The 3-2-1 Backup Rule, Explained (With Real Examples)
2026-03-12 ยท 6 min read
What the 3-2-1 rule means
Keep 3 copies of your data, on 2 different types of media, with 1 copy offsite (or offline). The original on your laptop counts as one copy. An external drive is a second copy on different media. A cloud or rotated drive stored elsewhere is the offsite copy.
Why three copies, not two
Two copies fail together more often than you think โ a power surge, a stolen laptop bag, or ransomware that reaches your connected backup drive. The third, offsite/offline copy is the one that survives the event that takes out the other two.
A real small-business setup
A 6-person office: files live in Microsoft 365 (copy 1), sync to a local NAS each night (copy 2, different media), and a cloud backup service keeps an offsite, versioned copy (copy 3, offline from ransomware). Total cost: under $50/month.
The part everyone skips: test the restore
A backup you have never restored is a guess. Once a quarter, restore a random file and a full folder. If you cannot, your backup is not real yet. When a backup fails and the data still matters, that is when professional data recovery earns its keep.
FAQ
What is the 3-2-1 backup rule?
Keep three copies of your data, on two different media types, with one copy stored offsite or offline. It protects against hardware failure, theft, fire and ransomware simultaneously.
Is cloud backup alone enough?
Cloud backup is a great offsite copy, but pairing it with a local copy gives faster restores and a fallback if your internet or cloud account is unavailable. The rule recommends both.
Want this set up for you?
Get a free IT & security assessment โ no payment, just a clear plan.
Get a free assessment โ