How to Back Up Your Files So One Failure Doesn’t Lose Everything
Most people back up their files only after losing them once. A laptop is stolen, a drive stops spinning, a phone goes for a swim, or a wrong click deletes a folder — and suddenly years of photos, documents and work are gone. A backup is not a technical hobby. It is the only way to make one failure survivable, and the setup takes less time than recovering from a loss takes.
This guide explains the 3-2-1 rule — the simplest backup plan that actually works — what counts as a backup and what does not, and how to set it up for one laptop in an afternoon. It is general information, not IT support for a specific system. If your files are business-critical or legally sensitive, talk to a qualified IT professional about your setup.
What the 3-2-1 Rule Means
The 3-2-1 rule is the backup plan recommended in a paper by the US Cybersecurity and Infrastructure Security Agency (CISA), “Data Backup Options”. It has three parts:
- 3 — Keep 3 copies of any important file: 1 primary copy and 2 backups.
- 2 — Keep the files on 2 different media types, to protect against different types of hazards.
- 1 — Store 1 copy offsite, for example outside your home or business.
The rule is widely credited to photographer Peter Krogh, whose book on digital asset management the CISA paper cites. It survives because it is simple enough to remember and strong enough to cover the common ways files are lost: a dead drive, a stolen device, a fire or flood, and a mistake.
The logic is about separating risks. Two copies on the same drive protect against almost nothing — one failure takes both. Two copies in the same house protect against a dead drive but not against theft or a flood. The offsite copy is what saves you when the whole location is the problem.
What Counts as a Backup (and What Doesn’t)
Not everything that looks like a second copy is a backup. A backup must survive the same event that destroys the original.
Counts as a backup:
- A copy on an external drive that you disconnect after the backup finishes.
- A copy in a cloud backup service that keeps versions of your files.
- A copy on a second computer or a network drive in a different building.
Does not count:
- A second copy on the same drive. If the drive dies, both copies die with it.
- A synced folder. Cloud sync services such as OneDrive or Google Drive copy changes — including deletions — to every device. Delete a file by mistake and the deletion syncs too. A deleted file is usually recoverable from the service’s trash or recycle bin for a limited time, typically around 30 days, and then it is gone. Sync is convenient. It is not a backup.
- A file you emailed to yourself. It is a copy, but it is hard to find, easy to lose track of, and usually incomplete. It also leaves copies of your files in places you cannot control.
- A backup you never test. A backup that has never been restored is a guess, not a safety net. Testing is part of the plan, not an optional extra.
Worked Example: A Simple Setup for One Laptop
Take one person with a laptop holding about 200 GB of files — photos, documents, and a few projects. Here is what 3-2-1 looks like for them:
| Copy | Where | What it protects against |
|---|---|---|
| 1 — Primary | The laptop itself | Day-to-day use |
| 2 — Local backup | An external drive, connected once a week, then disconnected | A dead laptop drive, an accidental deletion |
| 3 — Offsite backup | A cloud backup service, running automatically | Theft, fire, flood — anything that takes the whole house |
Nothing in this setup is exotic. The external drive is an ordinary USB drive, large enough to hold everything once. The cloud copy runs in the background once it is set up. The weekly habit — plug in the drive, run the backup, unplug it — takes a few minutes. The important detail is the unplugging: a drive that stays connected is reachable by anything that reaches the laptop, including ransomware.
How to Set It Up Step by Step
1. Decide what matters. Not everything needs the same protection. Photos, personal documents, work files and anything you cannot download again go first. Installed apps and files you can re-download can wait — they are replaceable.
2. Get an external drive. It needs to hold everything you want to back up, with room to grow. A drive the same size as your laptop’s storage is a reasonable minimum; twice the size is more comfortable.
3. Turn on your operating system’s built-in backup. Windows has File History, which keeps versions of your files on an external drive. macOS has Time Machine, which does the same. Both are already installed, both back up automatically once configured, and both let you restore a single file or a whole folder. Use the one that matches your computer — there is no need to buy backup software for a basic setup.
4. Add the offsite copy. Choose a cloud backup service — not a sync folder, a service designed for backup, which keeps file versions and lets you restore from any date. Install it, point it at the same folders, and let the first backup finish. The first one is slow because it uploads everything; later ones only upload what changed.
5. Write down what you did. A short note — which drive, which service, what is backed up — matters more than it sounds. The person restoring files in a panic is usually you, months later, and you will not remember the details.
How to Test a Restore (the Step People Skip)
A backup you have never restored is unproven. Testing takes ten minutes and removes the doubt.
- Pick one ordinary file — a photo, a document — and restore it from the external drive to a different folder. Open it. Check it is complete.
- Do the same from the cloud copy: download one file and open it.
- Repeat every few months, and always after changing anything about the setup.
If a restore fails, you have found the problem on a calm day instead of discovering it on the worst day. Fix it now: check the drive, check the service, and run a fresh backup.
Limitations of the 3-2-1 Rule
The rule is a baseline, not a guarantee.
- It does not stop ransomware by itself. If every copy is always connected, one attack can reach them all. That is why the offsite copy matters and why the local drive should be disconnected between backups. An offline copy — one that is not connected to anything — is the strongest version of this idea.
- It does not protect files you never include. A backup only covers the folders you selected. Check the selection once in a while: new folders, a new photo library, or files saved to the desktop instead of the documents folder are easy to miss.
- It does not replace encryption or passwords. A backup copy is a copy of your files. If the drive is stolen or the cloud account is broken into, the files are readable unless they are encrypted. Use a strong, unique password for the cloud account and turn on two-factor authentication where it is offered.
- Old versions run out. Backup services keep old versions for a limited time. If you discover a problem months later, the version you need may already be gone. For files that matter for years, keep a separate archive copy somewhere safe.
Frequently Asked Questions
Does syncing to the cloud count as a backup?
No. Sync copies changes, including deletions, to every device. A backup keeps versions you can restore from, even after a file is deleted or changed. Use sync for access and a backup service for safety.
How often should I back up?
As often as you can afford to lose. For files that change daily, a daily automatic backup is right. For files that rarely change, weekly is enough. The cloud copy should run automatically; the local drive copy is a weekly habit.
What about photos on my phone?
Phone photos count as files too, and phones are lost more often than laptops. Turn on your phone’s backup — the built-in cloud backup for photos — and check occasionally that it is actually running. A phone that has never backed up is the most common way people lose years of photos at once.
How much storage do I need?
At least as much as the files you are backing up, on each backup copy. The external drive should hold everything once, with room to grow. The cloud service should have a plan that covers your total size. Start by checking how much space your files actually use — most people overestimate it.
What if I have nothing to back up with right now?
Start with the free option: your operating system’s built-in backup to any USB drive you already own, even a small one, covering only the most important folder. A partial backup today is worth more than a perfect setup that never happens.
Sources
- CISA / US-CERT, “Data Backup Options” (Ruggiero & Heckathorn, 2012) — the 3-2-1 rule: 3 copies, 2 media types, 1 offsite copy.
Try a Tool
Free, in your browser — no sign-up.