The 3-2-1 backup rule explained, and how to follow it on Windows

The 3-2-1 backup rule is the simplest reliable way to make sure you never lose important files: keep three copies of your data, on two different types of storage, with one copy off-site. It has been standard advice among IT professionals for years because it's easy to remember and it covers almost every way that data actually gets lost.

This guide explains what each part of the rule means, why it works, the mistakes that quietly break it, and how to set up a 3-2-1 backup on a Windows 10 or Windows 11 PC without giving up a weekend.

What is the 3-2-1 backup rule?

The rule has three parts, and each one protects you against a different kind of failure.

3: keep three copies of your data

Three copies means your original working files plus two backups. The original counts, so if your documents live on your laptop, you need two more copies of them somewhere else.

Why two backups rather than one? Because backups fail too. External drives wear out, backup software stops running without anyone noticing, and a backup can turn out to be incomplete on the day you need it. With two independent backups, one problem doesn't leave you with nothing.

2: use two different types of storage

Your copies shouldn't all sit on the same kind of storage, because the same weakness can hit them all at once. The rule dates from a time when "media" meant hard disks, tapes and optical discs. Today a practical reading is:

• your PC's internal drive, which holds the original;
• an external USB drive or a network storage device (NAS) for a local backup;
• cloud storage run by a backup provider.

Two folders on the same drive, or two partitions on the same disk, are not two types of storage. If that drive fails, both copies go with it.

1: keep one copy off-site

At least one copy must live somewhere physically separate from the others. Fire, flood, burglary and power surges don't care how many drives you own if they're all in the same room. An off-site copy used to mean taking a tape or a drive home every Friday. For most households and small businesses today, it means an automatic cloud backup.

Why the 3-2-1 rule works

Data loss rarely comes from one dramatic event you can plan for. It comes from ordinary things: a laptop left on a train, a drive that stops working, a spreadsheet saved over by mistake, a ransomware email opened on a busy afternoon. The 3-2-1 rule works because each of those problems is covered by at least one copy it can't reach.

Notice how often the answer is "the off-site copy" or "earlier versions". A backup that only mirrors what is on your PC right now can't help when what is on your PC right now is the problem.

What counts as a copy, and what doesn't

For the rule to work, each backup has to be independent: something that happens to your original shouldn't automatically happen to the backup as well. Several common setups look like backups but fail that test.

Cloud sync folders

OneDrive, Dropbox, Google Drive and similar services are built to sync: they keep the same files on every device. That's excellent for working across devices, but when you delete or damage a file, the change syncs too. Most sync services keep deleted files and older versions for a limited time, which helps, but it's a safety net rather than a backup plan. Our guide to cloud backup vs cloud sync explains the difference in detail.

RAID and mirrored drives

RAID keeps a second disk in step with the first so that a single drive failure doesn't stop you working. It's about staying up, not about getting files back. Delete a file or let ransomware in and the mirror copies the damage instantly. A RAID array counts as one copy.

A backup drive that's always plugged in

An external drive that is permanently connected is a real backup, but it's exposed to the same power surges, theft and malware as the PC. Ransomware in particular will encrypt any drive it can reach. If your local backup stays attached, make sure your off-site copy is one that malware on the PC can't alter or delete.

Old memory sticks and emailed attachments

Copying a few files to a memory stick now and then is better than nothing, but it isn't a system. If you can't say what's on it, how old it is or whether it's complete, don't count it as one of your three copies.

How to set up a 3-2-1 backup on Windows

Here is a practical setup for a home PC or a small office. It uses tools built into Windows for the local copy and a cloud backup service for the off-site copy.

Step 1: decide what needs protecting

Start with your own data rather than Windows itself. Windows and your programs can be reinstalled; your files can't. Typically that means:

• your Documents, Desktop, Pictures, Videos and Music folders;
• email stored on the PC, such as Outlook data files (.pst);
• business data such as accounts, client files and exports from online systems;
• anything saved in unusual places, like a C:\Data folder or a second internal drive.

A quick way to check is to open each program you rely on and look at where it saves its files.

Step 2: make a local backup to an external drive

Buy an external drive with comfortably more space than the data you're protecting, so there's room for older versions. Then use one of the tools built into Windows:

• File History backs up your personal folders to an external or network drive, every hour by default, and keeps previous versions of files.
• A system image copies the whole drive, including Windows and your programs, so you can put the entire PC back after a drive failure.

Our step-by-step guide on how to back up a Windows 11 PC walks through both. The local copy is what makes restores quick: getting a few hundred gigabytes back from a drive on your desk takes far less time than downloading them.

Step 3: add an off-site cloud backup

For the off-site copy, choose a cloud backup service rather than a sync folder. Look for one that:

• runs automatically, continuously or on a schedule, without you having to remember;
• keeps earlier versions of files, and keeps deleted files for a sensible period;
• encrypts your files on your PC before they are uploaded, ideally with a key only you hold;
• protects stored backups from being changed or deleted by malware on your PC.

If you're comparing services, ask each one about those four points before you sign up, and try a restore during any free trial.

Step 4: test a restore

A backup you've never restored from is a hope, not a plan. Once both backups have run, restore a few files from each one to a different folder and open them. Try an older version of a document, and a file you deleted on purpose. Then put a reminder in your calendar to repeat the test every few months.

Step 5: keep an eye on it

Most backup failures are silent: a drive gets unplugged, a subscription lapses, a folder is moved outside the backup. Make sure your tools tell you when a backup hasn't run, and glance at the date of the last successful backup now and then.

3-2-1 for small businesses, and the 3-2-1-1-0 rule

Businesses face the same risks as home users, plus one that has grown sharply: ransomware that deliberately hunts for backups and tries to destroy them before it encrypts everything else. That has led to an extended version of the rule, often written as 3-2-1-1-0:

• 3 copies, on 2 types of storage, with 1 off-site, as before;
• 1 copy that is offline or immutable, meaning it can't be changed or deleted for a set period, even by someone who has your passwords;
• 0 errors: backups are checked and restores are tested, so you know they work.

You don't need expensive equipment to get there. A cloud backup that keeps stored copies immutable for a period, together with a local drive that is only connected while it backs up, covers the extra "1". Our guide to ransomware protection for small businesses covers the rest of the checklist.

Common 3-2-1 mistakes

• Counting sync as a backup. Deleted and encrypted files sync too.
• Keeping every copy in one building. One burst pipe or break-in can take the PC and the backup drive together.
• Backing up too rarely. A weekly backup means up to a week of work can disappear. Our guide on how often you should back up helps you choose.
• Forgetting laptops. A laptop that is rarely plugged into its backup drive needs a backup that works over the internet.
• Losing the key. If your backups are encrypted with your own password, store that password somewhere safe outside the PC, such as a password manager.
• Never testing. Your first restore shouldn't happen in the middle of an emergency.

Where EverSafe fits in a 3-2-1 plan

EverSafe is designed to be the off-site copy in a 3-2-1 setup for Windows 10 and Windows 11 PCs. It runs in the background, continuously or on a schedule, and backs up files that are open, such as Outlook data files, using Windows' Volume Shadow Copy Service. Files are encrypted with AES-256-GCM on your PC before upload, using a key derived from a password only you know, and after the first backup only the changed parts of files are sent.

It keeps version history (hourly versions for the last day, then daily versions, plus weekly and monthly versions on plans with unlimited versions). If it sees suspicious mass changes that look like ransomware, it automatically protects the last clean backup for 30 days, and stored copies are immutable for 14 days. You can see how it works on the features page or compare plans and prices.