Security

3-2-1 Backup Rule

The 3-2-1 rule plans three copies of important data, using two storage types or independent devices, with one copy offsite. It is a recovery starting point.

Three copies of important files on a computer, local drive and separately located backup.

What it means

The original usually counts as one copy, leaving two backups. Diversity reduces the chance that one fault affects every copy. The precise storage interpretation varies between guidance and products; the practical goal is independence. A shared login that can delete all copies remains a common point of failure.

How this affects everyday use

A second folder on the original disk is not independent storage. Two connected disks in the same room still share local risks. Three synchronised copies can reproduce an accidental deletion unless versioning and protection are suitable.

A practical example

You keep working files on a laptop, an external backup and a separately protected remote copy. Each has a known restore route, and at least one is isolated from ordinary changes.

What to check

  • Count actual recoverable copies, including the original.
  • Identify shared disks, locations, accounts and deletion rights.
  • Check restore tests, backup age and retained older versions.

Practical next steps

  • Create the missing independent copy or separate destination.
  • Protect at least one copy from routine modification or deletion.
  • Test retrieving a file from each recovery source.

Keeping it reliable

Maintain the plan as data and devices change. Define acceptable data loss and recovery effort. More copies do not help if their keys are lost or all contain the same unnoticed corruption; independence and tested restoration matter.

Technical sources

← All glossary terms