Copies

The original file counts as one copy. You then need two additional backups. This redundancy means that even if one backup fails or becomes corrupted, you still have another to fall back on.

Two Different Media Types

Storing all copies on the same type of media is risky. For example, two external hard drives of the same model might fail around the same time. Mixing media types — such as one external drive and one NAS (network-attached storage) device — reduces the risk of simultaneous failure.

Common media options include:

  • External HDDs or SSDs
  • NAS devices
  • USB flash drives (for smaller datasets)
  • Cloud storage services
  • Optical media (Blu-ray, for archival purposes)

One Offsite Copy

This is the most critical component. Keeping a backup at a different physical location protects against localized disasters: fire, flood, burglary. Cloud storage services like Backblaze B2, Amazon S3, or even Google Drive effectively serve as your offsite copy.

A Practical 3-2-1 Setup for Home Users

  1. Copy 1: Your live data on your laptop or desktop.
  2. Copy 2: An automatic backup to an external hard drive at home (tools like Time Machine on Mac or File History on Windows automate this).
  3. Copy 3: A cloud backup service such as Backblaze Personal Backup, iDrive, or similar — running continuously in the background.

The 3-2-1-1-0 Extension

Modern best practices have evolved the rule into 3-2-1-1-0:

  • +1: Keep one copy in immutable or air-gapped storage (ransomware cannot encrypt what it can't reach).
  • +0: Verify that backups contain zero errors — test your restores regularly.

A backup you've never tested is a backup you don't trust. Schedule a quarterly restore test to confirm your backups actually work.

Common Mistakes to Avoid

  • Relying solely on cloud sync: Services like Dropbox or iCloud are sync tools, not backup tools. Deleting a file locally often deletes it everywhere.
  • Never testing restores: Silent corruption or misconfiguration can make a backup useless when you need it most.
  • Skipping the offsite copy: Keeping both backups at home defeats the purpose if your home is affected by a disaster.

Getting Started Today

Implementing a 3-2-1 strategy doesn't require enterprise-level tools or budget. A single external drive and a cloud backup subscription costing a few dollars a month is all most home users need. Start simple, stay consistent, and your data will be protected against virtually any scenario.