Backing Up Your Business Files: The 3-2-1 Rule in Plain English
Backing Up Your Business Files: The 3-2-1 Rule in Plain English
What you will need: a computer with your business files, about an hour this week, and one or two of the following: an external hard drive, a cloud backup service account, or both.
What "3-2-1" means
The 3-2-1 rule is an easy way to remember what a safe backup looks like:
- 3 copies of your important files in total. Counting the files you work from every day, that means two additional backup copies.
- 2 different types of storage. Don't keep every copy on the same kind of thing. A common example is a hard drive plus the cloud. If all your copies are on one kind of storage, one kind of problem can affect all of them.
- 1 copy in a different location. Keep at least one copy away from the others (this is called "off-site"). That way a fire, flood, theft, or break-in at your office can't take everything at once.
Backup simply means a separate copy of your files, kept so you can get them back if the originals are lost, deleted, damaged, or locked up. Getting files back from a backup is called a restore.
Sync is not the same as backup
It's easy to think, "My files are in OneDrive (or Google Drive, or Dropbox), so I'm covered." That's a good start, but it isn't a backup.
Sync means keeping the same files identical across your devices and the cloud. When you change a file on your computer, the change shows up everywhere else. That's convenient, but it also means mistakes can travel everywhere.
Here's why sync alone falls short:
- Deleting a file can delete it everywhere. If you or an employee removes a folder by accident, the sync service may remove it from the cloud too.
- Damaged files can sync too. If a file becomes corrupted, or ransomware (malicious software that locks your files until you pay) changes it, the damaged version may sync up to the cloud.
- Recovery windows are limited. Many sync services keep deleted files or older versions for a while, but not forever. How long differs by service and by account type.
- Account problems affect everything. If your account is locked, hacked, or closed, your only copy may be out of reach.
A true backup keeps a separate copy, often with several older versions, so you can go back to how things looked last week or last month. Sync is still useful for sharing and working across devices. Just don't count it as one of your backup copies unless you've confirmed how it handles deletions and old versions.
Step 1: Find out what you need to protect
- Make a quick list of where your business files live: your computer's Documents and Desktop folders, a shared drive, email exports, accounting data, customer records, photos, and so on.
- Check whether any files exist only on one computer, or only on a phone. Those are your most at-risk files.
- Mark the files you couldn't do business without, such as invoices, contracts, customer lists, and accounting files. Make sure those are covered first.
Step 2: Pick a setup that fits your budget
These three examples build on each other. None is the only right answer, so pick the one that fits how your business works. We don't recommend specific paid products or quote prices here.
Setup A: Lowest cost, a little hands-on work
- Copy 1: Your original files on your computer.
- Copy 2: A backup on an external hard drive plugged into your computer.
- Copy 3 (off-site): A second external drive that you swap with the first on a regular schedule (weekly works well) and keep at home or another location.
Trade-off: It costs the least, but it depends on you remembering to swap drives. If you forget, the off-site copy gets old. Also, all three copies are on hard drives, so this setup covers the "3" and the "1" but does not yet meet the "2 types of storage" part. It only will once you add a different type of storage, such as a cloud backup. Think of it as a solid starting point, and add a cloud backup later to complete the rule.
Setup B: Middle ground, balanced cost and effort
- Copy 1: Your original files on your computer.
- Copy 2: A backup on an external drive in your office.
- Copy 3 (off-site): A cloud backup service that copies your files over the internet to a secure location elsewhere.
Trade-off: There's an ongoing subscription for the cloud service, but the off-site copy updates on a schedule without you swapping anything. This setup uses two types of storage (hard drives and the cloud), so it meets the full 3-2-1 rule. Look for a service that is designed for backup (not only sync) and that keeps older versions of your files.
Setup C: More protection for growing teams
- Copy 1: Original files on your computers or a shared office storage device.
- Copy 2: A NAS (network attached storage, a small storage box that connects to your office network so several computers can back up to it), or a mix of a NAS and external drives.
- Copy 3 (off-site): A cloud backup service that backs up the NAS or your main computers.
Trade-off: This costs more to set up and takes more technical care. It makes sense when several people share files or when losing a day of work would hurt. You may want help with setup.
Step 3: Set up your local backup (the external drive)
Works for Setups A, B, and C if you're using an external drive.
Plug your external drive into your computer, then follow the steps for your system.
Windows 11
- Open Control Panel > System and Security > Save backup copies of your files with File History.
- Select Turn on.
- If no drive is chosen by default, select Select drive and choose your external drive.
- Check which folders will be backed up. File History backs up your libraries (Windows groupings that gather related folders in one place) and your Desktop by default. If a folder from your Step 1 list isn't in a library or on the Desktop, add it to a library first, or it won't be included.
- Let the first backup run.
- Protect the drive with encryption, especially if it will leave your office or be carried around. Encryption scrambles the data so that only someone with the password can read it.
- On Windows Pro, Enterprise, or Education, use BitLocker. Search the Start menu for Manage BitLocker.
- On Windows Home, BitLocker isn't available. Ask ITProsphere or your IT provider about a suitable encryption option for the backup drive.
If you're still using Windows 10, note that Microsoft ended support for it in October 2025, so it should be upgraded.
Mac
- Choose Apple menu > System Settings > General > Time Machine, then click Add Backup Disk.
- Select your external drive.
- Turn on Encrypt Backup when you set up the disk, and create a backup password. Store that password somewhere safe, because you'll need it to restore.
- Make sure the folders you listed in Step 1 are included, then let the first backup run.
The first backup may take hours, depending on how many files you have. That's normal. After that, keep the drive connected (or connect it regularly) so backups can keep running on schedule.
Step 4: Set up your off-site copy
If you're using Setup A (a second drive):
- Repeat Step 3 with your second external drive.
- Pick a regular swap day, such as every Friday.
- Take the most recent drive to your off-site location, and bring the other one back to use.
- Put a recurring reminder in your calendar.
- When you're ready, add a cloud backup (see below) so you meet the "2 types of storage" part of the rule.
If you're using Setup B or C (cloud backup):
- Choose a cloud backup service. When comparing, check whether it:
- Keeps older versions of your files, not just the latest one.
- Keeps deleted files for a reasonable period.
- Encrypts your data.
- Supports your computer type and the kind of storage you use.
- Create an account and protect it with a strong, unique password and two-factor authentication (a second step, like a code from your phone, when you sign in).
- Install the service's backup program and choose the folders to protect.
- Run the first backup. Depending on your internet speed and how much data you have, this could take days. That's normal. Leave the computer on and connected.
- Check the service's dashboard (the page or app where it shows your backup status) to confirm the first backup finished and that your important folders are listed.
- Confirm the backup is set to run automatically, so you don't have to remember it.
Step 5: Test your restore every month
A backup you've never tested is a guess. A quick monthly test shows you the backup works before you actually need it.
- Pick one file that isn't critical, such as an old document or photo.
- Restore it from your backup:
- Windows 11: Open Control Panel > System and Security > File History, then select Restore personal files. Browse to the file, pick a version, and select the green Restore button.
- Mac: Open the folder where the file lives in Finder, then open Time Machine (from the menu bar or Launchpad). Scroll back to an earlier backup, select the file, and click Restore.
- Cloud backup: Sign in to the service's dashboard and use its restore or download option.
- Open the restored file and make sure it looks right.
- Write down the date and the result. A simple note in your calendar is enough.
If the restore fails, or the file you need isn't in the backup, fix it now. Don't wait until something goes wrong.
Step 6: Keep it running
Backups tend to stop quietly. A few minutes a month keeps them working:
- Check the last backup date in File History, Time Machine, or your cloud dashboard. If it's more than a few days old, find out why.
- Swap your drives on schedule if you use Setup A.
- Add new places to the backup when you start keeping files somewhere new, like a new folder, a new computer, or a new employee's laptop.
- Keep one copy disconnected. Ransomware can lock files on any drive that's plugged in at the time. A drive that's unplugged and stored somewhere else, or a cloud backup that keeps older versions, gives you a clean copy to restore from.
If you lose files
- Stop and don't panic. Avoid saving new files over the area where the lost files were.
- If you suspect ransomware (files suddenly won't open, have strange new names, or a message demands payment), disconnect the computer from the network and unplug any backup drive right away. Then call your IT provider before restoring anything.
- Restore from your most recent good backup, using the same steps as your monthly test.
Quick checklist
- Listed where my business files live
- Chose Setup A, B, or C
- Local backup set up and encrypted
- Off-site copy set up (second drive or cloud backup)
- First backups finished
- Restore tested, with the date written down
- Monthly reminder set to check backups and test a restore
Not sure which setup fits your business, or want a second set of eyes on what you have? Get in touch.