A simple rule of thumb
The 3-2-1 rule is a widely cited guideline for keeping copies of important data. It is easy to remember, which is much of its appeal:
- 3 copies of your data in total
- 2 different types of storage media
- 1 copy kept off site
The idea is to make sure that no single mishap, such as a failed disk, a deleted folder, a theft or a fire, can destroy every copy at once. It is a rule of thumb, not a guarantee or a standard that you must meet, but it gives a sensible starting point.
Three copies
The three copies include the original, working data plus two backups. So there is the live data on your computer or server, a first backup and a second backup.
Why three? Any one copy can fail without warning. Two copies are better, but they leave you exposed if the second is also bad, or if something affects both. With three, the chance that all are lost at the same time is much smaller, especially if they are kept in different ways. This is a general reasoning about independence rather than a precise calculation: the more separate the copies, the less likely one cause will destroy them all.
Note that copies must be genuinely independent. A second folder on the same disk is not a second copy in any useful sense, and a file that is merely synchronized between devices may propagate a deletion or corruption everywhere.
Two types of media
The second number asks for variety. Different storage types fail in different ways and for different reasons. If both backups sit on identical drives bought together and plugged into the same system, a shared flaw or a power surge may affect both.
In practice, “different types” can mean, for example, an internal disk plus an external drive, a network storage device plus cloud storage, or disk plus tape in organizations that still use it. The exact categories matter less than the principle that a problem with one method should not automatically strike the other.
One copy off site
The last number protects against site-wide events: fire, flood, burglary, power problems or an attack that reaches everything on your network. An off-site copy might be:
- A drive taken home or to another office, or kept in a secure location
- Storage in a separate site belonging to the organization
- An online backup service, using cloud storage
Online copies are convenient because they can be automated, but they depend on bandwidth, ongoing fees and good account security. Cloud costs can climb as data grows, and exit planning matters if you ever want to change providers, which is where vendor lock-in becomes relevant.
An example setup
Consider a hypothetical small office with a shared file server:
- The live data on the server (copy one).
- A nightly backup to a network storage device in the same building (copy two, different media from the server’s own disks).
- A nightly copy sent to an online backup service (copy three, off site).
That arrangement meets 3-2-1. A fire in the building would not destroy the online copy, and failure of the server would leave a fast local copy to restore from.
What the rule does not cover
3-2-1 is a starting point, and it leaves some gaps:
- Ransomware and malicious deletion. If all copies are reachable using the same credentials, an attacker may be able to damage all three. Many people add an offline or tamper-resistant copy, discussed under ransomware protection for backups.
- Testing. Having three copies is no help if none can be restored. Regular restore testing is essential.
- Security and privacy. Each additional copy is another place data can leak. Use data encryption where appropriate and control who has access, especially for personal data.
- Retention. The rule does not say how long to keep copies. Decisions about data retention need separate thought.
- Speed. It says nothing about how fast you can recover. Your recovery objectives define the time and data loss you can accept.
- Consistency. Backups of databases or applications may need special handling to be usable.
Variations
Some people extend the rule, for example “3-2-1-1-0,” which adds one copy that is offline or unchangeable and zero errors found in verification tests. Others simplify it for home use. The numbers vary in how they are described, so treat them as prompts for the right questions rather than rigid requirements.
Using the rule well
Start by listing your important data, then check each item against the three numbers. Where you fall short, fix the cheapest gap first, often adding an off-site or online copy. Document the setup as part of your backup strategy, test it, and review it whenever systems change. The rule will not remove risk, but it makes the weakest points easier to see.