How to back up your data: the 3-2-1 rule (2026)
- The benchmark for backing up your data is the 3-2-1 rule: 3 copies of the data, on 2 different media, with 1 copy off-site.
- A concrete example: the original on your PC, a copy on an external drive or a NAS, a third in the cloud.
- This strategy protects against hardware failures, accidental deletions, theft, fire and ransomware all at once.
- An offline or off-site copy is the key: ransomware cannot encrypt what it cannot reach.
How do you back up your data so you never lose everything? The benchmark method boils down to three digits: 3-2-1. Easy to remember and remarkably effective, it protects your files from failures as well as cyberattacks. Here is how to apply it at home.
The 3-2-1 rule in one sentence
The 3-2-1 rule is the foundation of a good backup strategy. It sums up as: 3 copies of your data, on 2 different types of media, with 1 copy kept off-site. Each digit answers a specific risk, and it is their combination that makes the protection solid.
Why three copies?
A single copy protects against nothing: if it disappears, you have nothing left. With three copies (the original plus two backups), the probability of losing everything at once becomes very low.
The idea is to make these backups regularly — ideally automatically — so they always reflect your recent data. A backup six months old is not worth much on the day of an incident.
Why two different media?
Keeping the copies on two distinct types of storage reduces the risk of simultaneous failure. Two hard drives of the same model, bought together, can fail at the same time. By varying the media — for example an external drive and an online service — you avoid a single technical failure taking out all your backups.
Why an off-site copy?
This is the most often neglected point, and the most important. An off-site copy (somewhere other than your home) protects against physical disasters: fire, water damage, theft. If your PC and your external drive are in the same room, a single event can destroy everything.
This remote copy also works against ransomware: ransomware cannot encrypt a backup it cannot reach, whether it is offline or stored on a separate service.
A concrete example at home
Here is a simple implementation of the 3-2-1 rule:
- Copy 1: your original files, on your computer.
- Copy 2: a backup on an external medium, a USB hard drive or a NAS.
- Copy 3: a copy in the cloud, which acts as the off-site backup.
The cloud is particularly handy for this third copy. To choose a reliable service, see our comparison of the best cloud storage.
Backup and security go hand in hand
Backing up protects against losses; you still need to limit infections upstream. Up-to-date security software reduces the risk of ransomware reaching your data before the backup even happens. On Mac as elsewhere, suitable protection remains useful: our selection of the best Mac antivirus takes stock.
In summary
To back up your data with peace of mind, remember 3-2-1: three copies, two media, one off-site. Automate the backups so they stay up to date, and always keep a copy out of reach of a disaster or an attack. That is the difference between a passing scare and an irreversible loss.
Frequently asked questions
Why isn't a single backup enough?
Because a single copy often shares the fate of the original: a fire, a theft or ransomware can hit the PC and the external drive sitting next to it. The 3-2-1 rule multiplies copies and locations so that no single incident ever wipes out everything.
Is the cloud enough as a backup?
The cloud is an excellent off-site copy, but it should not be your only backup. A hacked account, a sync that propagates a deletion or a service outage can all cause problems. It ideally complements a local copy; it does not fully replace it.
How often should you back up?
It depends on the value of your data and how often it changes. For important files that change frequently, a daily (or even automatic) backup is recommended. Automation avoids forgetting, the main cause of outdated backups.