📑 Table of Contents
One golden rule has held true in data protection for decades: the 3-2-1 backup rule. It looks simple, yet applied properly it protects you against almost every disaster scenario. This article explains what the rule is, why it works and how to put it into practice.
What Exactly Is the 3-2-1 Rule?
The rule comes down to three simple numbers:
- 3 copies: Keep at least three copies of your data (1 live + 2 backups).
- 2 different media/providers: Store those copies on at least two different media (e.g. one cloud + a different cloud or disk).
- 1 different location (offsite): At least one copy must live somewhere physically separate — independent of your server.
💡 Why exactly these numbers?
A single copy dies with a single failure. If two copies sit in the same place, both vanish when that place (server, data centre) goes down. 3-2-1 drives the probability that independent risks — hardware failure, server loss, ransomware and human error — all strike at the same time practically down to zero.
Why the Single Backup at Your Host Breaks the Rule
Many businesses relax because "my hosting company takes backups". But that backup usually sits on the same server or in the same data centre — which is only the "1" of the 3-2-1 rule. If the server burns, your account is suspended or you get hacked, both your site and that backup disappear together. We covered this in depth in Why isn't a hosting backup enough? .
How Do You Apply 3-2-1 in Practice?
- Copy 1: Your live site (production server).
- Copy 2: An automatic backup to a cloud (e.g. Google Drive or S3).
- Copy 3: A second backup with a different provider (e.g. Dropbox) — this also satisfies the "offsite" requirement.
Doing this by hand is tiring and error-prone. Yedekalma's multiple storage destinations feature writes a single backup to three different providers at once, satisfying the 3-2-1 rule automatically . On top of that your backups are stored AES-256 encrypted and are regularly put through a restore test .
A Modern Addition: "3-2-1-1-0"
Today experts add two more digits to the rule: one extra immutable copy (against ransomware) and 0 errors (meaning your backups have been tested and verified). Yedekalma covers the 0 errors requirement directly: the SHA-256 digest of every backup and the integrity of the archive are verified automatically on a regular basis. Immutability is in your hands — because your backups go to your own storage account, you can switch on features such as versioning at your provider to further protect them against an attacker.
In short: trusting a single backup is the same as having no protection. Put a system in place that applies the 3-2-1 rule automatically and keep your data safe in every scenario.
Frequently Asked Questions
What is the 3-2-1 backup rule?
It is the principle of keeping at least 3 copies of your data, storing those copies on 2 different media or providers, and keeping at least 1 copy in a different location (offsite). It reduces data loss from independent risks practically to zero.
Does my hosting company's backup satisfy the 3-2-1 rule?
Usually not. Hosting backups mostly sit on the same server or in the same data centre, which is only the '1' of the rule. If the server fails, both the site and the backup are lost.
How do I apply the 3-2-1 rule automatically?
Yedekalma's multiple storage destinations feature writes a single backup to several providers at once, satisfying the rule automatically, and it also verifies the integrity of every backup regularly.
Back Up Your Website Automatically and Securely
Sign up completely free right now, connect your site with the PHP Backup Module in five minutes (without handing over FTP or database passwords) and enjoy one-click recovery when disaster strikes. No credit card required.
Related pages: website backup · immutable (WORM) backup · all backup solutions
Start Your Free Trial