Keep three copies of anything that matters, on two different kinds of storage, with one copy away from your home. That’s the entire rule, and it fits on a sticky note. The rest of this post just makes it real for your photos and your papers.
Where the rule comes from
The 3-2-1 rule wasn’t invented by a company selling backups. A working photographer named Peter Krogh wrote it down in 2005 in The DAM Book, his guide to managing digital photos. Professional photographers adopted it fast, because they kept losing work the same way: a hard drive died, it held the only copy of a shoot, and there was no way to photograph that wedding again.
The rule spread far beyond photography because of what it isn’t. It isn’t a corporate checklist with twelve steps and a training video. It’s the smallest amount of copying that covers every common way files disappear: a dead drive, a lost phone, a burglary, a flood, a scam. Fewer copies leave a hole somewhere. More is fine, but not needed. Twenty years of new gadgets haven’t changed it, because the ways things fail haven’t changed either.
The rule, translated for a family
Here’s what 3-2-1 looks like in an ordinary house.
Copy one is the one you live with. For photos, that’s almost always your phone, because that’s where photos happen. For papers, it might be the computer where the scans live. You already have this copy. It counts.
Copy two is a second thing at home. The classic choice is an external drive that holds a copy of everything. A second device works too. If every phone photo also lands on the family computer, that computer is copy two.
Copy three lives somewhere that isn’t your house. There are two easy versions. One is an encrypted backup service (“encrypted” means your files are scrambled so that only you can unlock them). The other is a plain external drive that lives at a relative’s place and comes home twice a year to pick up the new stuff.
That’s the whole system. No special software is required for any of it. Copying files is something every phone and computer already knows how to do.
Why two kinds of storage
Things that live together tend to die together.
One power surge can cook the computer and the external drive plugged into it in the same second. One burst pipe soaks everything in the same cupboard. One burglary clears the whole desk. And one ransomware infection (a scam program that locks every file it can reach, then demands money) will happily reach every drive connected to the computer at the time.
That’s why the rule says two kinds of storage, not two boxes. Two copies on the same shelf are really one copy with extra steps. A phone plus a computer counts as two kinds. A computer plus a cloud service counts. The test is simple: if one bad afternoon could take out both copies, they’re one copy.
Why one copy away from home
Fire, flood and theft don’t spare the backup drawer. If the house floods, the drive in the desk drowns right next to the computer it was protecting. Your two home copies handle the everyday failures, like a dead drive or a dropped phone. The away copy handles the rare, big ones.
“Away” sounds technical and expensive. It’s neither. A $60 drive that lives at your parents’ house is offsite storage. So is a drive in a drawer at a friend’s place across town, or in your locker at work. Offsite is a location, not a subscription. A cloud service works too, and it updates itself without being driven anywhere, which is why many people pick one. But the drive at a relative’s house does the same job for $60, once.
Once one copy sleeps somewhere else, a whole-house problem stops being a whole-life problem. A stolen laptop turns into a money problem instead of a memory problem. That’s what the third copy buys you: the worst day gets smaller.
Two starter setups
You don’t need to design anything. Pick one of these and do it.
The free version — this weekend, about an hour
- Your phone is copy one. The photos are already on it. Done.
- Turn on an encrypted sync or backup service for the folder that matters most. Not everything, just the irreplaceable core (more on choosing it below). Free plans on good services hold a few gigabytes, which is plenty for the core. That’s copy two, and it’s already away from home. About twenty minutes.
- Copy that same core to the family computer, with a cable or the service’s own app. That’s copy three. Half an hour.
Three copies, two kinds of storage, one away from home. Total cost: $0.
The $100 version — one evening
- Buy a 1 or 2 TB external drive. They cost $60 to $90 at any electronics shop, and 2 TB holds a lifetime of family photos.
- Plug it in and copy everything over: the whole photo library, the documents folder, the scans. The first copy can take a few hours, so start it before dinner and let it run.
- Set a repeating phone reminder for every three months. When it fires, plug in the drive, copy the new stuff, unplug it. Twenty minutes each time.
- After the second refresh, the drive moves to a relative’s house and only comes back for its top-ups. From then on you have the phone and computer at home and the drive away. That’s full 3-2-1 for everything you own, for under $100, once.
Backup is not sync
Here’s the trap that catches careful people.
Sync services mirror whatever you do — including your mistakes. Delete a photo by accident, and the deletion syncs everywhere within seconds. Every copy now agrees the photo never existed. Sync is wonderful for having your stuff on every device. On its own, it isn’t a backup.
A real backup lets you go back to yesterday. That means either a copy that sits offline most of the time (the external drive does this naturally), or a service with version history and a trash folder that holds deleted files for a while, usually 30 to 60 days. Before you trust any service as a backup, find its “restore deleted files” button and check that it really exists.
One more thing that is not a backup: photos posted to Facebook or Instagram. Those are squeezed-down copies, the full-quality originals were never kept, and all of it disappears if the account is ever locked, hacked or closed.
Test it once a year
A backup you’ve never opened is a hope, not a backup. Drives fail quietly. Copies that “should be there” sometimes aren’t.
The drill takes fifteen minutes. Pick five random photos and two documents. Open each one from every copy: from the phone, from the drive, from the cloud service or the second computer. If everything opens, you’re done for the year. If something won’t open, you found out on a calm Sunday afternoon instead of on the bad day.
Put the drill in your calendar next to the smoke-alarm battery check. Same idea, same effort, same quiet payoff.
The good-ones shortcut
If “back up everything” feels too big to start this weekend, shrink the job.
Most families have an irreplaceable core: the wedding folder, the kids’ first-year album, the scans of your important papers, the voice memos from grandma. That core is usually a few gigabytes, not a few hundred. Protect it first. Get just the core to 3-2-1 this weekend with the free setup above, and expand later, or never.
A finished backup of the important 5 GB beats a planned backup of the whole 500 GB. Plans protect nothing.
Where OutVault fits
OutVault covers two of the three copies for your most important files. The encrypted vault on each of your devices is a local copy, and encrypted sync adds one that lives away from home. Pair it with any external drive and the rule is complete. It’s free on Windows, Android and Chrome.