Every laptop we've ever helped recover data from had the same story. "I meant to back it up." "I thought iCloud was backing it up." "I had a backup, but I never checked it." Data loss is the single most expensive tech problem in a household or small business, and it's also the most preventable.
This guide is what we set up for our own families. It follows the 3-2-1 rule (3 copies, 2 different storage types, 1 offsite) using specific tools that work in 2026, cost under $10/month, and — critically — actually run without your involvement.
1. Why the 3-2-1 rule matters
3-2-1 sounds like accountant-speak. It's not. Every part of it protects against a specific failure mode:
- 3 copies — because any single copy will fail eventually. Not "might." Will.
- 2 different storage types — because if one storage medium fails (a hard drive, a cloud provider, a NAS), the other type is unlikely to fail the same day.
- 1 offsite — because a house fire, a burglary, or ransomware doesn't distinguish between your working files and your backup drive sitting on the same desk.
Skip any part of this and your backup plan has an obvious hole. Follow it and data loss becomes almost impossible.
2. Copy 1: your working machine
This is the copy you use every day. Your laptop, phone, workstation. Nothing special here — but two things matter:
- Full-disk encryption should be on. FileVault on Mac (usually on by default), BitLocker on Windows Pro or Device Encryption on Windows Home. Non-negotiable for anything portable.
- The SSD must have room to breathe. Backup software fails silently when the drive is over 95% full. Keep 15% free.
If you're on a spinning hard drive still, see our 7 signs your laptop needs an SSD — the upgrade also makes backups faster.
3. Copy 2: local backup (same house, different device)
The second copy protects against your working machine failing. Options in order of preference:
On Mac: Time Machine + a $60 external SSD. Time Machine is Apple's free built-in backup tool. Buy a Crucial X6 1TB portable SSD or Samsung T7 1TB, plug it in, macOS will offer to use it for Time Machine. Set it and forget it. Backups happen automatically whenever the drive is connected.
On Windows: File History + a $60 external SSD. File History is Windows' built-in equivalent. Settings → Update & Security → Backup → Add a drive. Same set-and-forget model.
For families / small offices: a NAS (Network Attached Storage). A Synology DS224+ with two 4TB drives (around $600 total) gives you 4 TB of always-on backup that everyone in the household or office can back up to over Wi-Fi. Overkill for one person; genuinely useful for 3+ users or businesses.
One warning: don't leave your external backup drive plugged in 24/7 for a single home laptop. If ransomware hits, an always-connected drive gets encrypted too. Plug in weekly, run the backup, unplug.
4. Copy 3: offsite / cloud (the one most people skip)
The final copy protects against everything the first two can't: house fire, theft, ransomware, flooding, coffee-on-the-laptop-and-the-backup-drive-was-in-the-same-bag.
For most personal and small-business use, the cheapest and most reliable option is cloud backup software:
Backblaze — $99/year for unlimited data. Set it up once, it uploads everything (except system files) continuously in the background. Restore individual files via web browser, or order a physical hard drive with your entire backup shipped to you if you lose everything. This is what we use personally. Backblaze here — the flat-rate model is genuinely competitive in a market obsessed with tiered pricing.
iDrive — $80/year for 5 TB. Alternative if Backblaze isn't available in your region. Slightly more feature-rich (versioning, mobile backup) but the unlimited-data model at Backblaze is usually a better fit.
Arq Backup — $60 one-time + your own cloud storage (S3, Wasabi, Backblaze B2). Best for technical users who want more control. You buy the software once and pay separately for storage (often cheaper than bundled options for smaller data sets).
What about iCloud / Google Drive / OneDrive? These are not backups. They are sync services. If you delete a file locally, it deletes from the cloud too. If ransomware encrypts your files locally, it encrypts them on iCloud too. Sync ≠ backup. Use these for convenience; use one of the above for actual backup.
5. Backing up your phone (still important)
Your phone often has more irreplaceable data than your laptop — photos, contacts, messages, app data. Two-layer approach:
iPhone:
- iCloud Backup enabled (Settings → your name → iCloud → iCloud Backup). Free 5 GB is enough for basic; upgrade to 200 GB ($3/month) if you have significant photo library.
- Photos backup separately to Google Photos (free 15 GB, or 100 GB for $2/month) or Amazon Photos (free unlimited full-resolution for Prime members). Belt AND braces on photos specifically — they're irreplaceable.
Android:
- Google One backup enabled (Settings → Google → Backup).
- Photos to a second service — same logic as iPhone. Amazon Photos or iCloud for Windows work fine as a Google Photos backup.
The point is redundancy. Google, Apple, and Amazon have all had photo-service outages and account-lockouts. Belt AND braces means never losing five years of photos to a policy change.
Rule of thumb: you don't have a backup unless you've tested restoring from it. Untested backups fail the moment you need them. Set a calendar reminder to restore one random file from each copy every three months.
6. Small business or freelance? Add these
If your work data pays your rent, the 3-2-1 basics are the floor, not the ceiling.
- Version history. Cloud tools like Dropbox Business, Google Workspace, or Microsoft 365 keep old versions of every file for 30-180 days. Turn on the maximum retention available on your plan.
- Weekly local snapshot. In addition to real-time backup, take a weekly snapshot to a completely separate drive that lives in a drawer. Ransomware can't encrypt what isn't plugged in.
- Client-file segregation. Store each client's data in a distinct folder with its own backup rule. If you lose one client's directory to accidental deletion, the others aren't affected.
- Encrypted offsite copy. For sensitive client work, use Cryptomator to encrypt a folder before syncing it to a cloud service. Even the cloud provider can't read it.
7. What to back up (and what not to)
Always back up:
- Personal photos, videos, and audio
- Documents you can't recreate (tax returns, legal papers, family records)
- Anything you've written or created (writing, art, code, spreadsheets)
- Password manager export (in case the master password is lost)
- Email archives (Gmail: use Google Takeout monthly)
- Business records: invoices, contracts, receipts, accounting files
Skip:
- Software installers (redownload them)
- Operating system files (fresh install is faster than restore)
- Downloads folder junk
- Cached video/audio (Spotify offline, Netflix downloads)
- Games (redownload from Steam / App Store)
Backing up everything wastes cloud storage and slows restores. Backing up too little loses the things you cared about.
8. The 30-minute setup
If you have no backup today:
- Buy an external SSD — Crucial X6 or Samsung T7, 1-2 TB, ~$60-100. Plug in.
- Enable Time Machine (Mac) or File History (Windows). Point it at the SSD. First backup runs unattended.
- Sign up for Backblaze ($99/year unlimited). Install, sign in, let it start uploading. First upload takes 3-14 days depending on internet speed; it runs in the background.
- Enable iCloud / Google One backup on your phone.
- Enable secondary photo backup (Google Photos or Amazon Photos).
- Add "test restore" to your calendar for 3 months out.
Total spend: ~$160 for year one, ~$100/year ongoing. Cheapest insurance you'll ever buy for the irreplaceable stuff.
9. Common backup mistakes
- Backing up the backup drive to itself. Ridiculous but common — people plug in an external drive, drag files onto it, then wonder why their backup is missing when the drive dies. That's a copy, not a backup.
- Assuming iCloud/Google Drive counts. Sync ≠ backup. See above.
- Not encrypting the external backup drive. If it's stolen, so is your data. Enable encryption in the backup software.
- Ignoring the "backup failed" notification. Every backup tool sends one occasionally. Ignoring them for months means you don't actually have a current backup.
- Storing the backup drive on top of the laptop. Same house is one thing; same shelf means the same coffee spill takes them both out.
Frequently asked questions
Do I really need cloud backup if I have a local one?
Yes. Ransomware, fire, theft, flood — every one of these takes both your working machine and any local backup at the same location. Cloud is the offsite copy.
Can I use free cloud services (Google Drive, Dropbox free) as my backup?
For small amounts of critical documents, yes as a supplement. For general backup, no — free tiers are too small, they're sync not backup, and they'd be the first thing to fill up.
How often should backups run?
Working files: hourly (Time Machine does this automatically). Full-system: daily. Offsite cloud: continuous or nightly.
What's the cheapest realistic setup?
$60 for an external SSD + $99/year for Backblaze = $60 one-time + $8.25/month. Covers a household of one adequately.
How do I know my backup is working?
Restore one random file from each copy every three months. If restore fails, your backup was theatre. Fix immediately.
Still stuck?
Setting up a full 3-2-1 backup system from scratch — especially the initial cloud upload timing and encryption — takes about an hour of expert time. Book a 30-minute session and we'll get your household fully protected. From $29 flat.
How we tested for privacy recommendations
Every tool recommended here was set up on real devices and used in real workflows for a minimum of 30 days. For each password manager, VPN, browser extension, or backup service, we specifically checked: what data the service actually collects, how transparent their business model is, whether they've been independently audited, and what happens if the company goes under.
We reviewed audit reports where available (Cure53, iVerify, Trail of Bits are the auditors we weight most heavily) and read the actual privacy policies — not just the marketing summary. A product doesn't make our recommended list unless we're comfortable with a family member using it long-term.
Related privacy guides
- 12 free privacy tools you can set up in one rainy afternoon — the full weekend setup.
- 7 best password managers for families — the honest ranking.
- 5 VPN services worth paying for — plus the three to skip.
- The complete backup guide — because privacy without backups is fragile.
Common privacy questions we get
Am I paranoid for wanting more privacy?
No. Privacy tools are just seatbelts — you're not expecting a crash, but you'd rather have them. The barrier for the vast majority of attacks is low; a password manager and 2FA alone puts you in the safest 5% of internet users.
Isn't switching to privacy-focused tools a big commitment?
The initial migration takes an afternoon. After that, most privacy tools are set-and-forget — you use them the same way you used the tracker-heavy alternative, just without the data leak.
What's the single most impactful privacy upgrade?
A password manager (Bitwarden free tier, if budget is zero). Second: 2FA on your critical accounts. Third: privacy-friendly search + browser (DuckDuckGo, Firefox with Enhanced Tracking Protection strict).