Three Copies, Two Lies: Rethinking Backup Strategy for the Sync Era

Ask any IT old-timer about backups and you'll get the same catechism: three copies of your data, on two different types of media, with one copy offsite. 3-2-1. It's been the gold standard since before the iPhone existed, and honestly, it served us well.

But here's the problem: you don't really store data anymore. You sync it. You stream it. You let Google or Apple or Dropbox hold a copy that quietly replicates across your laptop, your phone, and a server in Oregon. The classic rule wasn't written for that reality — and following it blindly can leave you with a false sense of security.

Where 3-2-1 Falls Apart

The rule assumed your copies were independent. A backup on an external drive and a backup in the cloud were two separate things that couldn't fail together.

Sync broke that assumption. If your Documents folder syncs to Dropbox and you also back up your laptop to an external drive, you might think you have two copies. What you actually have is one copy of a mistake, faithfully propagated everywhere. Delete the wrong folder on a Friday afternoon, and by Monday your sync service has helpfully erased it from every device you own. Some services offer 30-day version history — most people don't know that, and fewer pay for the tier that extends it.

Then there's ransomware, which has gotten scarily good at encrypting mapped network drives and cloud-synced folders alike. If all your copies are connected, all your copies are vulnerable.

The 3-2-1-1-0 Rule (and Why the Extras Matter)

The modern adaptation floating around enterprise IT circles adds two digits that matter a lot for regular people:

• 3 copies of your data
• 2 different media types
• 1 copy offsite
• 1 copy offline or immutable — physically disconnected or write-protected so ransomware can't touch it
• 0 errors — verified backups, because a backup you've never tested is a hope, not a plan

That fourth digit is the big one. An offline copy — a drive in a drawer, unplugged — is the only thing that reliably survives ransomware and a bad sync. The fifth digit addresses the dirty secret of backups: most people have never once tried restoring from theirs.

A Realistic Blueprint for Normal Humans

You don't need an enterprise budget. Here's a practical version:

Tier 1 — Sync everything. Keep your working files in a sync service (iCloud, OneDrive, Google Drive, whatever fits your ecosystem). This is convenience, not backup. Treat it that way.

Tier 2 — Versioned backup. Run a real backup tool — Time Machine on Mac, File History or something like Backblaze on Windows — to a drive or cloud backup service. Crucially, this should keep version history, so yesterday's version of a file you just mangled still exists.

Tier 3 — The cold copy. Once a month (or after any big project), copy your critical files to a drive, verify the copy, and unplug it. Stick it in a drawer. This is your ransomware insurance and your house-fire hedge — consider a second one in a relative's closet two states away.

The zero: Twice a year, actually restore something. Pull a random file from each tier. If it fails, you just saved yourself a future heart attack.

Match the Plan to Your Risk

A photographer with a decade of client work has different stakes than someone whose important files are mostly in Gmail. If your data is small and mostly documents, Tier 2 plus a quarterly cold copy might be plenty. If you're sitting on 4TB of irreplaceable RAW files, the offline copy isn't optional — it's the whole point.

The 3-2-1 rule isn't dead because the math was wrong. It's dead because the environment changed. Sync is convenient, but convenience and durability aren't the same thing. Build for the day everything syncs perfectly — right into the trash.