The most common backup strategy for personal photos is: upload to cloud, done.
That’s a single copy, in a single location, controlled entirely by one company. If the company raises prices and you cancel, the copy is gone. If your account gets locked, the copy is inaccessible. If there’s a data center fire or a ransomware event, the copy may be damaged or lost. If you accidentally delete something and don’t notice for 31 days, the company’s trash window may have already cleared it.
One copy is better than nothing. But one copy can fail in a dozen ways, and most people discover that when it’s too late.
The 3-2-1 backup rule exists to address exactly this. It’s been a professional data management standard for decades, and it applies directly to personal photos and files.
What the 3-2-1 Rule Is
The rule has three components, each number serving a specific purpose:
3 copies of your data. The original plus at least two backups. If one fails or is destroyed, you have two more.
2 different types of storage media. Don’t keep all three copies on the same kind of storage. A cloud account and a local hard drive are different media. Two cloud accounts from the same provider are not — they’re the same infrastructure with two accounts on top of it.
1 copy offsite. At least one copy must be in a physically separate location from your other copies. “Offsite” in practice often means cloud storage for individuals, because cloud providers maintain geographically distributed redundancy by default.
The logic is probabilistic. The chances of two independent failure modes occurring simultaneously are much lower than either occurring alone. A house fire and a simultaneous cloud service outage are unlikely to happen at the same time. A ransomware attack and an offline backup that was disconnected before the attack are unlikely to both be compromised at once.
The Threats That One Copy Doesn’t Survive
Understanding why the rule exists requires understanding what specific failure modes it’s designed for.
Hardware failure
Consumer hard drives have a meaningful annual failure rate. SSDs fail differently than traditional spinning drives, but they fail. The industry average failure rate for consumer drives in the first three years is somewhere between 2% and 5% per year, with rates increasing as drives age.
A single copy on a single drive will eventually be on a drive that fails. The question is whether you have another copy when that happens.
Ransomware
Ransomware attacks on individuals have become more targeted. The most sophisticated variants specifically look for connected backup drives — including cloud sync targets — and encrypt those too. If your “backup” is a folder that your sync client keeps up-to-date in real time, and ransomware encrypts that folder, your cloud copy is also encrypted.
An air-gapped backup (disconnected from the network when not actively backing up) or a versioned backup system (which keeps multiple versions of each file over time) is necessary to survive ransomware. A simple synced copy is not.
Accidental deletion
Cloud sync clients sync deletions too. If you delete a folder of photos because you think you have a backup elsewhere, and then realize you don’t, you have a window to recover them before the trash is permanently cleared. That window is 30 days with most providers, sometimes less.
An independent backup with versioning preserves deleted files beyond this window. Without versioning, the deletion propagates to every synced copy.
Service shutdown, acquisition, or bankruptcy
Cloud storage companies shut down. They raise prices to levels that cause users to cancel. They get acquired by larger companies with different data practices. They implement new AI training policies that users find unacceptable.
When any of these happen, your data is at risk if you have only a cloud copy. The 23andMe bankruptcy put genetic data up for sale as a company asset. Users of photo storage services that have shut down have lost years of photos when they assumed the service would continue indefinitely.
Account lockout
Getting locked out of your primary cloud storage account — due to a forgotten password, a two-factor device you no longer have, a false positive on an account review, or a hacked account — makes your data inaccessible even if it still technically exists. An independent copy you control means the lockout doesn’t mean data loss.
Building a 3-2-1 Setup for Personal Photos
Here’s what this looks like in practice for someone managing a personal photo archive.
Copy 1: Your primary local copy
Your phone’s camera roll, or a folder on your computer where imported photos live. This is the original — the photos as you’ve organized them, edited them, and intend to keep them.
Vulnerability: Device failure, theft, loss (especially for phones), or a fire or flood affecting your home.
Copy 2: A local or external backup
A second copy on different hardware in the same location. Options include:
- An external hard drive connected to your computer
- A local NAS (network-attached storage device) on your home network
- A secondary computer that receives backups
This copy protects against device failure. It does not protect against a house fire, flood, or theft that affects the location.
What to avoid: Keeping the only backup on the same device as the original, or on a USB drive that stays plugged into the primary machine (if ransomware targets the machine, it will also target a permanently connected drive).
Good practice: Keep external drives disconnected when not actively running a backup. This makes them harder to reach for ransomware and protects against power surges.
Copy 3: An offsite cloud backup
A separate cloud storage account that is not the same service as your primary cloud (if you use one). For most people, this is a cloud storage service — but the key is that it should be a genuine independent backup, not just a sync folder.
The distinction matters: a sync folder replicates whatever is in your primary folder in real time, including deletions and encryption events. An independent backup takes snapshots at intervals, retains versions, and doesn’t automatically propagate destructive changes.
Look for a service that offers:
- Versioning — keeping multiple versions of each file so you can restore from before an accidental deletion or corruption
- Retention period — how long deleted files remain recoverable
- No same-infrastructure dependency — if your primary cloud is Google Drive, your backup should not be Google One or another Google service
The Privacy Dimension
Backup strategy and privacy strategy interact in several ways that are worth thinking through.
What you put where
The offsite copy — typically a cloud service — is the copy with the most external exposure. A cloud provider who has agreed to their customers’ terms still theoretically has access to server-side-encrypted content, even if they commit not to use it.
For most personal photos — birthday parties, travel, family events — this is an acceptable trade-off. For sensitive content (medical records, legal documents, private correspondence), consider whether cloud storage is the right medium for that category of file, or whether it should remain local-only.
Encryption of local backups
External drives and local NAS devices can be encrypted. If your local backup is on an external drive, enabling full-disk encryption on that drive means that physical theft of the drive doesn’t compromise the content. Both macOS (via FileVault or third-party options) and Windows (via BitLocker) support encrypting external drives.
Cloud backup providers and AI training
If your offsite cloud backup contains your personal photos and files, the provider’s data practices apply. Some cloud providers use stored content for AI feature development or model training. Choosing a provider that explicitly commits not to use your content this way is relevant to the privacy dimension of your 3-2-1 setup.
A Practical Starting Point
If you’re starting from zero or from a “phone + one cloud” setup, a practical progression:
Step 1: Get an external drive. A 2 TB or 4 TB external drive costs between $60–120 and handles most personal photo archives. Set it up with your OS’s built-in backup tool (Time Machine on Mac, File History on Windows) or a dedicated backup application. Store it somewhere in your home that’s physically separate from your computer if possible.
Step 2: Choose a cloud service as your offsite copy. The service should support versioning, have a clear data retention policy, and not use your content for AI training or advertising. Evaluate storage capacity, pricing, and whether the service has a track record of stability.
Step 3: Automate what you can, but verify periodically. Backups that require manual action tend to get skipped. Automate the local backup to run nightly or weekly. Automate the cloud sync. But also set a reminder to periodically verify that backups are actually happening — check that recent files appear in your backup copy, and confirm that you could restore from it if needed.
Step 4: Test a restore. Backups you’ve never tested may not work when you need them. Restore a single folder or a few files from your backup to confirm the process works end to end.
What daftei Is For in a 3-2-1 Setup
daftei is designed for the private personal archive layer: the files and photos you want to keep accessible across your devices, privately, without those files being used for advertising, AI training, or any purpose other than storage and retrieval.
In a 3-2-1 context, daftei can serve as the offsite cloud copy — the third copy, stored in a location independent of your local hardware. Files stored in daftei are encrypted with AES-256 at rest and transmitted over TLS 1.3. daftei never sells your data, never shows ads, and never uses your content to train third-party AI models. If you delete your account, your data is permanently and irreversibly erased after a 30-day grace window.
The free plan includes 5 GB of storage — enough for documents, voice notes, and a portion of a photo archive. Pro includes unlimited storage at $5.99/month, $44.99/year, or $89.99 as a lifetime purchase.
A 3-2-1 setup doesn’t require spending a lot. It requires having three copies in three genuinely independent places.