The 3-2-1 backup strategy is an important technical concept which ensures that any backed-up data remains safe, available and accessible in the case it is required for recovery purposes in the future.
By making multiple copies of any backed-up data and storing these copies across different storage media, the risk of losing such data will automatically become much lower. Taking advantage of off-site storage facilities, be this a second physical location for a hard drive or a cloud storage provider can help to fully implement the 3-2-1 backup rule and further protect any valuable data.
The truth is, whilst making any kind of backup is better than nothing, storing backed-up data in an unoptimized fashion can massively reduce the good points of making backups and still leave data vulnerable to loss. Following the 3-2-1 backup rule helps to ensure data is protected by being stored in multiple different locations and across multiple different media. Time to find out more about this backup strategy and how best to implement it as a regular PC user – vamos.
- Disk image backups
- Cloud backup support
- Zero-knowledge encryption
- Bootable recovery media
Implementing the 3-2-1 Backup Strategy
There are numerous variations in which the 3-2-1 backup strategy could be effectively implemented. Popular implementations include making use of multi-purpose backup software titles which support making backups stored both locally and on third-party cloud storage services alongside the use of network attached storage devices (NAS devices) which can also store data locally whilst automatically synchronising with the cloud.
Utilising all-purpose backup software
Possibly one of the easiest ways of implementing the 3-2-1 backup rule, multi-purpose backup software can be configured to simultaneously copy any important data both to locally attached storage alongside making secondary copies upon third-party cloud storage. This approach has the advantage of being easy to set up and is usually very cost effective given such backup software is readily available for under $50 and cloud storage is continuing to become cheaper over time.
Top 5 Free Backup Software Choices:
Below is a quick look at the top 5 backup software solutions as reviewed on this website. Check out my guide to the best free backup software for the full list of free backup software titles.
| Provider | Solution | Upgrades | Website | |
|---|---|---|---|---|
| 1 |  | ToDo Backup Free | Home edition from $39.95 / year | |
| 2 |  | BackUp Maker | Business use licence @ $39.90 | |
| 3 |  | Backupper Standard | Pro edition from $39.95 / year | |
| 4 |  | Backup FREE | Backup Pro 26 from $18 | |
| 5 |  | ShadowMaker Free | ShadowMaker Pro from $3 / month |
Popular backup software including Ashampoo’s Backup Pro line, Acronis True Image, EaseUS ToDo Backup and Arq Backup (amongst many others reviewed on this very website) can make for a great place to start. Simply create a new backup set which stores any backed-up data to a locally attached storage device (such as an external hard drive) and then, within the same software, make a secondary backup set which stores the same data to a supported cloud storage provider.
NB – The case could be reasonably made that using two separate pieces of backup software for both the local and cloud sets can help to further protect such data. This is due to the risks associated with the software itself potentially resulting in a corrupt backup file or becoming defunct meaning no suitable tools exist for reading the data file when it is needed for recovery.
Utilising network attached storage devices (NAS)
Whilst the use of multi-purpose backup software can be ideal for anyone working on a single PC, backing-up data which is stored across multiple PCs and potentially across multiple locations could become more challenging. Such circumstances might commonly be found in small businesses whereby users work across multiple devices and potentially multiple sites, all of whom utilise important data which needs to be backed up.
Making backups from multiple PCs to a centralised NAS device can often form one of the best methods in such circumstances. This approach ensures that multiple PCs can easily be protected by a single storage device (without the need to keep moving said device between different PCs) and the NAS device itself then being backed-up to an off-site location thus providing an additional layer of protection.
Furthermore, when using a modern, high-specification NAS device from manufacturers such as Synology and QNAP, such devices can be configured to automatically back themselves up to the cloud using well-known providers including AWS S3 and Backblaze B2. This means even if certain PCs are turned off, the data which is stored on the NAS device (devices which are usually running 24/7) will still be protected and continuously backed up to the cloud (meaning a second copy of the data will be stored locally and a third kept off-site).
Evolving the 3-2-1 Strategy (The Modern 3-2-1-1-0 Rule)
While the classic 3-2-1 backup strategy has been the gold standard for data protection for decades, the many cyber security related threats facing PC users and small businesses have changed dramatically. The rise of sophisticated ransomware which is capable of seeking out, encrypting and deleting locally attached backup drives means that simply having copies of your data stored locally may no longer be enough.
To combat these modern threats, data security experts have evolved the classic 3-2-1 method into what is commonly known as the 3-2-1-1-0 backup rule. This updated strategy retains the core foundation of the original rule, adding two crucial new steps to ensure the enhanced resilience of any backed-up files.
In addition to the regular 3-2-1 rule, we now see two new steps added:
The additional “1” - Keeping an offline or immutable copy
The additional “1” in the 3-2-1-1-0 rule stands for keeping at least one copy of the backed-up data entirely offline (or stored within a service which offers true immutable storage such as AWS S3). In practice, this means ensuring that once a backup is made, it cannot be modified, overwritten or deleted by any malicious software which might have infected a PC being backed up.
For a regular PC user, this immutability can effectively be achieved by manually unplugging an external backup drive as soon as the backup process is finished. Alternatively, if you are backing up to a cloud storage service, you can look for providers that support “object locking” or “immutability”—a feature which prevents anyone (including hackers) from altering or deleting the backup files for a specified number of days.
The additional “0” - Ensuring zero errors with regular testing
The additional “0” in the 3-2-1-1-0 strategy stands for zero errors during the recovery process. The truth is, a backup is only as good as the restore process which it facilitates. Discovering that a backup file is corrupt or unreadable at the moment when data loss occurs is the nightmare scenario which could lead to permanent data loss.
Achieving “zero errors” from a backup set means committing to testing and verifying such backup sets on a regular basis. Rather than simply assuming that backup software is doing its job behind the scenes, the practice of periodically attempting to restore some (or all) of the backed-up files for real is one of the most effective means of ensuring everything is working.
Performing such restore testing even once or twice a year ensures that data is genuinely recoverable thus giving absolute peace of mind that any backup systems are working as intended.
NB – Many modern, multi-purpose backup tools include built-in verification features that automatically check the integrity of backup files immediately after they are created. While turning this feature on is highly recommended and adds a layer of automated safety, it should still be combined with occasional manual restore tests to fully satisfy the “zero errors” rule.
The 3-2-1 Backup Strategy FAQs
The short answer is no.
While having a secondary partition (like a D: drive) is great for organising files on a disk, this partition relies on the exact same physical hardware as the main system drive. If this hard drive suffers a mechanical failure, or if ransomware infects the machine, both partitions will likely be lost or encrypted at the same time. To satisfy the 3-2-1 rule, any secondary copies must be stored on completely separate physical media, such as an external hard drive or a NAS device.
While many mainstream cloud storage (cloud drive) services now offer highly functional desktop synchronisation tools, this functionality often doesn’t translate into a service which is automatically suitable for making off-site backups. Because these services constantly synchronise files between the local PC and the cloud storage in real time, the deletion or corruption of a file on the local PC will instantly be replicated in the cloud drive (meaning this is not a reliable means of keeping safe copies of such data in situ).
If you want to use these cloud storage providers for implementing a robust 3-2-1 backup strategy, it is advisable to use dedicated backup software that implements historical versioning rather than relying on standard folder syncing tools. It is also advisable, wherever possible, to make use of a folder / area of the cloud drive which is excluded from the automatic synchronisation process.
No, leaving an external backup drive plugged into a PC 24/7 can be a highly risky practice which could undermine the effectiveness of a 3-2-1 backup strategy.
Modern, highly sophisticated ransomware now exists and is specifically engineered to scan infected systems for attached external storage and network shares which could be part of a device’s backup strategy. Encrypting these connected backup drives alongside the primary data on the device being backed up means that 2 of the recommended 3 copies of any data could effectively be destroyed and rendered unusable in short order.
To fully satisfy the requirements of a robust backup strategy based upon the 3-2-1 backup rule, external storage media should only be connected whilst a backup job is actively running and disconnected immediately once the backup software confirms the process is complete.
How often backups should be run depends on how frequently the data being backed up changes and how much potential data loss can be tolerated.
For most regular PC users, scheduling an automated daily backup of critical files (such as documents, photos and active work projects) alongside a weekly full system backup could strike the ideal balance between maximum protection and efficiency. In certain use cases, such as professional or small business users (or anyone seeking the maximum levels of data protection), running continuous or hourly backups can help keep the risk of data loss to an absolute minimum.
Performing a manual restore test regularly is a valuable task and does not require that any data is overwritten or modified during the process.
The most practical approach to effectively performing such a restore is to open up the backup software being used, select a small sample of files to be recovered, specify a historic date to be used and then restore these files to a temporary folder (which can be deleted safely afterwards).
Once the recovery process has completed, successful recovery can easily be verified by opening these files up and checking that they look and work as expected. It is also advisable to make use of any automatic verification functionality which is often found in mainstream backup software products to complement (but not replace) this vital data protection exercise.
The 3-2-1 Backup Strategy Summary
Implementing a robust backup routine can often feel like an administrative chore, but the reality is that data loss rarely produces any advance warning and can be devastating for many PC users. Relying on a single external hard drive or a basic cloud syncing service is a great first step, but such an approach simply doesn’t offer adequate protection against modern threats including hardware failure or sophisticated ransomware attacks.
The classic 3-2-1 backup strategy has stood the test of time for a very simple reason – it forces users to eliminate single points of failure in their backup workflow and ensures multiple copies of data exist across multiple different media and physical locations. Whether you choose to implement this approach using versatile desktop backup software on an individual PC, or scale it up using a dedicated, centralised NAS device for a small business environment, the core logic behind the 3-2-1 rule remains consistent.
Investing a small amount of time into properly structuring data around the 3-2-1 backup rule is often the single best insurance policy you can write for your digital life. Such an approach guarantees that critical files remain safe, isolated and effectively recoverable when they might be required.
