← Volver a Repair Bytes
Repair

A Practical 3-2-1 Backup Plan for Photos and Important Documents

Aug 22, 2026

A folder that appears on two devices is not automatically backed up. If both devices synchronize a deletion, share the same account or sit in the same room during a theft or flood, the second copy may disappear with the first. A reliable backup plan is a small system with separate failure points and a restore test.

The 3-2-1 rule is a useful starting point: keep at least three copies of important data, on two different types of storage, with at least one copy stored away from the main equipment. It is not a magic number. It forces three questions: how many copies exist, how independent are they, and can I recover them?

Decide what deserves protection

Start with irreplaceable files rather than trying to copy every download. Family photos, tax records, identity documents, project files, password-manager recovery information and original creative work usually belong in the first backup set.

Create a short inventory. Write down the folders, approximate size, application needed to open each type of file and the person who needs access. Keep a separate note of licenses and account recovery methods, but never put passwords in an unprotected spreadsheet.

Build the three copies

The first copy is the working copy on your computer or phone. The second can be an external drive that is disconnected when the backup finishes. The third can be a reputable cloud backup or another drive stored at a different location.

Cloud synchronization is convenient, but synchronization is not the same as versioned backup. A sync service mirrors changes; a backup service may keep older versions and deleted files for a defined period. Read the retention terms and test recovery before trusting it with your only copy.

Different media matters because a failed laptop drive and a corrupted file system do not affect every medium in the same way. Two folders on the same internal SSD are not two independent copies. Two external drives that remain connected all the time are vulnerable to the same malware or power event.

Make the offline copy boring

Connect the external drive, run the backup, verify that it completed and disconnect it. Store it away from heat, moisture and the computer. A drive that is always connected is convenient, but it behaves more like an extension of the computer than an offline backup.

Use a predictable folder structure and include the date in a backup log. If the drive contains sensitive documents, enable encryption and protect the recovery key separately. A locked drive that nobody can unlock is not a successful recovery plan, so document the recovery steps for the person who may need them.

Add version history for mistakes

Ransomware and accidental edits are dangerous because they can corrupt a synchronized folder. Turn on version history or a backup feature that keeps older snapshots when available. For personal files, daily or weekly versions are often more useful than an endless stream of every tiny change.

Choose retention that matches the way you work. If you notice a mistake after three weeks, a service that keeps only seven days of history will not help. Free tiers and trial plans can change limits, so do not let a temporary offer become your only copy.

Test a restore, not just a backup

Once a month, choose a photo, a document and a folder from the backup. Restore them to a different location and open them. For a larger plan, perform a full recovery drill on a spare drive or test computer.

A successful upload is not proof that a file can be restored. Check filenames, permissions, timestamps and whether the original application can open the file. If a backup is encrypted, practice locating and using the recovery key. Write down how long the restore takes; that number matters during a real hardware failure.

Protect the account around the backup

The cloud account that holds your backup deserves a unique password, multi-factor authentication and current recovery information. Review signed-in devices and third-party applications. A backup account should not be protected only by the same password as the laptop it is meant to save.

Keep the backup application and operating system updated. Do not install a “backup” utility from an unverified download site. When a service sends a security alert, investigate it through the official application or website rather than clicking a message link.

MoonBytes household checklist

  • List irreplaceable folders and the applications that open them.
  • Keep three copies on at least two storage types.
  • Make one copy offline or in another location.
  • Turn on version history where possible.
  • Encrypt portable drives and store recovery keys safely.
  • Restore sample files every month.
  • Recheck the plan after moving, changing jobs or adding a device.

The best backup plan is one you can explain to another person and test without guessing. Start with the files that would be hardest to replace, make the first copy today and schedule the restore test before you forget.

Sources

  • CISA, cyber safety guidance: https://www.cisa.gov/topics/cyber-threats-and-advisories
  • NIST, small business backup guidance: https://www.nist.gov/itl/smallbusinesscyber/guidance-topic/backup-data
  • Microsoft Support, backup and restore: https://support.microsoft.com/windows