📑 Table of Contents
One golden rule has held true in data protection for decades: the 3-2-1 backup rule. It looks simple, yet applied properly it protects you against almost every disaster scenario. This article explains what the rule is, why it works and how to put it into practice.
What Exactly Is the 3-2-1 Rule?
The rule comes down to three simple numbers:
- 3 copies: Keep at least three copies of your data (1 live + 2 backups).
- 2 different media/providers: Store those copies on at least two different media (e.g. one cloud + a different cloud or disk).
- 1 different location (offsite): At least one copy must live somewhere physically separate — independent of your server.
💡 Why exactly these numbers?
A single copy dies with a single failure. If two copies sit in the same place, both vanish when that place (server, data centre) goes down. 3-2-1 drives the probability that independent risks — hardware failure, server loss, ransomware and human error — all strike at the same time practically down to zero.
Why the Single Backup at Your Host Breaks the Rule
Many businesses relax because "my hosting company takes backups". But that backup usually sits on the same server or in the same data centre — which is only the "1" of the 3-2-1 rule. If the server burns, your account is suspended or you get hacked, both your site and that backup disappear together. We covered this in depth in Why isn't a hosting backup enough? .
How Do You Apply 3-2-1 in Practice?
- Copy 1: Your live site (production server).
- Copy 2: An automatic backup to a cloud (e.g. Google Drive or S3).
- Copy 3: A second backup with a different provider (e.g. Dropbox) — this also satisfies the "offsite" requirement.
Doing this by hand is tiring and error-prone. Yedekalma's multiple storage destinations feature writes a single backup to three different providers at once, satisfying the 3-2-1 rule automatically . On top of that you can switch on optional AES-256 encryption; backups go through 8-layer verification and are put through a weekly sample restore test .
A Modern Addition: "3-2-1-1-0"
Today experts add two more digits to the rule: one extra immutable copy (against ransomware) and 0 errors (meaning your backups have been tested and verified). Of these two, Yedekalma supports the 0 errors requirement: every backup goes through 8-layer verification (coverage, completeness of the database dump, integrity, presence at the destination…) and a weekly sample restore test is run. Immutability is in your hands — because your backups go to your own storage account, you can switch on features such as versioning at your provider to further protect them against an attacker.
In short: trusting a single backup is the same as having no protection. Put a system in place that applies the 3-2-1 rule automatically and keep your data safe in every scenario.
Frequently Asked Questions
What is the 3-2-1 backup rule?
It is the principle of keeping at least 3 copies of your data, storing those copies on 2 different media or providers, and keeping at least 1 copy in a different location (offsite). It reduces data loss from independent risks practically to zero.
Does my hosting company's backup satisfy the 3-2-1 rule?
Usually not. Hosting backups mostly sit on the same server or in the same data centre, which is only the '1' of the rule. If the server fails, both the site and the backup are lost.
How do I apply the 3-2-1 rule automatically?
Yedekalma's multiple storage destinations feature writes a single backup to several providers at once, satisfying the rule automatically, and it also verifies the integrity of every backup regularly.
Back Up Your Website Automatically and Securely
Sign up completely free right now, connect your site with the PHP Backup Module in five minutes (without handing over FTP or database passwords) and, when disaster strikes, bring your site back step by step with the restore wizard. No credit card required.
Related pages: website backup · immutable (WORM) backup · all backup solutions
Start Your Free Trial