The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →To apply the 3-2-1-1-0 backup rule, keep three copies of your files in total (the working copy plus two backups), use at least two storage media or platforms, place one backup offsite, keep one copy offline or otherwise protected, and verify that you can restore files with no unresolved errors. It is a practical way to reduce data-loss risk—not a guarantee. The final “0” means checking recovery, not simply seeing a “backup complete” message.
What the 3-2-1-1-0 backup rule means
The rule is a backup-design mnemonic documented as a best practice by backup vendor Veeam. Its elements are also supported by separate CISA recommendations, including offline backups and restoration testing. The exact mnemonic should not be attributed to CISA. Veeam’s backup strategy guide and the CISA StopRansomware Guide describe relevant practices.
As an Amazon Associate I earn from qualifying purchases.
- 3 copies: Your working files plus at least two backup copies. CISA describes the traditional 3-2-1 arrangement as production data and two backups. CISA’s LockBit advisory
- 2 media types: Store copies on two different storage media or platforms, such as a local disk and cloud/object storage. Two folders or accounts on the same device do not automatically count as distinct media.
- 1 offsite: Keep a copy in a separate physical location so a site-specific event is less likely to affect every copy.
- 1 protected: Keep at least one copy offline, air-gapped, or immutable. A removable drive disconnected after backup is one accessible offline option.
- 0 errors: Check backup results and test restores. Zero is the goal after verification, not a promise that errors can never occur.
How to set up the rule for personal files
1. Decide what you need to recover
List the files and folders that matter: for example, documents, photos, and other data stored locally on your computer or phone. Confirm that your chosen backup method actually includes those locations; a backup can only restore what it captured.
2. Make two backups in addition to the working copy
A straightforward arrangement is a local external hard drive plus a separate offsite copy, such as a properly vetted cloud backup service. CISA names both an external drive and a cloud service as options for device data. CISA’s device data guidance
#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Do not assume that a synchronized folder is an independent backup. Synchronization can mirror deletions or unwanted changes. Check whether the service retains previous versions or deleted files, and confirm that the files you care about are within the backup scope. An external hard drive is useful as one local destination, but it does not by itself provide all the layers in the rule.
3. Separate copies by medium and location
Use distinct storage media or platforms, and put at least one backup somewhere other than the place where your working files and local backup reside. A second copy kept beside the computer may help if a computer fails, but it does not protect against an event affecting that location. CISA includes physically separate, secure storage in its recovery guidance. CISA’s LockBit advisory
Rank #2
- Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
4. Keep one copy out of routine reach
For a removable-drive approach, run the backup and then disconnect the drive. Store it safely while it is not in use. CISA advises against leaving an external drive connected when it is not actively being used for backups. CISA’s device data guidance
For a business server or cloud setup, suitably configured immutable storage can be another way to make a copy harder to change or delete. Offline and immutable storage are alternatives in the rule, but they work differently: an offline drive must be reconnected to update or restore it, while immutable storage depends on its configuration and retention settings. CISA warns that misconfiguration can impose significant costs and that immutable storage may not satisfy some regulatory requirements. CISA’s StopRansomware Guide
Rank #3
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
5. Verify the backup and test a restore
Review backup results, then restore a small selection of files to a safe location. Open them and check that they contain the expected data. For systems and applications, test restoration in a controlled recovery environment and document the steps. CISA advises regularly testing backup availability and integrity in a disaster recovery scenario. Its guidance says: “Maintain offline, encrypted backups of critical data, and regularly test the availability and integrity of backups in a disaster recovery scenario.” CISA StopRansomware Guide
6. Repeat at a pace that fits your files
Choose a schedule based on how often your files change and how much recent work you could afford to lose. A backup that is too old leaves a larger gap between the last saved copy and a failure. CISA recommends backing up often but does not prescribe one interval that fits every file user. CISA StopRansomware Guide
Rank #4
- High capacity in a small enclosure – The small, lightweight design offers up to 6TB* capacity, making WD Elements portable hard drives the ideal companion for consumers on the go.
- Plug-and-play expandability
- Vast capacities up to 6TB[1] to store your photos, videos, music, important documents and more
- SuperSpeed USB 3.2 Gen 1 (5Gbps)
Choose an offline drive or a cloud-based protected copy
Neither approach is universally best. Compare how reachable the copy is from your everyday device, whether it is physically offsite, whether it provides a distinct medium or platform, how often it can be updated, how you will test restoration, and whether you can access the account or recovery keys when needed.
| Option | Useful role | Practical trade-off |
|---|---|---|
| Disconnected external drive | Can provide a local backup that is offline between backup sessions. | It must be reconnected to update or restore; keep it safely stored and test that files can be restored. |
| Cloud backup or storage | Can provide an offsite copy on a separate platform. | Check that versions or deleted files can be recovered, the selected files are included, and you retain account access. |
| Immutable storage | Can make stored data harder to alter or delete when configured appropriately. | Retention and configuration matter; CISA warns of potential costs from misconfiguration and possible regulatory fit issues. CISA guidance |
What the rule cannot guarantee
Multiple copies help only when they are complete, current enough for your needs, and restorable. A successful copy operation does not prove that recovery will work; that is why the zero-errors part calls for testing.
Best Value
- Plug-and-play expandability
- SuperSpeed USB 3.2 Gen 1 (5Gbps)
Ransomware may try to find and delete or encrypt backups that remain accessible. Disconnecting a drive or using correctly configured immutability reduces some exposure, but neither prevents every cause of data loss. Treat the rule as a design pattern, not a promise that a particular product, number of drives, or cloud service makes files safe. CISA supports key practices such as offline backups and restore testing; Veeam documents the full 3-2-1-1-0 formulation as a best practice.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
