Backups that actually save you: the 3-2-1 rule in practice

The uncomfortable truth about backups is that having one is not the same as being able to restore from it. People discover the difference at the worst possible moment.

**The 3-2-1 rule.** Keep three copies of your data, on two different media, with one copy off-site. In practice for a small business: the live data, a local backup, and an off-site copy. The off-site copy is what saves you from fire, theft and ransomware that encrypts everything it can reach.

**Test restores.** A backup you have never restored is a hope, not a plan. Restore something on a schedule — even just to a scratch directory — and confirm it contains what you expect. This single habit catches most backup disasters.

**Separate the backup from the thing it backs up.** A snapshot living on the same disk as the original is not protection against disk failure. Copy backups off the machine.

**Watch what you are actually capturing.** For a website, that usually means the database and the uploads. For a server, it means configuration as well as data — restoring files without the config that made them work is a frustrating half-recovery.

**Automate it and forget it.** Manual backups happen until the week you are busy, which is the week something breaks. Schedule them, alert on failure, and check the alerts.

Done properly, backups are boring — and that is the point. You should be able to lose a server entirely and be back up the same day.