The 3-2-1 Backup Strategy: Never Fear a Dead Drive

Most people's idea of a backup stops at "I have an external hard drive." But that drive sits on the same desk as the computer, so one spill, one mistaken sync, or one ransomware infection can wipe both copies at once. What actually survives accidents is a long-standing engineering rule: the 3-2-1 strategy.

One: What 3-2-1 Actually Means

• 3 copies: the original data plus two backups. Note the original itself counts as one, so you make two more.
• 2 media types: do not put both backups on identical drives. One on the computer's SSD, one on an external HDD or NAS, lowers the odds that a bad batch fails together.
• 1 offsite copy: at least one copy not in your home or office. Cloud storage is the easiest offsite option; a drive at a relative's house also works.

Each rule blocks a different risk: copy count defeats accidental deletion, media variety defeats batch hardware failure, and offsite defeats fire, theft, or flooding that takes out the whole location. Drop any one and the chain breaks.

Two: First, Decide What Is Worth Backing Up

Do not back up the whole disk at once — you will quit from the size. Tier it:

1. Irreplaceable (must back up): photos, videos, personal documents, writing and design source files, ledgers, scans, unpushed code branches.
2. Annoying to rebuild (should back up): system config, software licenses, browser bookmarks, notes, email archives.
3. Re-downloadable (skip): installers, movies, game clients, public datasets.

The first tier is usually only tens to a few hundred gigabytes — far smaller than you fear. Focus there and the plan becomes runnable.

Three: A Workable Configuration

For a Windows laptop with data in D:\Data:

Copy one: local external drive Use "File History" (Windows) or "Time Machine" (macOS) for incremental backups that run when you plug in. For more control, a tool like FreeFileSync can mirror:

Source:      D:\Data
Destination: E:\Backup\Data
Mode:        Mirror
Option:      delete to Recycle Bin, not permanent

Copy two: cloud, offsite Pick a cloud drive you already pay for; the key question is whether it is a "backup" or a "sync" — the biggest trap, covered below.

Schedule: external drive weekly, cloud daily automatic. Run an extra manual backup before big events (a deadline, tax filing, a hardware swap).

Four: Four Common Mistakes

Mistake one: treating sync as backup. Sync keeps devices identical. Delete a folder locally and the deletion syncs to the cloud. Real backup needs version history or independent snapshots. Test: delete a file and see if you can still recover it from the cloud in seven days. If yes, it is backup.

Mistake two: never rehearsing recovery. The cruelest failure is "backups ran for years, but when needed they were empty, the password was forgotten, or the format would not open." Quarterly, pick three files and restore them to a temp folder to confirm.

Mistake three: leaving the external drive plugged in forever. An always-on drive gets encrypted by ransomware and hit by accidents. Unplug it when done — physical separation is the cheapest protection.

Mistake four: ignoring the phone. The phone is often the only copy of photos and chat history. Export its album into D:\Data so it joins the same backup flow, rather than relying only on the phone maker's cloud.

Five: Encryption and Capacity

If backing up to someone else's drive or a public cloud, encrypt sensitive files first. VeraCrypt makes an encrypted container; 7-Zip can protect an archive with AES-256 — both free and standard. Store that password in your password manager — an encrypted backup without the password is no backup at all.

For capacity, do not keep everything forever. A rule like "raw素材 two years, final work永久" lets cold archives drop off the cloud while the external drive keeps them, cutting cost fast.

Common Questions

Is cloud storage alone a good backup? Only partly. Cloud sync protects against local disaster, but it is not versioned backup by itself and can propagate deletions. Treat it as one of your three copies, not the whole strategy.

What counts as the "original" copy? The data as it lives on your working machine. The 3-2-1 count starts there, so you still need two more separate copies beyond the original.

How often should I test a restore? Quarterly is a good rhythm. Pick a few random files and restore them to a temp folder to confirm the backup is intact and readable. An untested backup is a hope, not a safeguard.

I encrypted a backup but forgot the password — now what? Nothing can be done; that is the trade-off of strong encryption. This is why the password must live in your password manager with a second copy kept safe.

Can I use two external drives instead of cloud? Yes — one local copy and one kept at a relative's house satisfies the offsite rule without any cloud. The downside is manual effort and slower recovery.

Risk Tips

Test your restore at least once before trusting a backup — an unverified backup is a hope, not a safeguard. Keep the offsite copy truly offsite; a drive in the same room does not count against fire or theft. Beware "backup" tools that are really sync in disguise; confirm version history exists. And remember encryption cuts both ways: if you forget the password for an encrypted archive, no one can help you, so record it in your password manager and keep a second copy of that record somewhere safe.