इस पेज पर एफ़िलिएट लिंक हैं। इनसे ख़रीदने पर हमें कमीशन मिल सकता है, आपको कोई अतिरिक्त लागत नहीं।
What is the 321 backup rule?
The 321 backup rule says you should keep three copies of your data, on two different devices or media, with one copy offsite. Your original counts as the first copy. In practice, that means your device, a local drive and a cloud backup. If any one fails, two others survive.
The 321 backup idea is popular because it is easy to remember and covers almost every everyday disaster. A dead drive, a stolen laptop, a house fire and ransomware each destroy one or two copies, not all three.
| Number | Meaning | Example for a home user |
|---|---|---|
| 3 copies | Original plus two backups | Laptop files, external drive, cloud backup |
| 2 devices | Backups not on the same hardware | Laptop SSD and a USB drive |
| 1 offsite | A copy away from your home | Cloud backup service |
| +1 offline (newer) | A copy ransomware cannot reach | Drive unplugged after each backup |
| +0 errors (newer) | Restores tested and working | Quarterly restore test |
How does the 3-2-1 rule protect you?
The rule works by spreading risk. Each copy fails for different reasons, so the chance of losing all three at once is tiny. A drive failure does not affect the cloud, and a hacked cloud account does not affect the drive in your drawer.
Consider the common threats. Hardware failure hits one device. Theft and fire hit everything in one building. Ransomware hits anything connected. Account lockout hits one cloud service. Three copies on separate systems survive all four.
Why the original counts as a copy
People often think they need three backups. You need two, plus the original. Backblaze, which popularised the rule for home users, uses the example of a computer, an external drive and an online backup.
Real 321 backup setups that work
You do not need expensive hardware to follow the rule. Most people can meet it with one drive and one subscription. These are setups I recommend most often, depending on what people own.
Phone-only user
- Copy 1: photos and data on the phone
- Copy 2: iCloud or Google Photos and phone backup
- Copy 3: a monthly export to a computer or a phone backup drive
Laptop user
- Copy 1: files on the laptop
- Copy 2: Time Machine or a Windows image on an external drive
- Copy 3: a versioned cloud computer backup
Family with a NAS
- Copy 1: everyone’s devices
- Copy 2: the home NAS
- Copy 3: an encrypted NAS backup to cloud
Download our free 3-2-1 checklist and tick off each step as you go. It takes about ten minutes to read and covers phones, computers and cloud accounts.
Send me the checklistWhat is 3-2-1-1-0, and do you need it?
3-2-1-1-0 adds two rules: one copy offline or immutable, and zero errors after a restore test. It answers modern ransomware, which hunts for connected backups. For home users, an unplugged drive covers the extra “1”.
CISA’s ransomware guidance makes the same point. It recommends offline, encrypted backups and regular restore tests, because many ransomware strains try to find and delete reachable backups. Our ransomware backup guide shows how to set this up.
What 321 backup means for privacy
More copies mean more places your data lives. Each copy should be protected to the same standard. Encrypt the external drive, lock the cloud account with two-factor login and store the offsite copy with a provider you trust.
BitLocker on Windows and FileVault on macOS can encrypt external drives for free. For the cloud copy, check who holds the key. Our guide to encrypted cloud backup explains zero-knowledge options.
Common mistakes with the 3-2-1 rule
- Counting sync as a copy. A synced folder mirrors deletions, so it is not independent.
- Keeping the drive next to the computer. Fire or theft takes both.
- Leaving the drive always plugged in. Ransomware can encrypt it too.
- Never testing. Three broken copies equal zero copies. See check backup.
- Forgetting phones. The rule applies to every device, not only the computer.
The existing guide on whether you need a backup of a backup covers when extra copies are worth the cost.
How to check a provider fits your 321 plan
A cloud provider fits the offsite role if it keeps versions, supports your devices and lets you restore without the original device. Check those three points first, then price.
Start with our back up to the cloud hub, then compare options on our best cloud storage page.
Frequently asked questions
What does 321 backup stand for?
It stands for three copies of your data, on two different devices or types of media, with one copy kept offsite. The original data counts as one of the three copies. For most home users that means the device itself, a local drive and a cloud backup service.
Is cloud storage enough for the offsite copy?
Only if it keeps versions and deleted files. A plain sync folder mirrors deletions and ransomware damage. A backup service with version history, or storage with long file recovery, makes a much better offsite copy. Check the retention period before relying on it.
Do I need two different cloud services?
Not for the basic rule. One cloud service plus one local drive meets 3-2-1. A second cloud service is useful if you have no local drive or want protection against account lockout. It also adds cost, so weigh it against an encrypted external drive.
How often should each copy update?
The cloud copy should run continuously or daily. The local drive can update daily or weekly, depending on how much work you can afford to lose. Our guide on how often to back up suggests schedules for different users.
Is the 3-2-1 rule still relevant?
Yes. It remains the baseline in most backup guidance. Many experts now add one offline or immutable copy and regular restore tests, known as 3-2-1-1-0, to resist ransomware. For home users, unplugging the external drive after each backup covers most of that.
Our Start Here guide shows the three steps every setup needs, in plain English. Cannot find a guide for your phone, app or drive? Request a guide and we will write it.
Start hereSources
