Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Apply the 3-2-1-1-0 backup rule by keeping your working files plus two backups, using two kinds of storage, storing one copy offsite, keeping one copy offline or otherwise protected, and regularly verifying that you can restore files. It is a practical design pattern—not a guarantee. A backup counts only if it includes the files you need, is recent enough, and can be restored.

What the 3-2-1-1-0 backup rule means

The rule turns a backup plan into five checks. The first three numbers describe copies and their separation; the final zero is a target for verified errors, not a promise that failures cannot occur. Veeam presents the formulation as a backup best practice. CISA independently recommends offline backups and restoration testing, but should not be credited with the exact mnemonic.

  • 3 copies: Your working files plus at least two backups. CISA describes the traditional 3-2-1 approach as production data and two backups.
  • 2 media types: Use two different types of storage media or platforms, such as a local disk and cloud storage. Two folders or accounts on one device do not automatically count as different media.
  • 1 offsite copy: Store a copy at a separate physical location so a site-specific event is less likely to affect every copy.
  • 1 protected copy: Keep at least one copy offline, air-gapped, or immutable. For a home user, a removable drive disconnected after a backup is a straightforward offline example.
  • 0 errors: Check backup results and test restoration. A “backup complete” message alone does not prove the files are usable.

See Veeam’s backup strategy guide for its description of the rule, and CISA’s LockBit advisory for the traditional three-copy approach.

How to apply the rule to personal files

1. Decide which files must be recoverable

Make a list of important documents, photos, videos, and other locally stored data. Check that your backup method actually includes those folders. A backup can run successfully while omitting a location you assumed was covered.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sale
Seagate 2TB Portable Hard Drive | USB 3.0 (STGX2000400)
  • Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
  • Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
  • To get set up, connect the portable hard drive to a computer for automatic recognition no software required
  • This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
  • The available storage capacity may vary.

2. Make two backups in addition to the working files

A practical starting arrangement is one local backup on an external hard drive and a second copy stored offsite, such as with a properly vetted cloud service. CISA identifies an external drive or cloud service as options for backing up device data in its consumer device guidance.

Do not assume a synchronized cloud folder is a full backup. Sync can propagate deletion or unwanted changes. Confirm that the service keeps recoverable versions or deleted files, and that the backup includes the data you intend to protect.

Rank #2
Seagate Portable 5TB External Hard Drive HDD – USB 3.0 for PC, Mac, PS4, & Xbox - 1-Year Rescue Service (STGX5000400), Black
  • Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
  • Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
  • To get set up, connect the portable hard drive to a computer for automatic recognition software required
  • This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
  • The available storage capacity may vary.

3. Separate copies by storage type and location

Choose distinct media or platforms, then put at least one backup somewhere other than the location of your computer and local backup drive. A second folder on the same disk is not an independent copy, and an offsite copy matters because a single event at home could affect both a computer and a nearby drive.

4. Keep one copy out of ordinary reach

After an external-drive backup finishes, disconnect the drive and store it safely. CISA advises against leaving an external drive connected when it is not actively being used for backups. A drive that remains connected may be accessible to malware or an attacker who compromises the computer.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Seagate Portable 1TB External Hard Drive HDD – USB 3.0 for PC, Mac, PlayStation, & Xbox, 1-Year Rescue Service (STGX1000400) , Black
  • Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
  • Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
  • To get set up, connect the portable hard drive to a computer for automatic recognition no software required
  • This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
  • The available storage capacity may vary.

Businesses may use appropriately configured immutable storage instead. Offline and immutable storage are alternatives in the rule, but they work differently: an offline drive must be reconnected to update or restore it, while immutable storage depends on retention and access settings. CISA cautions that misconfiguration can create significant costs and that immutable storage may not meet some regulatory requirements.

5. Check the backup and test a restore

Review backup results, then periodically restore a small selection of files to a safe location. Open them and confirm that they contain the expected data. CISA recommends regularly testing backup procedures and checking availability and integrity in a disaster recovery scenario. For systems and applications, use a controlled recovery environment and document the restoration steps.

Rank #4
Sale
WD 2TB Elements Portable External Hard Drive for Windows, USB 3.2 Gen 1/USB 3.0 for PC & Mac, Plug and Play Ready - WDBU6Y0020BBK-WESN
  • High capacity in a small enclosure – The small, lightweight design offers up to 6TB* capacity, making WD Elements portable hard drives the ideal companion for consumers on the go.
  • Plug-and-play expandability
  • Vast capacities up to 6TB[1] to store your photos, videos, music, important documents and more
  • SuperSpeed USB 3.2 Gen 1 (5Gbps)

CISA’s StopRansomware Guide states: “Maintain offline, encrypted backups of critical data, and regularly test the availability and integrity of backups in a disaster recovery scenario.” Automated recovery verification, such as the approach described in Veeam’s guide, is an option for organizations; it is not a requirement for an ordinary file backup.

6. Set a schedule that matches how often files change

Back up often enough that the gap between copies is acceptable if your device fails. If you edit important files daily, a backup that runs only occasionally could leave substantial recent work unrecoverable. CISA advises backing up data often and testing restoration, but does not set one interval that suits every person. Choose a schedule based on how much recent work you can afford to lose.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What the rule can—and cannot—protect against

  • Out-of-date or incomplete copies: Multiple copies do not help with files that were never included or changes made after the last backup. Check both coverage and freshness.
  • Ransomware and other access-based threats: Ransomware may try to encrypt or delete backups it can reach. Disconnecting a drive or using correctly configured immutability reduces that exposure, but neither prevents every cause of data loss.
  • Restore failures: A completed copy job is not proof of recovery. Test actual files, and for more complex systems, practice the recovery procedure.
  • Operational and retention trade-offs: An offline drive needs handling and regular connection to update. Immutable storage requires careful configuration, and retention choices can affect cost and compliance.

The rule is a best-practice mnemonic, not a guarantee tied to a particular product, drive count, or cloud service. CISA’s guidance supports key practices such as offline backups and restoration testing; it does not establish that following this exact formula eliminates data-loss risk.

Quick Recap

SaleBestseller No. 1
Seagate 2TB Portable Hard Drive | USB 3.0 (STGX2000400)
Seagate 2TB Portable Hard Drive | USB 3.0 (STGX2000400)
This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable; The available storage capacity may vary.
$119.99
Bestseller No. 2
Seagate Portable 5TB External Hard Drive HDD – USB 3.0 for PC, Mac, PS4, & Xbox - 1-Year Rescue Service (STGX5000400), Black
Seagate Portable 5TB External Hard Drive HDD – USB 3.0 for PC, Mac, PS4, & Xbox - 1-Year Rescue Service (STGX5000400), Black
This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable; The available storage capacity may vary.
$227.37
Bestseller No. 3
Seagate Portable 1TB External Hard Drive HDD – USB 3.0 for PC, Mac, PlayStation, & Xbox, 1-Year Rescue Service (STGX1000400) , Black
Seagate Portable 1TB External Hard Drive HDD – USB 3.0 for PC, Mac, PlayStation, & Xbox, 1-Year Rescue Service (STGX1000400) , Black
This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable; The available storage capacity may vary.
$119.80
SaleBestseller No. 4

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.