Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

The 3-2-1 backup rule means keeping three copies of important data, on two different kinds of storage media, with one copy kept offsite. For a typical home setup, that can be the files on your computer, a scheduled copy to an external drive, and another copy in cloud storage or on a drive stored at a different location. The rule is a planning framework, not a guarantee: your capacity, privacy needs, acceptable data loss and ability to restore should determine the details.

Official guidance from the Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) also stresses current backups, encryption for sensitive data, isolation from ransomware and regular restore tests. Sources: CISA Data Backup Options, CISA device-data guidance, NIST-hosted personal backup tips and the CISA #StopRansomware Guide.

What the 3-2-1 rule actually requires

Think of the rule as three separate protections that work together. CISA defines the three copies as one primary copy plus two backups. The two backups should use different types of media, and at least one should be away from the place where the computer is kept. That combination reduces the chance that one accident, device failure or local disaster destroys every copy.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Part of the rule What it means in practice Why it matters
3 copies The working files plus two independent backup copies A single backup failure does not remove your only recovery path
2 media types Use different storage categories, such as a local disk and remote/cloud storage; CISA also lists solid-state, optical, server and tape options Different media reduce dependence on one hardware or failure mode
1 offsite Keep one copy outside the home or business location, either remotely or at a separate physical address A theft, fire or other local event cannot affect every copy at once

The numbers count copies, not merely devices. A second partition in the same computer is not an independent backup, and two identical drives sitting beside the computer do not provide geographic separation. A network-attached storage (NAS) device can be useful, but a NAS in the same room is still local and should not be called offsite.

#1 Best Overall
Elebase USB to USB C Adapter for iPhone 18 Pro Max,USBC Car Charger Adapter | 4Pack Type C Female to A Male Cable Converter for Apple Duo 17 16 15 14 Plus,iWatch Watch 12 11 10,iPad 9 8 Air,Airpods 5 4
  • Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
  • Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
  • Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
  • Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
  • 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.

A simple home routine you can build today

Start with the files you cannot easily recreate: family photos, tax records, identity documents, school or work projects, source files and other folders whose loss would matter. Then map the copies deliberately rather than assuming that an application’s default sync behavior provides all three.

Copy 1: the working files

Your computer, phone or other primary device holds the current version. This is the copy you edit, but it is not a backup by itself. If data exists only on that device, CISA advises backing it up to an external drive or a properly vetted cloud service: CISA’s device-data guidance.

Copy 2: a local external drive

Use an external hard drive or SSD as a separate local destination. Configure the operating system or backup software to copy the folders you selected on a schedule. When the backup finishes, safely eject the drive and store it where it is protected from drops, moisture and unauthorized access.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Do not leave the drive attached continuously just because it is convenient. CISA warns that ransomware can reach an attached external drive. Disconnect it when a backup is not running and reconnect it for the next scheduled job: CISA guidance on protecting device data.

Copy 3: remote or geographically separate storage

Keep a third copy in cloud storage or on another physical drive held at a different location. Cloud storage is remote by design, while a drive in a workplace, safe-deposit location or trusted relative’s home can provide physical separation. The storage format and the offsite property are separate questions: an external drive beside the computer is local, regardless of its capacity.

Rank #2
Anker USB-C Hub, 5-in-1 USB Hub for Laptops, 4K HDMI Multiport Adapter | USB C Dongle with 90W Max Power Delivery, 3×5Gbps USB A Data Ports, for MacBook, Dell, and More (Charger Not Included)
  • 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
  • 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
  • Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
  • 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
  • What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.

Before relying on a cloud service, check its actual retention and restore behavior. File synchronization may mirror deletions or ransomware changes, and a service’s version history, recovery window and account protections differ. The presence of a “cloud” label alone does not establish an independent, retained backup.

How to choose the right routine for your data

There is no single household schedule or device combination that suits everyone. Decide how much recent work you can afford to lose, how much data you have, how private it is and how quickly you would need it back.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Small personal archives

For a modest photo or document collection, select the important folders, schedule a copy to an external drive, and maintain the offsite copy in a remote service or at another location. Fewer tools can be easier to monitor, provided you can identify the last successful run and restore a test file.

Large collections and multi-device homes

A NAS or another central storage system can collect backups from several computers, but it does not automatically satisfy the offsite requirement. If it sits beside the computers, add a remote copy or move a separate backup device elsewhere. Confirm that the system preserves earlier versions and that you know how to restore files if the NAS itself fails.

Frequently changing work

Projects that change throughout the day need more frequent updates than a rarely edited archive. Set a schedule that matches the maximum recent work you are willing to recreate. The official guidance does not establish one universal household interval, so choose and review the interval based on your workload rather than copying someone else’s number.

Rank #3
Sale
Anker USB C Hub, 7in1 Multi-Port USB Adapter, 4K@60Hz USBC to HDMI Splitter | 85W Max PD, 2 USB 3.0 & 1 USBC Data Ports, SD/TF Card Reader, for Laptops/Mac and Other Type C Devices (Charger Not Included)
  • Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
  • Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
  • Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
  • Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
  • What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.

Sensitive information

Encrypt sensitive data in transit and at rest where your tools allow it, and understand who controls the recovery keys. NIST-hosted personal guidance recommends encryption for sensitive information; CISA’s ransomware guidance also recommends offline, encrypted backups and regular checks of availability and integrity: NIST-hosted guidance and CISA’s ransomware guide.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Set up the workflow step by step

  1. Inventory the data. List the folders and devices that matter, including removable media and application data that would be difficult to recreate. Exclude disposable downloads if space is limited, but document what you intentionally leave out.
  2. Choose two storage categories. Pair a local external drive with remote/cloud storage or a physically separate drive. If you use two devices of the same type, treat that as a hardware-redundancy choice and verify that it still meets your interpretation of “two media types.”
  3. Measure capacity before copying. Check the size of the selected folders, allow room for growth and account for any version history the backup system retains. A destination that fills silently is not a dependable backup.
  4. Configure scheduled updates. Use your operating system’s current backup settings or backup software that supports your platform and the destination. Set the schedule according to how much recent work you can lose, and enable notifications or logs so a failed run is visible.
  5. Make the first complete copy. The initial run may take longer than later updates. Keep the source device available, avoid interrupting the process and confirm that the job reports success rather than assuming completion.
  6. Protect the local copy when idle. Eject and disconnect the external drive after the job, then store it securely. This reduces exposure to ransomware and to accidental deletion from the everyday computer.
  7. Establish the offsite copy. Upload or duplicate the selected data to the remote destination. For a physical offsite drive, transport and store it securely and keep a record of its location without exposing sensitive details.
  8. Encrypt and control access. Turn on available encryption, use strong unique account credentials and protect any recovery keys. Confirm that you can recover the keys when needed; encryption that cannot be unlocked is not a usable recovery plan.
  9. Test a restore. Retrieve a representative file and a folder, open them, and compare them with the originals. NIST guidance recommends periodically restoring a file or folder, while CISA recommends checking backup availability and integrity: NIST-hosted personal backup tips and CISA’s #StopRansomware Guide.
  10. Review after changes. Add new devices, folders, accounts or projects to the inventory. Recheck capacity, schedule, retention and restore steps whenever your data or service changes.

Local drive, NAS or cloud: compare the trade-offs

These are categories, not endorsements of a particular product. Evaluate each option against the same recovery questions.

Option Location and local-disaster protection Access and exposure Capacity and growth Recovery questions Maintenance burden
External hard drive or SSD Local unless stored elsewhere; a nearby drive can be affected by the same fire, theft or flood Can be disconnected between backup runs, reducing exposure to a compromised computer Choose capacity for the selected files and expected growth Can you find an earlier version and open a restored file? Is the connection compatible with your device? Requires connection, safe ejection, physical protection and visible checks of completed runs
NAS Usually local when installed beside the computer; location determines whether it is offsite Often continuously reachable on the network, so account and device security matter Centralizes data for multiple devices; expansion and version features depend on the system How are deleted or encrypted files recovered if the NAS or network account is compromised? Requires system administration, updates, monitoring and a separate offsite strategy
Cloud storage or backup service Designed to provide remote storage, subject to the provider’s architecture and availability Accessible over the internet; account security, encryption and provider controls are critical Subject to the service’s quota, retention and terms What is the restore path? How long are deleted or earlier versions retained? Can you recover after losing account access? Scheduling may be automatic, but you must monitor failures, billing or quota limits and retention settings

For commercial services, verify current storage limits, subscription terms, retention periods, restoration charges, encryption and key handling before committing. Those details vary and are not established by the category-level guidance above.

Why sync is not automatically a backup

Synchronization keeps locations aligned; a backup should give you a recoverable copy that can survive an accidental deletion, corruption or attack on the working files. If a sync system immediately propagates a deletion or encrypted file, it may remove the very version you hoped to recover.

If you use a service that includes both sync and backup features, inspect the settings rather than relying on its name. Look for version history, a defined retention period, recovery of deleted items and a clear restore workflow. CISA’s ransomware guidance discusses versioning and protections that prevent stored objects from being altered or deleted in some cloud or organizational environments, but those controls are not universal across consumer plans: CISA’s ransomware guide.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Sale
UGREEN USB to USB C Adapter Combo 4-Pack, 10Gbps USB C Converter Space Gray | Data transfer & Fast charging for MacBook, iPhone 17/16/15, iPad, Samsung Galaxy, Apple Watch
  • Dual Converters, Infinite Potential:Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
  • Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
  • Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
  • Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
  • Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft

Make the copies resistant to ransomware and ordinary mistakes

  • Disconnect what does not need to be online. An idle external drive should not remain mounted to the everyday computer.
  • Keep an offline or otherwise isolated copy. CISA recommends offline, encrypted backups and regular integrity checks for ransomware resilience.
  • Use version history where available. Earlier versions can help when a file is overwritten or encrypted, but confirm the service’s retention period and deletion protections.
  • Separate access. Avoid giving every device or account unrestricted control over every backup destination. Use strong credentials and protect recovery keys.
  • Watch for failed jobs. A scheduled task that has been failing for weeks is not a current backup. Review logs, notifications and available space.
  • Protect the physical media. Store drives away from heat, moisture, impact and casual access, and label them without exposing sensitive contents.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Restore testing: the step people skip

A backup is only useful if you can retrieve a usable file. A test should cover more than seeing a successful timestamp. Pick a recent document, a photo and a folder containing several files. Restore them to a separate location, open the files with their normal applications and check that names, dates and expected content are present.

Test the destinations separately. For a local drive, disconnect and reconnect it before the test so you know the process does not depend on a permanently mounted path. For a cloud copy, sign in through the normal recovery route and confirm that an earlier version or deleted item can actually be retrieved within the stated retention window. Record what you did, the result and any correction required.

Common 3-2-1 mistakes and fixes

“I have two drives, so I have two media types.”

Two drives may provide two physical copies, but the rule’s “2” refers to different kinds of media. Use a genuinely different storage category where practical, and separately ensure that one copy is offsite.

“My external drive is always plugged in.”

A permanently connected drive is exposed to the same compromised account or ransomware event as the computer. Schedule the backup, verify it completed, eject the drive and store it safely when idle.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

“The NAS is in another box, so it is offsite.”

Offsite describes location, not enclosure. A NAS beside the computer is still vulnerable to a home-level event. Add a remote copy or move a backup device to another location.

Best Value
Anker USB C Hub, 5-in-1 USBC to HDMI Splitter with 4K Display | 85W Max PD, 1 Powered USB-C 5Gbps & 2 Powered USB-A 3.0 5Gbps Data Ports, for MacBook Pro, MacBook Air, Dell and More (Black)
  • 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
  • Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
  • Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
  • HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
  • What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.

“The cloud folder shows my files, so restoration is covered.”

Check whether the service is synchronizing changes or retaining independent versions. Verify deletion recovery, retention and the exact restore steps before treating it as the third copy.

“The backup program says successful, so I am finished.”

Success messages do not prove that a file opens. Periodically restore and inspect representative files, and correct any permission, capacity or version-history problem you find.

“I will choose a schedule later.”

Until a schedule exists, the second and third copies become stale. Select an interval based on your acceptable recent data loss, then revisit it when your workload changes.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A practical decision checklist

  • Have you identified the files and devices that genuinely need protection?
  • Is the primary copy plus two backups clearly mapped?
  • Are the backups on two storage categories rather than only two identical devices?
  • Is at least one copy outside the location that holds the computer?
  • Can the local copy be disconnected when no backup is running?
  • Are sensitive files encrypted and are recovery keys safely available?
  • Does the schedule match how much recent work you can recreate?
  • Will you notice a failed run, a full destination or a lost account connection?
  • Have you restored a file and a folder recently and confirmed they open?
  • Do you understand the retention, versioning and deletion behavior of the remote service?

What the rule cannot promise

Three copies do not eliminate every risk. A forgotten password, lost encryption key, expired cloud account, unnoticed scheduling failure or corrupted source can still defeat recovery. The framework also does not prescribe a brand, model, capacity, service price or universal schedule. Treat it as a repeatable design check: maintain independent copies, separate at least one from the original location, limit exposure while idle and prove recoverability through testing.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.