How to Back Up Your Data Properly

The hard truth about how to back up your data properly is that almost everyone thinks they have backups and almost no one tests them. The first time many people discover their backup strategy was broken is the moment they need to restore — which is the worst possible moment to find out. The good news: a working personal backup setup in 2026 takes one weekend to build, less than €5 a month to run, and protects against everything from a stolen laptop to a flooded apartment.

The 3-2-1 rule, still the right answer

The framework that has held up for decades:

• 3 copies of your data — the original plus two backups.
• 2 different storage media — e.g., laptop SSD + external drive + cloud, not three drives in the same box.
• 1 copy off-site — physically separate from where you live, so a fire or a theft does not destroy every copy.

If your current "backup" is a single external drive sitting next to your laptop, you have one and a half copies in one location. That is not a backup; that is a copy of your hard drive that will burn in the same fire.

What to back up — and what not to

Most people overthink this. The honest list of "if I lost it, my life would be measurably worse" data:

• Photos and home videos. Irreplaceable.
• Documents folder, desktop, and any project folders.
• Email — especially if self-hosted.
• Tax records, contracts, ID scans, insurance documents.
• Notes — especially if not synced to a cloud service already.
• Browser bookmarks and password-manager vault export.
• Side-project repos that are not on GitHub.

What does not need to be in your backup:

• Operating system. Reinstalling is faster than restoring.
• Applications. Reinstall from official sources.
• Music and movies you can re-download from streaming services or re-rip.
• Steam games and similar — re-download.

The smaller your backup set, the faster the backups, the cheaper the storage, and the easier the test-restore.

The realistic 2026 setup

Layer 1 — Local backup (fast restores)

An external SSD or HDD plugged into your computer. Set up automatic daily backups:

• macOS: Time Machine. Built-in, set-and-forget. Plug in any drive larger than your laptop's data, hit "Use as Time Machine disk," done.
• Windows: File History (basic) or Macrium Reflect (proper image-level backup). Built-in Windows Backup is fine for small datasets.
• Linux: Restic, BorgBackup, or Pika Backup. All open source, all reliable.

This layer protects you from the most common failures: accidental deletion, ransomware, a dying SSD. Restoring from local is fast — a full restore takes hours, not days.

Layer 2 — Off-site cloud backup

The off-site copy that survives fire, theft, and flood. Two reasonable options:

• Backblaze Personal Backup: $9/month, unlimited storage, Mac and Windows. The simplest "set it and forget it" option for most home users.
• Self-hosted with Restic or Borg, pointed at S3-compatible storage (Backblaze B2, Hetzner Storage Box, Wasabi). About $1–$5/month for typical personal data. Cheaper, more flexible, requires comfort with terminal commands.

Encrypt your backup before it leaves your machine. Both Restic and Borg do this by default. Backblaze offers a "private encryption key" option — use it.

Layer 3 — A second physical drive, swapped occasionally

For the genuinely paranoid (and for irreplaceable photos and documents): keep a second external drive at a friend's house, your office, or in a deposit box. Update it every quarter. Bring it home, sync it, take it back. Old-fashioned and bulletproof.

The most important step almost everyone skips

Test your restore. Pick a single file — a photo from last year, a document from a deep folder. Delete it. Try to recover it from each backup layer. Time how long it takes. Do this every six months.

The first time you test a restore, something is usually wrong. The encryption password is forgotten. The backup excluded a folder you thought was included. The cloud client silently stopped uploading three months ago. Better to find out during a deliberate test than during a real disaster.

Photos — the most-lost category

Most data loss in 2026 is family photos, not work files. The triple-redundant photo strategy:

• Phone backup via your default photo cloud (iCloud Photos, Google Photos) — convenience layer.
• Self-hosted Immich or local Lightroom-style library on a home server or NAS — ownership layer.
• Off-site encrypted backup of the home library — survival layer.

Three independent layers, each capable of surviving the failure of the others. Family photos genuinely deserve this level of protection. They are the one category where "I have backups" is supposed to mean three real, independent copies.

What ransomware and accidental sync teach us

Modern threats include:

• Ransomware that encrypts files and waits to be backed up — corrupting your backups too.
• Accidental sync delete where you delete a file and the cloud propagates it.
• "Helpful" cleanup by another household member.

The defence is versioned backups — meaning your backup keeps not just the latest version of each file but historical versions for at least 30 days. Time Machine does this by default. Backblaze keeps versions for 30 days standard, 1 year for a small upcharge. Restic and Borg keep snapshots indefinitely (you control retention).

If your backup tool only stores "the latest version," ransomware encrypts your files, the backup overwrites the previous good version, and you have no recovery. Versioning is not optional.

Phone-specific backup

The honest breakdown:

• iPhone: iCloud Backup is good and largely "set and forget." For an extra layer, plug into a Mac periodically and let it back up locally. Skip third-party tools unless you have unusual needs.
• Android: Google's built-in backup covers settings and SMS. Photos via Google Photos. App data backup is patchy — verify which apps actually back up. SyncThing for any data you do not want in Google's hands.

The schedule that earns its name

A workable rhythm for normal humans:

• Continuous (automatic): local Time Machine / File History / Restic running quietly.
• Daily (automatic): cloud upload runs in the background.
• Weekly (automatic): cloud verifies the latest snapshot integrity.
• Quarterly (manual): swap the off-site physical drive if you have one.
• Bi-annually (manual): test restore. Pick a file, recover it, confirm contents.
• Annually (manual): review what is being backed up. Add new important folders, prune old ones.

The key is "automatic" doing 95% of the work. Manual steps fail; automatic ones run while you sleep.

The mistakes that ruin backup strategies

• Single-drive backups stored next to the laptop. Fire, theft, lightning — all destroy everything in one event.
• "It's syncing to the cloud" mistaken for backup. Sync is not backup. A deletion or corruption propagates everywhere within seconds.
• Not encrypting cloud backups. Especially with smaller providers. Encryption is one toggle; flip it.
• Forgetting the password to encrypted backups. Use the password manager. Never trust memory.
• Buying a new external drive every year and starting fresh. Old backups are valuable; the file you want back may have been deleted six months ago.

Bottom line

Backing up your data properly in 2026 is automatic Time Machine or File History to a local drive, automatic encrypted cloud backup to Backblaze or B2/Restic, and a quarterly test-restore so you know it works. Three copies, two media types, one off-site — the rule that has held for decades because it works. Spend a weekend setting it up, then forget it exists until the day you actually need it. That is the day you will be glad past you took backups seriously.