The 3-2-1 Backup Rule in 2026: Never Lose a File Again
Everyone backs up their data right after they lose it for the first time. The 3-2-1 rule is the decades-old standard that still works in 2026, and it is the difference between a ransomware attack being a shrug or a catastrophe. The rule: keep 3 copies of your data, on 2 different types of media, with 1 copy off-site. That is it.
The most common failure is having “a backup” that is actually just sync. iCloud or Google Drive syncing your files is not a backup, because if ransomware encrypts your files or you delete them, the sync faithfully propagates the damage. A real backup is a separate, ideally versioned, copy.
TL;DR
- 3 copies of your data, on 2 media types, with 1 off-site. Non-negotiable.
- Sync (iCloud, Drive, Dropbox) is not a backup. It propagates deletion and encryption.
- Consumer setup: local external drive (Time Machine / File History) plus an encrypted cloud backup (Backblaze or similar).
- Test a restore once. An untested backup is a hope, not a plan.
- Versioning matters: it lets you roll back before ransomware hit.
Why sync is not backup
Cloud sync mirrors your current state. If you delete a folder, it deletes everywhere. If ransomware encrypts your documents, the encrypted versions sync up and overwrite the good ones. Sync is wonderful for convenience and continuity, but it shares the fate of your live data, which is exactly what a backup must not do.
Some sync services keep limited file history (30 days on many plans), which helps. But relying on that as your only safety net is fragile. A true backup is independent and, ideally, has long retention so you can recover from damage you did not notice immediately.
The consumer 3-2-1 setup
Copy 1: your live data. The files on your laptop and phone.
Copy 2: local backup on different media. On Mac, Time Machine to an external SSD or drive. On Windows, File History or a tool like Macrium Reflect to an external drive. This is fast to restore and free aside from the drive cost (roughly 60 to 120 USD for a few terabytes).
Copy 3: off-site, encrypted cloud backup. A service like Backblaze Personal backs up your whole machine continuously for a flat fee (around 9 USD per month, unlimited). This is the copy that survives fire, theft, and ransomware. Choose a provider that offers versioning and, ideally, client-side encryption.
The table
| Layer | Tool examples | Cost | Recovers from |
|---|---|---|---|
| Local backup | Time Machine, File History, Macrium | ~60-120 USD drive | Dead drive, accidental deletion, fast restore |
| Off-site cloud backup | Backblaze, IDrive, Arq + B2 | ~9 USD/m | Fire, theft, ransomware, total loss |
| Versioning | Built into above | included | Rolling back before corruption or encryption |
Ransomware changes the priority
In 2026, ransomware is the reason backups matter most for normal people, not just businesses. Modern ransomware sits quietly, encrypts, and sometimes targets connected backups too. Two defenses: keep at least one backup offline or immutable (versioned cloud backups that the malware cannot overwrite), and never expose backup drives permanently. An external drive that is only connected during the backup window cannot be encrypted the rest of the time.
This is why “1 off-site” plus versioning is the heart of the rule. It gives you a clean copy from before the attack.
Test your restore
The step everyone skips: actually restoring a file. Once a quarter, pick a random file from your backup and restore it to a new location. Confirm it opens. A backup you have never tested is a guess. Five minutes of testing now prevents discovering at the worst moment that your backup was misconfigured for a year.
FAQ
Is iCloud or Google Drive a backup? No. They are sync services. They mirror your current files, so deletion and ransomware encryption propagate to the cloud copy. Use a dedicated backup with versioning alongside sync.
What is the cheapest real backup setup? A one-time external drive (60 to 120 USD) for local backup plus an unlimited cloud backup like Backblaze (around 9 USD per month). Together that is full 3-2-1 coverage for most households.
How do backups protect against ransomware? Keep one copy off-site and versioned so the malware cannot overwrite it, and keep local backup drives disconnected except during backups. You restore the clean version from before the attack.
How often should I back up? Continuously or daily for off-site cloud backup, and at least weekly for local. Most tools automate this. The key extra step is testing a restore once a quarter.
Affiliate disclosure
This article may contain affiliate links to backup services and drives (Backblaze, IDrive, external storage). If you buy through our link we may earn a commission at no extra cost to you. Reviews remain independent. FTC compliant.