Data loss is permanent. Hardware fails, ransomware encrypts files, laptops are stolen, files are accidentally deleted, and cloud services occasionally have catastrophic failures. The 3-2-1 backup rule has guided data protection for decades: keep three copies of your data, on two different types of storage media, with one copy off-site. Most people violate every principle of this rule — they have one copy of their data, on one device, at one location. Implementing a proper backup strategy takes a few hours and protects against nearly every realistic data loss scenario.
Table of Contents
- Why Your Current Backup Strategy Is Probably Wrong
- The 3-2-1 Backup Rule
- Cloud Backup Services
- Local Backup: External Drives
- Built-In OS Backup Tools
- Mobile Device Backup
- NAS: Home Server Backup
- Protecting Against Ransomware
- Frequently Asked Questions
Why Your Current Backup Strategy Is Probably Wrong
Most people conflate cloud sync with backup. They are not the same. Dropbox, iCloud, Google Drive, and OneDrive are sync services — they mirror your files across devices and maintain version history for a limited time window. They are not backup services. If you accidentally delete a folder and do not notice for 30 days, and your sync service only keeps 30 days of version history, that folder is gone permanently. If ransomware encrypts your files, the encrypted versions sync to the cloud, overwriting the originals. Sync services are useful, but treating them as backup is a dangerous misconception.
Hard drives fail. The median lifespan of a consumer hard drive is 3 to 5 years. SSDs are more reliable but still fail. If your only copies of important files are on your laptop’s internal drive, you are one hardware failure away from losing everything. External drives fail too. The point of multiple backup copies is that simultaneous failure of multiple independent storage devices is far less likely than failure of a single device.
The 3-2-1 Backup Rule
The 3-2-1 rule is the foundational framework for data protection: keep three copies of your data (your original plus two backups), store them on two different types of media (e.g., internal drive and external drive, or external drive and cloud), and keep one copy off-site (a cloud backup or physical media stored at a different location).
The off-site requirement protects against physical disasters — fire, flood, theft — that would destroy both your primary and local backup simultaneously. A cloud backup service satisfies the off-site requirement conveniently. For paranoid protection of irreplaceable data, storing an encrypted backup drive at a trusted person’s home or a bank safe deposit box provides the strongest offline, off-site protection.
A modern update to 3-2-1 is the 3-2-1-1-0 rule used in enterprise backup: three copies, two different media, one off-site, one immutable or offline (a copy that cannot be overwritten or deleted by ransomware), zero backup errors verified by regular restore testing.
Cloud Backup Services
Backblaze Personal Backup
Backblaze Personal Backup is the best value cloud backup service available: unlimited storage for approximately $9 per month per computer. It runs continuously in the background, uploading any new or changed files automatically. Restore is available via browser download (individual files or folders) or a physical hard drive mailed to you (for restoring very large amounts of data quickly). Backblaze is transparent about its infrastructure and has earned strong trust in the backup community over many years.
Carbonite
Carbonite offers similar automatic cloud backup to Backblaze, with stronger enterprise and small business features. Pricing is comparable for personal plans. It adds courier restore service and slightly more configuration options. The choice between Backblaze and Carbonite for personal use is largely a matter of preference — both provide the core unlimited cloud backup service reliably.
iDrive
iDrive differs from Backblaze and Carbonite in that it backs up multiple devices under a single storage quota (5TB, 10TB, etc.) rather than unlimited storage per machine. This makes it more economical for households with multiple computers and mobile devices. It also offers a mobile backup component that the PC-focused competitors lack. For families or individuals with many devices, iDrive’s multi-device model may provide better value.
Local Backup: External Drives
A local backup on an external drive provides fast restore speeds that cloud backup cannot match — restoring 500GB from a local drive takes minutes; restoring 500GB from cloud backup takes hours to days depending on internet speed. Local backup is complementary to cloud backup, not a replacement.
For local backup media, 2.5-inch portable SSDs (Samsung T9, WD My Passport SSD) are fast, compact, and durable. Desktop HDDs offer much lower cost per terabyte for users with large data volumes. NVMe external drives provide the highest speeds but at premium prices. For backup purposes, speed matters less than reliability and capacity — HDDs remain appropriate for backup storage where read/write speed is less critical than the archives.
The critical rule for external backup drives: disconnect and store them separately from your computer when not actively backing up. A drive that remains permanently connected is at risk from the same ransomware attack, power surge, or theft that destroys your primary data. Disconnecting after backup preserves its value as an independent copy.
Built-In OS Backup Tools
macOS Time Machine
Time Machine is macOS’s built-in backup system that automatically creates hourly, daily, and weekly backups to an external drive. It maintains a full backup history so you can restore any previous version of any file, or restore your entire system to a previous state. Time Machine is one of the most user-friendly backup systems ever built — connect an external drive, enable Time Machine, and backups happen automatically. Every Mac user should have Time Machine configured on an external drive.
Windows Backup and File History
Windows includes File History (backs up files in user libraries continuously) and Windows Backup (system image and file backup). These are less polished than Time Machine but functional. Third-party tools like Macrium Reflect (free version available) provide more powerful and reliable Windows backup capabilities, including bootable rescue media and sector-by-sector disk imaging that can restore a system to entirely new hardware.
Mobile Device Backup
For iPhones, iCloud Backup automatically backs up your device when connected to Wi-Fi and charging, including your app data, messages, photos, and settings. The free 5GB iCloud tier is insufficient for most users — upgrading to iCloud+ (50GB costs $0.99/month, 200GB costs $2.99/month) is one of the cheapest meaningful insurance purchases available. Alternatively, iTunes/Finder backup to your Mac creates a full encrypted local backup.
For Android, Google One backup handles apps, contacts, call history, and settings. Photos should be backed up separately to Google Photos (free in compressed quality) or your preferred cloud photo service. The most critical data on Android — contacts, calendar, and app data — is typically synced to your Google account and not at significant risk. Custom SMS backup apps handle message backup that Google’s backup may miss.
Protecting Against Ransomware
Ransomware is a type of malware that encrypts your files and demands payment for the decryption key. Backups are the most reliable protection — with a clean backup, you can restore your files without paying the ransom. However, not all backup configurations protect against ransomware effectively. If your backup drive is connected and the ransomware can reach it, it will encrypt your backup too. If your cloud backup automatically syncs encrypted files over your originals before you notice the attack, you lose cloud backup protection too.
Ransomware-resistant backup requires: an immutable backup (one that cannot be overwritten or deleted by ransomware) such as an offline disconnected drive or a cloud backup service with object locking; extended version history so you can restore pre-encryption versions; and offline testing of restores so you know your backup works before you need it. According to Backblaze’s backup strategy guide, the single most important backup practice is regular restore testing — a backup you have never successfully tested may fail exactly when you need it most.
Frequently Asked Questions
Is Google Drive or Dropbox a backup?
No, they are sync services. They maintain recent version history but are not designed as backup systems. Files deleted from your device sync the deletion to the cloud. The version history retention is limited. For data protection, use a dedicated backup service (Backblaze, Time Machine, iCloud Backup) in addition to any sync services you use.
How often should I back up?
For important data, continuous or daily automatic backups are ideal — which is what cloud backup services and Time Machine provide by default. The question to ask is: if I lost everything created since my last backup, what would I lose? If the answer is “an hour of work” (continuous backup), that is very different from “a week of work” (weekly manual backup). Automate backups so frequency is not dependent on human memory.
How do I know if my backup is working?
Test a restore. Pick a file, deliberately delete it, and restore it from your backup. Many people discover their backup was not actually running, was missing key folders, or had silent errors only when they attempt a restore. Do this at least once when you set up a backup system and periodically afterward. For critical data, restore testing once a quarter is reasonable.

