In June 2024, my friend Sameer — a Bangalore freelance photographer — lost approximately 8 years of client work to a single ransomware attack. Roughly 4.2 terabytes of original photos, processed edits, and contract files were encrypted in 47 minutes by a then-unknown variant that came in through a phishing email disguised as a vendor invoice. He had what he believed was a serious backup: an external 8TB drive plugged into his Mac via USB, scheduled to back up nightly via Apple Time Machine. The ransomware encrypted the external drive too, in the same 47-minute window. His "backup" was a copy, not a backup — and the distinction cost him about ₹14 lakh in lost work he couldn't recreate.
The 3-2-1 strategy isn't paranoia or enterprise overkill for home use. It's the minimum framework that survives realistic 2026 threats: ransomware encrypting connected drives, single-disk failures (still happens at 1.5-3% annually), cloud provider service interruptions, residence fires or floods, theft of physical hardware, and accidental human deletion (still the #1 cause of data loss for individuals). What changes in 2026: the cost of implementing 3-2-1 has dropped dramatically. A genuinely robust home setup costs $15-30/month total — less than a single streaming subscription.
The structure: 6 sections covering each component of the 3-2-1 rule in detail, three specific product recommendations (Backblaze for cloud, Synology for NAS, iDrive as secondary cloud), 3 implementation tiers from $15/month to $50/month, and FAQs on common questions. This is a practical setup guide, not just framework theory — the goal is that you can implement a complete 3-2-1 backup by the time you finish reading.
Why most home backups aren't actually backups
Before getting to product recommendations, it's worth understanding why the typical home backup setup fails when it matters. Common patterns that look like backups but aren't:
- External drive plugged in 24/7: Time Machine, Windows Backup, or similar to a connected external drive. Vulnerable to: ransomware encryption, power surge taking out both devices, theft of one taking the other, accidental deletion propagating. This is what failed for Sameer.
- iCloud / Google Drive / OneDrive only: cloud sync is not backup. Vulnerable to: sync of deleted files (gone in 30-60 days), account compromise, ransomware encrypting files before sync, cloud provider outage during need.
- Manual periodic copies to USB stick: better than nothing but inconsistent. Vulnerable to: human forgetting (typical interval becomes 4-8 months), USB stick wearing out, USB stick lost, recent work always missing.
- NAS as only backup target: better setup than external drive but still incomplete. Vulnerable to: NAS RAID failures (more common than vendors suggest), NAS theft, fire/flood taking both, RAID rebuilds failing during recovery.
- "It's in the cloud" assumption: relying on SaaS providers (Google Docs, Microsoft 365) without separate backup. Vulnerable to: account suspension/termination, accidental deletion past recovery window, ransomware specifically targeting cloud accounts, vendor lock-in preventing data export.
The ransomware reality that changed backup forever
Modern ransomware has fundamentally changed home backup requirements. Key 2026 ransomware behaviors: 1) Network reconnaissance: ransomware searches connected drives, network shares, and cloud sync folders before encrypting. Your "backup" gets encrypted along with primary data. 2) Delayed encryption: many variants wait weeks before encrypting, ensuring your backup rotation includes already-corrupted files. 3) Targeted cloud account attacks: phishing harvests cloud credentials, then encrypts cloud-stored files. 4) Dormant infections: malware sits inactive for months collecting credentials, then strikes when discovery would be most expensive. What 3-2-1 specifically protects against: 1) Different media types: ransomware optimized for one platform often can't touch other types. 2) Offsite air-gapped backup: backup not network-connected when ransomware runs cannot be encrypted. 3) Multiple recovery points: even if recent backups are corrupted, older clean backups exist. 4) Version history requirements: 3-2-1 implementation requires version history features that defeat delayed-encryption attacks. The 2026 home backup mantra: if your backup is connected to the same network as your primary data when malware runs, it's not really a backup. It's a copy.
The cloud component — Backblaze Personal Backup
Backblaze Personal Backup
$9/month unlimited cloud storage · the offsite layer that just works
Backblaze Personal Backup is the cloud backup service I recommend without hesitation for the offsite component of any 3-2-1 setup. What makes it the right choice: genuinely unlimited storage at $9/month flat rate (most competitors charge per-TB), automatic continuous backup that requires zero configuration after install, 30-day version history included free (extendable to 1 year for $2/month), and the most straightforward restore experience in the category — including option to ship you a physical hard drive with your data if needed. At $9/month or $99/year, the math is unbeatable: backing up 5TB of data costs the same as backing up 100GB. What Backblaze doesn't do: backup network drives, NAS devices, or business-server data. For home users with everything on personal computers, this isn't an issue.
- Genuinely unlimited storage at flat $9/month
- Continuous automatic backup — zero config after install
- HDD shipping restore option for fast recovery
- 30-day version history defeats ransomware
- Cross-platform: Mac, Windows, mobile
- No network drive or NAS backup
- External drives must be connected at backup time
- 30-day default version history may not catch delayed ransomware
- Backup speed limited by your upload bandwidth
- Initial backup of large datasets takes weeks
The local NAS — Synology DS223
Synology DS223 + 2× 8TB
2-bay NAS with RAID 1 mirroring · the local copy on different media
Synology DS223 is the entry-level NAS that delivers professional-grade backup capabilities in a home-friendly package. Configured with two 8TB Western Digital Red Plus drives in RAID 1 mirror, you get 8TB of usable storage with automatic protection against single-drive failures. What Synology DSM operating system provides: scheduled backups from any device on your network, snapshot capabilities that prevent ransomware from encrypting historical versions, easy file restoration with version history, and integration with cloud backup providers (including Backblaze B2) for hybrid setups. At approximately $560 hardware investment (₹47,000 in India), this is a one-time cost that delivers 5-7 years of local backup capability.
- RAID 1 protects against single drive failure
- Snapshot feature prevents ransomware encryption
- Backs up all devices on network simultaneously
- One-time cost, no recurring fees
- Extensible to other Synology services (Photos, Drive)
- $560+ upfront cost barrier
- Setup more complex than cloud-only
- Vulnerable to theft, fire, flood (must pair with cloud)
- Power consumption ~25W continuous
- RAID rebuilds can fail during recovery
"Most people think they have backup. Most people actually have copies. The difference becomes obvious only when something goes wrong — at which point it's too late to upgrade. The 3-2-1 framework forces the distinction before you need it."
— Vikram T., Editor, Home TechThe secondary cloud — iDrive Personal
iDrive Personal 5TB
Second cloud provider · backs up NAS + multiple devices to single account
iDrive Personal serves a specific role in a comprehensive 3-2-1 setup: backing up your NAS to a cloud destination, providing redundancy in case Backblaze has issues, and consolidating multiple devices under a single account. What iDrive does that Backblaze doesn't: backs up network drives and NAS devices directly, supports unlimited devices per single account (vs Backblaze's one-license-per-computer model), and offers cleaner business-grade features like sub-account management. At $80/year for 5TB, pricing isn't as aggressive as Backblaze for personal data — but the additional capabilities matter for setups using Synology or other NAS hardware. The strategic role in 3-2-1: iDrive isn't usually the primary cloud for personal computers (Backblaze wins there). It's the backup-of-backup that ensures your Synology NAS itself has cloud copies.
- Supports NAS and network drive backup
- Unlimited devices per single account
- Cloud provider diversity from Backblaze
- 5TB / $80/year reasonable for serious setups
- Server backup capabilities for power users
- More expensive than Backblaze for single-computer use
- App less polished than Backblaze
- Storage capped at plan level (not unlimited)
- Initial setup more involved
- Customer service variable in reports
