
Build a practical 3-2-1 computer backup plan, automate the local copy, add offsite protection, and verify the result with a safe restore test.
Back up your computer by keeping at least three copies of important files: the working copy, an automatic copy on a separate local drive, and one copy stored offsite. On Windows, File History can create the local versioned copy; on Mac, Time Machine fills that role. Use a reputable cloud service or a second drive stored elsewhere for the offsite copy, then restore one test file before trusting the plan.
A green status icon is not the finish line. A backup is useful only when it contains the right data, survives the same event that harms the computer, and can return a readable file within the time you can tolerate.
Build a restore-ready 3-2-1 plan
The 3-2-1 rule turns “I copied some files” into a plan that covers more than one failure:
- 3 copies: one working copy and two backup copies.
- 2 media or storage types: for example, the computer’s internal storage plus an external drive and cloud storage.
- 1 offsite copy: a copy outside the room or building where the computer and local drive are kept.
The U.S. Cybersecurity and Infrastructure Security Agency describes this exact structure in its Data Backup Options guidance. The purpose is separation: theft, fire, liquid damage, a power event, or malware should not be able to remove every copy at once.
| Copy | Practical location | Main job | Failure it does not solve alone |
|---|---|---|---|
| Working copy | Computer’s internal drive | Daily editing and access | Drive failure, loss, theft, or local corruption |
| Local backup | External drive or trusted network storage | Fast recovery and older file versions | A site-wide event or malware that can reach the backup |
| Offsite backup | Protected cloud account or rotated drive stored elsewhere | Recovery when the computer and local copy are unavailable | Account loss or retention limits unless separately managed |
One external drive beside the computer is a useful first backup, but it is not a complete 3-2-1 plan. Two folders on the same internal disk are still one physical point of failure.
Inventory what must survive
Do not choose drive size or frequency until you know what the backup must contain. Review the computer by consequence, not merely by folder name.
- Irreplaceable: family photos, original creative work, signed records, research, source files, licenses, and locally stored messages.
- Active work: project folders, invoices, client deliverables, spreadsheets, and anything that would be expensive to recreate this week.
- Replaceable but inconvenient: application installers, downloaded media, templates, and files available again from a trusted account.
- Usually excluded: caches, temporary exports, duplicate downloads, and data already governed by an organization’s separate backup policy.
Then set a recovery point objective in plain language: How much recent work can I afford to redo? If the answer is one day, a weekly manual copy is too infrequent. If a project changes every hour, daily backup may still leave an unacceptable gap.
Check folders outside the usual Desktop, Documents, Pictures, Music, and Videos locations. Creative applications, accounting tools, local email archives, browser profiles, virtual machines, and project databases may store critical data elsewhere. Export recovery codes and license information through the provider’s supported process; do not assume every credential is contained in a file backup.
Set up an automatic local backup
Windows: use File History for versioned personal files
- Connect an external drive that does not contain the only copy of any important data, or prepare a trusted network location.
- Open Control Panel > System and Security, then select Save backup copies of your files with File History.
- Choose Select drive if the correct destination is not already shown, then select Turn on.
- Confirm that Documents, Pictures, Videos, Music, Desktop, and any custom libraries holding important files are included.
- Leave the drive connected long enough for the first backup to finish, then check the most recent backup time.
Microsoft’s current File History instructions explain that the feature writes versions to an external drive or network location and can restore a previous version to a different location. Microsoft also distinguishes File History from Windows recovery tools in its backup, restore, and recovery overview: a recovery drive, for example, does not contain personal files.
Windows Backup serves a different purpose. It can sync selected folders through OneDrive and remember supported apps, settings, and Wi-Fi information for migration to another Windows device. It is useful as part of the offsite layer, but it is not a byte-for-byte copy of every file and application on the internal drive.
Mac: dedicate a drive to Time Machine
- Connect a USB, Thunderbolt, or supported network storage device.
- Open System Settings > General > Time Machine.
- Select Add Backup Disk, choose the destination, and select Set Up Disk.
- Turn on backup encryption if appropriate, create a recoverable password, and store that password separately from the Mac and drive.
- Choose Back Up Now or let the automatic backup begin, then verify the latest completed backup time.
Apple’s July 2026 Time Machine setup guide recommends a backup device with at least twice the Mac’s storage capacity and says the Time Machine disk should ideally be dedicated to backups. Time Machine keeps hourly, daily, and weekly versions as space permits, deleting the oldest versions when the disk fills.
Read every erase or format prompt before approving it. If a setup process needs to erase a drive, stop unless every existing file on that drive already has another verified copy.
Add an offsite copy without confusing sync and backup
A cloud-synced folder can provide geographic separation and version history, but synchronization and independent backup are not identical. A deletion, overwrite, or unwanted change may synchronize to other devices. Provider recycle bins and version history can help, but they have plan, account, and retention conditions.
For Windows, review the folders selected under Settings > Accounts > Windows backup or in OneDrive’s Sync and backup > Manage backup. Confirm that each intended folder has finished uploading and can be opened from the provider’s website. Microsoft’s OneDrive restore documentation describes recovery from the recycle bin, previous file versions, or a point-in-time OneDrive restore for eligible subscriptions; it also warns that a permanently deleted recycle-bin item cannot be recovered.
On a Mac, iCloud Drive or another supported service can supply an offsite copy of selected folders, while Time Machine provides the separate local version history. Check whether files are fully uploaded rather than present only as a pending sync state.
If cloud storage is unsuitable for sensitive or very large data, rotate two encrypted external drives: keep one available for the current local backup and store the other securely at a different location, then exchange them on a defined schedule. Any business or regulated data should follow the organization’s retention, encryption, access, and deletion rules rather than a personal default.
Keep the backup outside the original failure
Backup media must be protected from both physical loss and unauthorized access.
- Separate access. Keep at least one copy offline, offsite, or otherwise unreachable from the daily computer when it is not being updated.
- Encrypt sensitive backups. Use the operating system or backup tool’s supported encryption and keep the recovery password in a secure, separate place.
- Disconnect safely. Wait for the backup to finish and eject an external drive before unplugging it.
- Protect the account. Use a unique password and multifactor authentication for the cloud account, and retain recovery methods.
- Watch capacity. A full destination may stop retaining new restore points or remove old ones sooner than expected.
- Do not repurpose the only backup drive. A drive carried between machines, used for transfers, and constantly attached is exposed to more errors and malware.
For broader vendor and data-handling checks, ToolMerit’s performance and privacy tools directory can help organize supporting research. It does not replace the security requirements governing the data itself.
Run a restore test before trusting the plan

Use a harmless test file so the drill cannot damage real work:
- Create a small file named
backup-restore-test.txtinside a folder included in the backup. Add a unique sentence and today’s date inside the file. - Run or wait for the backup, then confirm its completion time is later than the test file’s modification time.
- Move the original test file to a temporary holding folder outside the backed-up path. Do not permanently delete it.
- Restore the backed-up version. In Windows File History, preview the appropriate version and use Restore to when you want to avoid overwriting another file. In Time Machine, navigate to the backed-up item and select Restore.
- Open the restored file and compare its name, contents, and modification time with the held original.
- Record the test date, source backup, restore location, result, and any password or permission problem—without writing the secret itself into the record.
Apple’s Time Machine restore guide confirms that a restored item returns to its original location. Using a disposable file and holding the original elsewhere keeps the test reversible.
Repeat the drill from the offsite copy as well. A local restore proves the local backup, not the cloud account, remote retention, or offsite drive. ToolMerit’s project-management tools directory includes systems that can assign recurring backup checks to an owner instead of leaving them as an informal intention.
Maintain the plan with a small schedule
- After setup: complete the first local and offsite backups, then restore one test file from each.
- Weekly: check the most recent successful backup time, destination capacity, and any warning or disconnected-drive notice.
- Monthly: restore a current file to a safe location and open it.
- Quarterly: review new applications and folders, rotate offsite media, confirm account recovery methods, and check encryption-password custody.
- Before a major update, repair, or migration: run both backup layers and verify the completion timestamps.
- After changing the plan: repeat the restore drill; a new drive or provider is unproven until recovery succeeds.
For more focused operating-system workflows, browse ToolMerit’s tool tutorials. For this task, the measurable finish is simple: important data appears in the inventory, the local and offsite copies are current, at least one copy is outside the computer’s immediate failure path, and a restored test file opens correctly.