Count recoverable copies
Three copies is an industry convention, not a guarantee.
Keep the working data plus two recoverable copies. Copies that share one device, account, or deletion path may fail together and should not be counted as independent.
Separate failure domains
Two media types and one offsite copy reduce common-mode loss.
A local external drive covers fast recovery; an offsite or isolated copy covers theft, fire, and some ransomware paths. Choose risks explicitly.
Sync and backup solve different jobs
Synchronization can propagate deletion or corruption.
A service counts as backup only when it preserves recoverable versions or snapshots under the failure you are planning for. Verify retention and recovery rules.
Test a restore
An untested backup is only a hopeful copy.
Schedule small restore drills, record encryption credentials safely, and keep at least one offline or otherwise protected copy as recommended in ransomware guidance.
QUESTIONS THIS ANSWERS
Questions this answers
- What does the 3-2-1 backup rule mean?
- Why is cloud sync not always a backup?
Found something wrong? Report an error or read the corrections policy.
3 SOURCESEvidence ledger
Sources
- 01StopRansomware Guide ↗
Cybersecurity and Infrastructure Security Agency · accessed 31 Aug 2026
- 02Back Up Your Mac with Time Machine ↗
Apple Support · accessed 31 Aug 2026
- 03Guidelines for Media Sanitization ↗
National Institute of Standards and Technology · accessed 31 Aug 2026