Skip to content

Computer Backups 3-2-1 Strategy and Disaster Recovery

Data loss happens through sudden hard drive failure, device theft, liquid spills, ransomware encryption, or accidental file deletion. Implementing the industry-standard 3-2-1 backup strategy ensures complete disaster recovery regardless of hardware or software failure.

The 3-2-1 Backup Rule Explained

To guarantee data resilience, maintain:

  • 3 Total Copies of Data: Your primary working file plus 2 separate backup copies.
  • 2 Different Storage Media Types: Store backups on 2 different technologies (for example, an external hard drive and cloud storage) to prevent simultaneous medium failure.
  • 1 Off-Site or Air-Gapped Copy: Store at least 1 backup copy in a physically separate location or disconnected air-gapped cloud storage to survive home fires, theft, or local ransomware propagation.

Automated Backup Setup by Operating System

  • macOS (Time Machine): Connect an external drive or network storage. Open System Settings, select Time Machine, and enable automatic hourly backups. Enable backup encryption to protect confidential files.
  • Windows (File History and System Image): Use File History for continuous user file backups to an external drive. Create a periodic full System Image backup via Control Panel to capture OS state and installed software.
  • Linux (Borg, Restic, or Timeshift): Use Timeshift for system state snapshots and BorgBackup or Restic for deduplicated, client-side encrypted off-site repository syncs.

Protecting Backups From Ransomware (Air-Gapping)

Ransomware actively scans local network shares and connected USB drives to encrypt backup archives alongside primary files.

  • Disconnect External Drives: Unplug external USB backup drives as soon as manual backup cycles complete.
  • Use Immutable Cloud Repositories: Configure cloud backups with Object Lock or WORM (Write Once, Read Many) policies that prevent files from being deleted or modified by malware for a set duration.

Disaster Recovery and System Restoration

  1. Isolate or Replace Failed Hardware: Replace failed hard drives or sanitize infected machines with a complete disk wipe.
  2. Boot From Installation Media: Insert a bootable USB installer for Windows, macOS Recovery, or Linux Live USB.
  3. Initiate Bare-Metal Restore: Select your external backup drive or network repository during installation setup to restore the complete operating system, applications, settings, and files.