Backups for Normal People: The 3-2-1 Idea
A backup you never test is a hope, not a plan. The 3-2-1 rule is the smallest habit that actually protects your files.
The rule in one line
Keep 3 copies of anything you care about, on 2 different kinds of storage, with 1 copy kept somewhere else. That off-site copy is what survives a theft, a fire or a flooded desk.
A simple home version
- The working copy on your computer or phone.
- A second copy on an external drive at home.
- A third copy off-site: a drive at a relative's house, or an encrypted cloud account.
Protect the backup account too
If your off-site copy lives in the cloud, that account guards everything. Give it a strong, unique password and two-factor authentication, and understand how its file permissions and sharing settings work so you do not expose a folder by accident.
Test a restore
Once in a while, actually pull a file back from each copy. A backup only counts when you have seen it restore.
Decide what is actually irreplaceable
Not everything needs three copies. Photos, documents and anything you have created are irreplaceable; a downloaded film is not. Sorting your files into "could never get back" and "could re-download" lets you spend backup effort where it matters and keeps the whole habit small enough to maintain.
Automate it, then check on it
A backup that depends on you remembering will eventually be forgotten. Set it to run on a schedule, whether that is a cloud sync or a drive that copies on its own. Then put one reminder in your calendar to confirm it is still running and to pull back a test file, because an automated job that silently stopped is the most dangerous kind of backup.
Encrypt the copy that leaves the house
The off-site copy is the one most likely to be lost or stolen, so it is the one worth encrypting. Most backup tools and cloud services offer this with a single setting and a password you keep safe. Done once, it means a misplaced drive or a breached account is an inconvenience rather than a leak of everything you backed up. Write that password down somewhere separate from the drive, because an encrypted backup you cannot unlock is no backup at all.
The copy you have never restored from is the one that fails when you need it. Schedule a two-minute test.
Updated 2026-11-10