1. The 3-2-1 rule is non-negotiable
The single most important rule in data protection. Originally coined by photographer Peter Krogh, the 3-2-1 rule is:
- 3 copies of your data: Your original + 2 backups.
- 2 different media: e.g. internal SSD + external HDD + cloud (so a single failure mode can't destroy everything).
- 1 copy off-site: Cloud or a drive at a friend's house — protects against fire, theft, flood.
If a backup system doesn't satisfy 3-2-1, it's not a real backup — it's a single point of failure. Most consumer users only have one copy (the laptop) and call sync services like Dropbox "backup." That's not backup. Backblaze + an external drive solves 3-2-1 for $9/month.
2. Backup is not the same as sync
One of the most expensive misconceptions in data protection:
- Sync: Changes propagate everywhere. Delete a file on your laptop, it disappears from cloud and other devices. Examples: Dropbox, Google Drive, OneDrive.
- Backup: A point-in-time copy is preserved. Delete a file on your laptop, the backup still has it. Examples: Backblaze, iDrive, Acronis.
Sync alone doesn't protect against ransomware (encrypted files sync to the cloud), accidental deletion (the deletion syncs), or file corruption (the corruption syncs). Use sync for productivity; use backup for protection.
3. Encryption rules
Three encryption levels to understand before picking a provider:
- Encryption in transit: Files encrypted between your device and the cloud (HTTPS). The bare minimum. All major providers offer this.
- Encryption at rest: Files encrypted on the provider's servers. The provider still holds the keys — they can decrypt your data if compelled. Standard at Google, Microsoft, Dropbox.
- Zero-knowledge (end-to-end): Files encrypted on your device before upload. The provider never has the keys. Sync.com, iDrive (with private key option) and pCloud Crypto offer this.
For sensitive data — financial records, health data, legal docs, ID scans — only zero-knowledge is acceptable.
4. Test restores twice a year
The backup that's never been tested is no backup at all. We've seen too many people discover their "backup" was broken when they actually needed it. Twice a year:
- Pick 5 random files from different folders.
- Restore them to a different location.
- Open each one — make sure they're not corrupted.
- Time how long the restore takes. If it's wildly slower than expected, the backup is unhealthy.
For full-disk imaging tools like Acronis and EaseUS, also test booting from your recovery USB once a year.
5. Ransomware protection essentials
Modern ransomware specifically targets backup files first. Three defenses:
- Immutable backups: Once written, can't be changed or deleted for X days. Available on Backblaze B2 Object Lock, Acronis Cyber Protect, and most enterprise solutions.
- Versioning: Keep 30+ days of versions. If ransomware encrypts your files, you can roll back to a clean version. iDrive keeps 30 versions, Dropbox keeps 180 days on paid plans.
- Air-gapped backup: A backup drive that's only connected during backup, then disconnected. Ransomware can't reach it if it's not on the network.
6. The real cost math
Don't just look at monthly price. Total cost of ownership over 5 years:
- Backblaze: $9/mo × 60 months = $540 for unlimited backup, one device.
- iDrive 5TB: $80/yr × 5 years = $400 for unlimited devices, 5TB.
- pCloud 2TB lifetime: $399 one-time = $399 for 2TB forever.
- Synology DS224+ + 2× 8TB drives: ~$650 one-time hardware + $0/month = $650 for 8TB usable, no recurring fees (assuming drives last 5+ years).
Lifetime plans and NAS hardware win on long horizons. Monthly cloud wins on flexibility and zero upfront cost. Pick based on your willingness to commit.
Read more: The 2026 data backup strategy guide, How to actually survive a ransomware attack, Cloud backup vs NAS: The 5-year math.
1
Editor's Pick
