Most people's backup strategy is "my files are in the cloud, so I'm covered" — which is a reasonable start, but a single backup location of any kind, cloud included, is more fragile than it feels. The 3-2-1 rule is a long-standing standard in IT for a reason: it's simple to remember and it actually closes the realistic failure scenarios.
What the rule actually means
- 3 — keep at least three total copies of your important data (the original plus two backups).
- 2 — store those copies on at least two different types of media (for example, your computer's internal drive plus an external drive — not two partitions of the same physical disk).
- 1 — keep at least one copy offsite, physically separate from where the others live.
The logic behind each number maps to a specific failure mode: multiple copies protect against a single drive failing; different media types protect against a flaw affecting an entire batch or brand of storage; an offsite copy protects against fire, theft, or flooding that could destroy everything in one physical location at once.
A realistic, affordable setup for a home user
- Copy 1: your working files, on your computer, as normal.
- Copy 2: an external drive at home, backed up automatically on a schedule using your OS's built-in tool — Time Machine on macOS, File History or a scheduled backup task on Windows.
- Copy 3: a cloud backup service, which satisfies the "offsite" requirement automatically since it's stored on servers physically elsewhere. This can be a full backup service (different from simple file-sync tools like Dropbox — check specifically whether a service is designed for complete backups or just syncing a folder) or, at minimum, your most critical documents kept in a cloud storage folder.
This setup costs the price of one external drive plus, optionally, a modest cloud storage subscription — no specialized equipment required.
The backup mistake that defeats the whole point
An external drive that stays permanently connected to your computer isn't fully doing its job — a power surge, ransomware, or theft of the whole desk setup can take out the computer and the "backup" together. Where practical, disconnect an external backup drive when it's not actively backing up, or use a cloud service (which is inherently disconnected from your local hardware) for the offsite copy specifically.
Automate it, or it won't happen
A backup plan that depends on remembering to manually copy files reliably fails eventually — not because people are careless, but because "later" always feels available until a drive fails. Set your chosen tools to run on an automatic schedule (daily is reasonable for most people) and treat backup software the way you treat antivirus software: something you configure once and then leave running in the background.
Test a restore occasionally
A backup you've never actually tried to restore from is an assumption, not a safety net — it's not uncommon for a backup process to have been silently failing for weeks before anyone notices, usually right when it's needed most. Periodically (every few months is reasonable) actually restore a file from your backup to confirm the whole chain works end to end, not just that the backup software reports "success."
This article discusses general backup strategy rather than endorsing specific paid backup services. See our Disclaimer for our editorial approach.