Cybersecurity

3-2-1 backup rule

Keep three copies of your data, on two different types of storage, with one copy offsite.

By Nick Irmo · Updated

What 3-2-1 backup rule means

The 3-2-1 rule protects you if a server fails, a provider has an outage or ransomware hits your main systems. Many teams add an offline or immutable copy that attackers cannot change. It is simple to follow and widely recommended.

Why it matters for your website

A single backup can fail, get deleted, or be locked by the same ransomware that hit your site. Spreading copies across different storage types and locations means one bad day does not wipe out years of content, orders and leads. It is a cheap insurance policy compared with rebuilding a site from scratch.

Example

A landscaping company keeps its live site on the host, a nightly backup in the host's backup tool, and a weekly copy in a separate cloud storage account. When the hosting account is compromised, the offsite copy is still clean.

Tips

  • Store at least one backup in an account your web host cannot access or delete.
  • Test a full restore a few times a year so you know the backups actually work.
  • Write down where each copy lives and who has the login.

Common mistakes

  • Counting the host's automatic backups as your only copy, even though they sit on the same provider.
  • Never checking whether backups finished, then finding months of failed jobs during an emergency.

Questions about 3-2-1 backup rule

What is 3-2-1 backup rule?
Keep three copies of your data, on two different types of storage, with one copy offsite.
Does the 3-2-1 rule apply to small websites?
Yes. Even a five-page brochure site has content, settings and form data you would hate to lose. The rule scales down easily with an automated backup plugin or service plus one offsite copy.
Is cloud storage enough to count as offsite?
Usually, as long as it is a separate account or provider from where your site lives. The point is that a single outage, hack or billing problem cannot reach every copy at once.

Learn more

Tell us what the site needs to do.

Share a few details and a budget range. We reply within one business day with a plan, a platform recommendation and a fixed quote.