The 3-2-1 backup rule means keeping three copies of important data, on two different types of storage, with one copy somewhere else, away from your home or office. For a phone, laptop or small office this usually means the original data, a local backup on an external drive or network storage, and an online backup with version history. The part almost everyone skips is testing that you can actually restore.
Syncing is not the same as backing up. If a file is deleted or encrypted by ransomware, sync faithfully copies the damage everywhere. A real backup keeps older versions, and at least one copy should be offline or protected so that malware on your computer cannot reach it.
What 3-2-1 means and why each number is there
The rule is old and simple, which is why it lasts. Three copies, because any single copy can fail: the original on your device plus two backups. Two types of storage, because things of the same kind tend to fail together; two external drives bought on the same day and kept in the same drawer share the same risks. One copy offsite, because fire, flood, theft or a burst pipe can destroy everything in one building.
Each number protects against a different disaster. The extra copy protects against a broken drive or a stolen laptop. The second type of storage protects against a fault or attack that affects one kind of system. The offsite copy protects against losing the whole place.
Modern threats add one more requirement: at least one copy should be immutable or offline. Ransomware encrypts every file it can reach, including backups on drives that are permanently connected. A drive you unplug after each backup, or an online backup that keeps old versions the attacker cannot delete, survives where connected copies do not.
People sometimes describe this as 3-2-1-1-0: the extra 1 for an offline or immutable copy, and the 0 for zero errors when you test a restore. You do not need to memorise the label. You need the habit.
Sync, backup and archive are different things
Many people think they have backups when they only have sync. The difference matters on the day something goes wrong.
| Type | What it does | Protects against | Does not protect against |
|---|---|---|---|
| Sync | Keeps the same files identical on several devices | Losing one device | Deletion, overwriting, ransomware, which are copied everywhere |
| Backup with versions | Keeps copies and older versions on a schedule | Device loss, deletion, many ransomware cases | Losing everything if all copies share one place or account |
| Offline or immutable backup | A copy that cannot be changed from your computer | Ransomware, malicious deletion, mistakes | Physical loss if kept in the same building |
| Archive | Long-term storage of finished data you rarely need | Running out of space, accidental edits | Anything if never checked; old media can fail silently |
Cloud drives often offer version history and a recycle bin for a limited time. Check how long yours keeps them; it is part of your safety net, but not a complete backup plan.
Backing up a phone properly
Turn on the platform's cloud backup. It saves settings, app data and often messages. Check that it actually completed recently, not just that it is switched on.
Back up photos and videos separately. Photo libraries are usually the largest and most precious data. Use the photo backup service and check that full-quality files are kept if that matters to you.
Chat apps need their own backup. Many messaging apps store history separately and require you to turn on their own backup inside the app. Without it, a new phone can mean empty chats.
Keep a second copy of irreplaceable photos. Download them to a computer or external drive from time to time. One cloud account is still one place.
Protect the cloud account. A strong password and two-factor authentication. Losing that account means losing the backup with it.
Check storage limits. When free storage fills up, backups often stop quietly. A notification you ignored may mean months without backups.
Know your authentication apps. Authenticator apps and banking apps may not transfer automatically. Check their own instructions before resetting or changing phones.
A practical setup for a small office
This setup suits an office of five to twenty people with shared files and an accounting system.
- List what really needs protecting. Accounting data, contracts, customer files, design files, email. Note where each lives today.
- Move shared work to one place. Files scattered across personal laptops are impossible to back up reliably. Use a shared drive or a cloud workspace.
- Add an automatic daily backup with versions. To network storage in the office or to an online backup service, keeping several weeks of versions.
- Create an offline or immutable copy. A rotating external drive taken home or locked away, or a cloud backup with protection against deletion.
- Back up the accounting software the vendor's way. Many accounting programs need their own backup function to produce a consistent copy. Ask the vendor.
- Give one person responsibility. Someone checks weekly that backups ran and receives the failure alerts.
- Test a restore every few months. Restore a folder and the accounting data to a spare computer and open them. Write down how long it took.
Encrypt backup drives that leave the office. A lost drive full of customer data is a security incident of its own.
The restore test: the only proof that counts
Many companies discover their backups do not work on the day they need them. The backup software showed green ticks, but it was copying an empty folder after a server was renamed, or the external drive had been full for months, or nobody knew the password for the encrypted backup.
A restore test turns assumptions into facts. Pick a date, restore real files to a different location and open them. For accounting data, ask the accountant to open the restored copy in the software. For a phone, look at what a new device would actually receive.
Time the test. If restoring the shared drive takes two days, that is how long the office would be paralysed after a disaster. Knowing this lets you decide in advance which data should come back first.
Write down the steps as you go, including passwords, locations and who to call. In a real emergency people are stressed, and a one-page restore guide is worth more than any feature of the backup tool.
Frequently asked questions
Is cloud storage enough as a backup?
Usually not on its own, especially if it is sync rather than backup. Add version history and a second copy that is not controlled by the same account.
How often should I back up?
As often as the amount of work you could afford to lose. For an office, daily automatic backups are common; for personal photos, automatic phone backup plus a periodic copy to a drive.
Do external hard drives last forever?
No. All storage eventually fails, sometimes without warning. Check backup drives regularly, replace old ones, and never keep only one copy on one drive.
Can ransomware encrypt my backups?
Yes, if they are permanently connected or reachable with the same credentials. Keep one copy offline or in a backup service that protects old versions from deletion.
How do I back up chat history when changing phones?
Open the chat app's own settings and use its backup function before switching, then follow its restore steps on the new phone. Check that the backup finished before resetting the old phone.
