Definition
A foundational data protection strategy that keeps your files safe: maintain 3 copies of your data across 2 different types of storage media, with at least 1 copy stored in a physically separate off-site location.
Numbers 3 and 2: Don't Put All Your Eggs in One Basket
Keeping your irreplaceable family photos or critical project files in just one place is a recipe for disaster. Hard drives crash and phones break down when you least expect it. The first number in the rule, 3, means keeping three total copies of your data, including the original. If you have only one copy, a single accident wipes out everything. With three copies, even if two fail at the same time, your files still survive.
The second number, 2, means splitting these copies across two different storage media. If your working file lives on your internal computer drive, save the second copy to an external hard drive, a USB flash drive, or a network-attached storage (NAS) device. Storing your original and backup on the same physical drive means losing both when that drive dies. Furthermore, devices from the same production batch can share manufacturing flaws and fail around the same time. Spreading your data across different media types—such as an internal SSD, an external hard drive, or cloud storage—dramatically lowers that risk.
Number 1: Finding a Safe Haven Far from Home
Even three well-maintained copies will not save your data if a house fire, flood, or burglary strikes and takes your computer and external drives all at once. The final number, 1, directs you to store at least one copy in a physically separate location.
In the past, people routinely drove backup drives to an office drawer or a relative's house. Today, cloud backup services make this seamless by automatically streaming your files to secure off-site data centers. Creating physical distance between your backups ensures that a local emergency at home or work never destroys all your data.
Leveling Up: Defending Against Ransomware
Modern threats like ransomware spread across local networks and encrypt every connected drive in sight. If an external hard drive stays permanently plugged into your PC or your cloud syncs every change instantly, malicious code can compromise your backups the second your original files get infected.
To counter this risk, cybersecurity experts recommend keeping an offline copy physically disconnected from your computer and network, or using immutable cloud backups that cannot be edited or deleted. Regular recovery drills are just as crucial. A backup strategy is not truly complete when files are merely copied; it succeeds only when you can smoothly restore everything in an emergency.
Common misconceptions
Leaving an external drive plugged into your PC with auto-backup covers the 3-2-1 rule.
This setup gives you only two copies in total, and both sit in the exact same room, failing both the '3' and the '1'. Moreover, a drive left permanently connected is vulnerable to ransomware and electrical power surges that can destroy both copies simultaneously. Keep that drive unplugged when it is not actively backing up, and maintain an off-site copy like cloud storage.
Where you meet it
Saving smartphone photos on your phone (original), an external hard drive at home (backup 1), and a cloud storage service (backup 2, off-site).
A company storing active files on an office server, copying them to an on-premise backup appliance, and replicating data to a remote data center.
In one sentence
A time-tested backup strategy: keep 3 copies of your data across 2 different storage types, with 1 copy kept off-site to safeguard against hardware failure, malware, and physical disasters.