Backups made simple: the 3-2-1 rule
In short: A backup is a separate copy of your data that you can restore if the original is lost, damaged or locked by ransomware. The 3-2-1 rule (three copies, two types of storage, one copy elsewhere) protects against almost every disaster. A backup only counts once you have tested restoring it.
The simple idea
Devices fail, phones get lost, files get deleted by mistake, and ransomware can lock everything in minutes. A backup is a separate copy of your data that you can get back when that happens. Without one, the data is simply gone.
The 3-2-1 rule
The most famous rule in backups is easy to remember:
Many businesses now add an extra rule: keep at least one copy offline or immutable (it cannot be changed or deleted for a set time), because ransomware often tries to delete backups it can reach.
Sync is not backup
Services such as OneDrive, iCloud Drive and Google Drive sync your files between devices. That is very useful, but if you delete a file or ransomware encrypts it, the change is copied everywhere. A true backup keeps older versions so you can go back in time. Many sync services keep version history for a while, which helps, but check how long.
Types of backup
| Type | What it copies | Trade-off |
|---|---|---|
| Full | Everything, every time | Simple to restore, but slow and uses lots of space |
| Incremental | Only what changed since the last backup | Fast and small, restore needs the full plus each increment |
| Differential | Everything changed since the last full backup | A middle ground between the two |
Most backup tools mix these automatically, for example a full backup every week and incrementals every day.
A backup you have not restored is a hope
The most common backup failure is discovering, on the worst day, that the backup never worked: the drive was full, the job had been failing silently for months, or nobody knew the password. Test a restore regularly: pick a few files, restore them to a different folder and open them.
Real-world example: the café that lost a year
A small café kept its accounts and supplier list on one laptop, "backed up" to a USB drive that stayed plugged in. Ransomware arrived through a fake invoice email and encrypted both, because the drive was connected. The owner rebuilt a year of records by hand. The fix costs very little: an automatic cloud backup with version history, plus a second drive that is unplugged and kept at home.
A simple plan for home
- Turn on your phone's backup (iCloud or Google) and check it has run recently.
- On your computer, use the built-in tool (File History or Time Machine) with an external drive.
- Add a cloud backup for your most important files.
- Once a month, unplug the external drive and store it safely.
- Every few months, restore one file to prove it works.
For more on protecting against ransomware, see malware basics and, for businesses, backup and recovery planning.
Key takeaways
- A backup is a separate copy you can restore after loss, damage or ransomware.
- 3-2-1: three copies, two types of storage, one copy elsewhere.
- Sync is not backup: you need older versions too.
- Test restores regularly; an untested backup may not work.
Original content written by Mohamed Fayas for FM TecHub. © 2026 FM TecHub. You're welcome to share a link to this page; please don't copy the text elsewhere without permission.