A good backup strategy is the difference between a day of inconvenience and a permanent loss of everything you cannot replace. Ransomware, theft, and hardware failure all happen, and they happen without warning. The answer is not complicated — it is a few decisions, made now, and then automated.
The 3-2-1 rule, and why it still works
The 3-2-1 rule is the simplest way to think about backup safety:
- 3 copies of your data (your main copy plus two backups).
- 2 different media (for example, one external drive and one cloud service).
- 1 copy off-site (outside your home, so fire or theft cannot reach it).
The rule works because it does not rely on any single technology. If one backup fails, two remain. If a fire destroys your home, an off-site copy survives. The 3-2-1 rule is recommended by both CISA and the FTC for home users, and it has not been replaced by anything simpler.
What to back up (and what to skip)
Back up only what you cannot replace:
- Documents: tax returns, contracts, letters, schoolwork, anything you created.
- Photos and videos: family pictures have no other copy anywhere.
- Password vault: export your password manager vault or keep its recovery file backed up.
- Browser bookmarks and settings if your setup is customised.
You can skip the operating system, installed programs, and temporary files. You can reinstall those in an afternoon. Your photos and documents cannot be redownloaded.
Which tools to use: a comparison
The main choice is between local backup (external drive), cloud backup (online service), or both. Most people should use both.
| Approach | Low-end cost | Restore speed | Protects against | Best for |
|---|---|---|---|---|
| Local external drive | $50–$80 one-time | Fast (USB) | Drive failure, accidental delete | Fast daily recovery |
| Cloud backup (Backblaze) | ~$9/month unlimited | Slow (download) | Theft, fire, ransomware | Off-site safety |
| Cloud backup (IDrive) | ~$80/year for 5TB | Medium | Same as above | Larger personal libraries |
| Hybrid (local + cloud) | $50–$80 + ~$9/month | Fast + slow | Everything | Most people |
| Advanced (Arq + Backblaze B2) | ~$6/month per TB | Medium | Everything | Power users who want encryption control |
Recommendation for most people: a 5TB external drive (for local, daily backups) + Backblaze (for unlimited cloud, off-site safety). This covers the 3-2-1 rule with a one-time cost of $50–$80 and a recurring cost of about $9/month.
Set up automatic backups
Manual backups depend on memory, and memory fails. Set up both local and cloud backups to run automatically:
- Local: Connect an external drive. Use the built-in backup tool (Windows File History, macOS Time Machine, or a third-party tool like Arq). Set it to run daily at a time when the computer is on.
- Cloud: Install Backblaze (or your chosen service) and point it at the same folders. Let it run continuously or once daily.
- Verify: Set a weekly calendar reminder to check the backup log — not the files, just the log. Look for any errors or "skipped" files.
Test your restore
A backup you never test is a backup you cannot trust. Every few months, pick a few important files, restore them to a separate folder, and open them. This proves three things: the backup ran, the restore works, and the files are readable. Do this for both the local drive and the cloud service. The first time you test a restore is also the best time to discover that a file was never included in the backup in the first place.
Encrypt your backups
An external drive sitting next to your laptop gives a thief both your machine and your data in one grab. Encrypt the drive (BitLocker on Windows, FileVault on macOS, or a tool like VeraCrypt). For cloud backups, choose a service that offers end-to-end encryption or encrypt files before uploading. The cloud storage privacy guide covers how to choose a service that encrypts on your side.
What about ransomware specifically?
A good backup strategy is your best defense against ransomware:
- Keep version history. A backup that only stores the latest version will overwrite your files with the encrypted version. Choose a tool that keeps multiple versions so you can roll back to before the attack.
- Keep the backup disconnected. A cloud backup is naturally disconnected. A local external drive should be unplugged between backups, or at least not always connected. Ransomware can encrypt an attached drive it can write to.
- Protect the backup account. Use a strong, unique password and two-factor authentication on your cloud backup account. If an attacker gains access to your backup account, they can delete your restore points.
Quick answers
Is the 3-2-1 rule enough for a home user? Yes. It is a standard recommendation from CISA and the FTC, and it covers the most common failure scenarios.
How much should I spend on backups? A one-time cost of $50–$80 for an external drive plus $9/month for unlimited cloud backup is enough for most people.
How often should I test a restore? Every few months. Restore a handful of important files to a separate folder and confirm they open correctly.
Can ransomware encrypt my backups? It can encrypt a connected drive. Cloud backups with version history and a disconnected local drive are both safe.
Written by Hassan Arshad, founder of UsefulOrbit. Last updated August 31, 2026. Sources: FTC Consumer Advice, CISA Cybersecurity Advisories, EFF Surveillance Self-Defense.