Free tools Windows power users keep installed
One-click scans. No signup required.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Use three total copies of the AI files you cannot replace, on at least two different kinds of storage, with one copy kept off-site. For a desktop or workstation, that usually means the working hard drive, an encrypted external drive that is disconnected after backups, and a separately managed remote backup. This arrangement limits the damage from drive failure, theft, fire, accidental deletion, and ransomware. Buying an external drive by itself is not a backup plan: the copy must be separated, protected, and periodically restored in a test.
What the 3-2-1 rule means
The 3-2-1 rule is a recovery design, not a particular product. CISA’s Data Backup Options defines it as three copies of important files in total, including the working copy; two different media types; and one copy stored off-site. The rule is deliberately simple so it can be applied to a home workstation, a small studio, or a larger local AI environment.
| Part of the rule | What to count | Why it matters |
|---|---|---|
| Three copies | One working copy plus two backup copies | A single failed disk does not eliminate every copy. |
| Two media types | For example, an internal hard drive, an external drive, and remote storage | Different media reduce shared hardware and environmental failure modes. |
| One off-site copy | A backup stored in another location, such as a vetted remote service | A fire, theft, flood, or other local event cannot destroy every copy at once. |
Three disks sitting next to one another and permanently mounted to the same computer do not provide three independent recovery points. A power event, malware infection, theft, or accidental deletion can affect all of them. The value comes from separation and recoverability, not from the number of drive labels.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Identify the AI files you actually need to recover
There is no universal “AI folder.” Before selecting storage, list the files that would let you resume work after a failed computer or damaged drive. The following is a practical inventory prompt, not an official AI-specific checklist.
#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
- Original data: datasets, source documents, images, audio, video, labels, and metadata that you are allowed to retain.
- Projects and code: scripts, notebooks, dependency or environment files, automation, build instructions, and documentation.
- Prompts and configuration: prompt libraries, system instructions, parameter files, evaluation settings, API configuration, and reproducibility notes.
- Local model files: model weights, checkpoints, adapters, embeddings, indexes, and other files stored on your disks.
- Outputs worth keeping: generated media, reports, experiment results, logs, evaluation sets, and deliverables.
- Credentials and keys: only where storing them is appropriate and secure; never place secrets in an unencrypted backup or an easily shared folder.
Mark each item as replaceable, reproducible, or irreplaceable. A model that can be downloaded again may need less frequent protection than a private dataset or months of experiment results. Keep a small text or spreadsheet inventory outside the main project tree so you know what each backup job includes.
Build a practical three-copy arrangement
Copy 1: the working drive
This is the internal drive or directly attached storage where your AI projects run. It is not a backup, but it is the first copy counted by the rule. Organize projects so that source data, code, configurations, and outputs have predictable locations. Clear naming makes it easier to select the right folders and to verify a restoration later.
Copy 2: an encrypted external drive
Use an external drive with enough usable capacity for the files selected in your inventory, plus room for growth and retained versions. Capacity should be based on the size of the protected data and the retention history you intend to keep; the general guidance does not establish a universal capacity number. Check that the drive works with your computer’s operating system and connection standard.
Recommended Free Tools
Encryption is a setup requirement, not an automatic property of every external drive. Use the drive or file-encryption capability supported by your operating system, keep the password or recovery key in a separate secure location, and verify that you can unlock the backup before an emergency. Without the credential, an encrypted drive may be unrecoverable even when its hardware is intact.
Copy 3: an off-site backup
The third copy should be maintained in another location. A vetted remote backup service can provide this separation, but review its retention, historical-version, account-security, encryption, and restoration features before relying on it. A second physical drive stored at a different site can also satisfy the location requirement if it is updated and protected with the same care.
Rank #2
- Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Do not confuse synchronization with a recoverable backup. If an encrypted or corrupted local file synchronizes, the damaged version may replace the healthy remote copy. A suitable off-site design needs usable historical versions, retention controls, immutability, or an equivalent safeguard against unwanted changes.
Choose local and remote storage by failure mode
| Consideration | External local drive | Remote or cloud backup |
|---|---|---|
| Exposure to the same physical event | Vulnerable if kept beside the computer during theft, fire, flood, or a power incident. | Can survive a local event when the provider and account are separately secured. |
| Isolation from ransomware | Can be disconnected after the job finishes; a mounted drive remains exposed. | Depends on the service’s access controls, retention, and recovery design. |
| Immutability or version history | Requires a backup method and storage arrangement that retain older versions. | Must be confirmed in the service terms; ordinary synchronization may propagate damage. |
| Encryption and account security | Encrypt the drive or files and protect the unlock credential. | Review provider encryption, account protection, and your own sign-in security. |
| Recovery speed | Usually fast for large local datasets because it avoids internet bandwidth. | Initial or full restores can be limited by bandwidth and service procedures. |
| Restore evidence | You can restore a sample directly to a spare local folder. | You must test that the provider can deliver complete, usable historical files. |
These options are complementary rather than mutually exclusive. A local copy is convenient for a large restore; an off-site copy protects against a local disaster. The exact combination should match your data volume, risk tolerance, network capacity, and the recovery features you can verify.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchSet up the plan step by step
- Write the inventory. Record the folders, databases, model files, and outputs that must be recoverable. Note their approximate size, owner, and whether they can be recreated.
- Define the three copies. Name the working location, the encrypted local backup location, and the off-site destination. Record which folders are included in each job.
- Prepare the external drive. Format it using a file system supported by the computers that must read it, enable appropriate encryption, and store the recovery credential separately. Create a top-level folder that identifies the computer and backup date.
- Configure versioned backups. Choose a method that keeps prior versions or snapshots instead of only mirroring the newest state. A mirror alone can reproduce accidental deletion or corruption.
- Run the first local backup. Keep the computer connected until the job completes. Check the job report, but do not treat a “success” message as proof that files can be opened.
- Disconnect the external drive. Safely eject it and physically unplug it when the backup is not running. Store it in a secure, dry place away from the computer. CISA advises disconnecting external storage because ransomware can reach an attached backup.
- Configure the off-site copy. Use a separately secured account and confirm that the service offers recoverable historical versions or another protection against synchronized damage. Do not assume that a folder mirrored to the cloud is an independent backup.
- Protect access. Use strong, unique credentials and the account-security controls available for the remote service. Keep encryption keys and recovery codes where a device failure will not destroy them.
- Document recovery. Write down where each copy lives, how to unlock it, which folders are included, and the order in which a restore should occur. Keep this document available without exposing passwords.
- Perform a test restore. Restore representative files to a separate, safe location and open them with the applications that use them. Record what worked and correct any missing folders, permissions, or unreadable files.
Keep the removable backup offline between jobs
An external drive is most useful when it is available for a controlled backup and unavailable to malware the rest of the time. If it remains plugged in and writable, ransomware can treat it as another target, delete its contents, or encrypt the backup along with the working files.
- Connect the drive only when you are ready to run or verify a backup.
- Wait for the backup and any integrity check to finish.
- Safely eject it through the operating system before unplugging it.
- Store it somewhere physically secure and separate from the workstation.
- Use another protected copy if you need continuous access while the primary local drive is offline.
Offline does not mean forgotten. A drive that is disconnected for months may lack recent projects. Set a reminder or calendar event that fits how often your files change, then reconnect, back up, verify, and disconnect. The available guidance recommends frequent backups but does not prescribe one universal interval; your change rate and acceptable data-loss window determine the schedule.
Use encryption without losing the key
Encryption protects data on removable media if the drive is lost or stolen. It does not protect an already-unlocked drive from ransomware or an attacker using your active account. Apply encryption to the external copy and protect the remote account according to the controls those systems provide.
Rank #3
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Store the unlock password or recovery key in a secure location that is independent of the encrypted drive. A password saved only in a file on the computer being backed up disappears with that computer. Conversely, do not leave an unprotected paper or text copy where anyone who finds the drive can use it. Test the credential by unlocking the drive during a planned restore exercise.
Encryption can also affect recovery logistics. If another person must restore files for you, they need an authorized way to obtain the key. Document that process without publishing the secret in the backup’s folder names, scripts, or logs.
Make the off-site copy a real backup, not just a sync folder
Synchronization is designed to make locations match. Backup is designed to let you go back to an earlier, usable state. Those goals differ when a local file is deleted, overwritten, corrupted, or encrypted. CISA’s October 2023 StopRansomware Guide warns that automated cloud synchronization can carry encrypted local files into the cloud and overwrite unaffected copies.
Before designating a remote destination as your off-site copy, confirm:
- How many historical versions are retained and for how long.
- Whether deleted files remain recoverable during a defined retention period.
- Whether an attacker who compromises the computer can also delete every remote version.
- Whether the service supports immutable or otherwise protected recovery points.
- How large restores are delivered and what happens if the account is locked.
- Whether encryption is applied in transit and at rest, and who controls the keys.
If the service cannot provide those answers, treat it as synchronization or convenience storage rather than your only off-site recovery copy. You can still use it, but keep another independent, versioned copy.
Rank #4
- High capacity in a small enclosure – The small, lightweight design offers up to 6TB* capacity, making WD Elements portable hard drives the ideal companion for consumers on the go.
- Plug-and-play expandability
- Vast capacities up to 6TB[1] to store your photos, videos, music, important documents and more
- SuperSpeed USB 3.2 Gen 1 (5Gbps)
Test that restoration works
A backup application reporting “completed” proves only that a job reached its own success condition. CISA recommends testing backup availability and integrity in a recovery scenario. Testing catches excluded folders, expired credentials, unreadable archives, damaged files, and assumptions about how a project is reconstructed.
A practical test procedure
- Select a small set of representative files: a dataset sample, a code project, a configuration file, a model checkpoint, and an output file when applicable.
- Restore them to a new folder or spare machine, never over the live originals.
- Open each file with the software normally used to read it. For code, check that the project structure and required environment notes are present.
- Compare file sizes, checksums where appropriate, timestamps, and directory contents with the original inventory.
- For a remote backup, verify that you selected a historical recovery point rather than the current synchronized state.
- Record the restore duration, missing items, and any credentials or steps that were unclear.
- Fix the backup configuration and repeat the test after significant changes to storage, software, or the project layout.
Restore testing should include the failure you are planning for. If the concern is a lost workstation, practice on another computer. If the concern is ransomware, use an offline copy and a clean destination. Never test by deliberately infecting a production system.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Plan for common failures
The external drive is always connected
Disconnect it after each completed job. If you need unattended protection, use a separate mechanism with retention and access controls rather than assuming a permanently mounted disk is isolated.
The remote folder contains only encrypted files
Stop treating the synchronized folder as your recovery point. Locate an older version or protected snapshot, restore it to a clean location, and configure retention or a separate backup path that cannot be overwritten by the local encryption event.
The backup ran out of space
Recheck the inventory and growth rate, then select storage that accommodates the protected data and retained versions. Do not solve the problem by silently excluding datasets, checkpoints, or outputs that your recovery plan requires. If some files are intentionally excluded because they are reproducible, document where they can be obtained and how to recreate the environment.
Best Value
- Plug-and-play expandability
- SuperSpeed USB 3.2 Gen 1 (5Gbps)
The drive was lost or stolen
Encryption limits unauthorized access to the data, provided the unlock credential was not stored with the drive. Replace the missing copy, rotate exposed credentials, and verify that the off-site copy is still available.
The backup says success but a file will not open
Restore another version and inspect the source for corruption. Check whether the backup tool skipped locked, oversized, or unsupported files. Update the inventory and schedule another test after correcting the cause.
You cannot find the encryption key
Do not reformat or overwrite the drive. Search the documented secure location and account recovery records. If the key is genuinely unavailable, the encrypted copy may not be recoverable; this is why key management belongs in the plan, not as an afterthought.
Review the plan as your AI workload changes
Local AI projects often grow when new datasets, checkpoints, generated media, or experiment logs accumulate. Review the inventory whenever you add a new tool, move a project, change a model-storage location, or begin retaining a new class of output. A backup that omits a newly created folder can appear healthy while failing the actual recovery requirement.
Also review who can access each copy. The working computer, removable drive, and remote account should not all depend on one password or one device. Keep recovery documentation current, verify that the off-site account remains paid and accessible when applicable, and repeat a restore test after major configuration changes.
What a complete plan looks like
A complete arrangement has a known inventory, three counted copies, two media types, and one copy outside the local site. The removable copy is encrypted, disconnected between jobs, and stored safely. The off-site copy has version history or an equivalent recovery safeguard instead of relying on synchronization alone. Finally, representative files have been restored successfully to a separate location.
That combination addresses different failure modes: hardware failure, accidental deletion, theft, local disasters, unauthorized access to removable media, and ransomware that searches for connected backups. The 3-2-1 rule does not guarantee that every file can be recovered, but it gives you a concrete structure for finding gaps before an incident does.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
