How to back up your photos: the 3-2-1 rule in practice

9 min read
How to back up your photos: the 3-2-1 rule in practice
Image: Ashley Pomeroy, CC BY-SA 4.0 · Wikimedia Commons

Every drive fails eventually, cards get lost and phones get dropped in rivers. The photos that survive are the ones that exist in more than one place. The 3-2-1 rule is a simple way to make sure of that: keep three copies, on two different kinds of storage, with one of them somewhere other than your home. This guide turns the rule into a routine you can repeat after every shoot, from handling the memory card to checking that a backup really opens.

A simple 3-2-1 setup

CopyWhere it livesSection
Copy 1 (working)Computer's internal drive3
Copy 2 (local backup)External drive or NAS4
Copy 3 (offsite)Cloud backup or a drive kept elsewhere5
Memory cardKeep files until copies 2 and 3 exist2
Phone photosExport to the same three copies6
Restore testA few files, every few months7
Drive checkReplace drives after roughly 4–5 years8

1Understand the 3-2-1 rule

The rule has three parts. Three copies means the original plus two backups, so one failure never leaves you with a single fragile copy. Two kinds of storage means not putting every copy on the same type of device, because one bad batch, one software bug or one power surge can hit similar devices together. One copy offsite means a fire, flood or burglary at home cannot take everything at once.

It is a rule of thumb, not a law of nature, but it covers the common ways photos are lost: hardware failure, accidental deletion, theft and local disasters.

Understand the 3-2-1 rule
Image: Nashucks, CC0 · Wikimedia Commons
How to do it
  • Count your copies today: if a photo exists only on one laptop or one phone, it has one copy.
  • Make sure at least one copy is on a different kind of storage from the others (for example internal drive plus external drive plus cloud).
  • Keep one copy outside your home: in the cloud, at work or with a trusted relative.
  • Remember that a copy on a drive that is always plugged in can be hit by the same accident or ransomware as the computer.

2Handle memory cards carefully

A memory card is a temporary carrier, not storage. Cards are small, easy to lose and can be corrupted if they are removed while the camera is writing. The safest habit is to treat the photos on the card as the only copy until they are safely backed up elsewhere.

Deleting single frames on the camera saves little time and adds risk: it fragments the card and a slip of the finger can remove the wrong file.

How to do it
  • Format the card in the camera you will use it in, not on a computer, so the file system matches what the camera expects.
  • Do not delete photos one by one on the camera; sort them later on the computer.
  • Only format the card after the photos exist in at least two other places.
  • Wait for the write light to go off before opening the card door, and carry spare cards in a case.

3Import with a routine and name folders by date

A backup is only as good as your ability to find things in it. A fixed import routine, done the same way every time, prevents forgotten cards and duplicate folders. Naming folders by date sorts them in order automatically on every system and every drive.

A year-month-day format keeps the order correct: 2026-07-14 always sorts after 2026-07-03, while 14-07-2026 does not.

How to do it
  • Import soon after each shoot, ideally the same day.
  • Use a structure such as Photos/2026/2026-07-14 Lake trip, with the date first and a short description after it.
  • Use the same folder structure on every backup, so a copy can replace the original without reorganising.
  • Avoid special characters in folder names and keep descriptions short.

4Use an external drive or NAS for local backup

An external drive is the simplest second copy: you plug it in and let backup software copy new files automatically. A NAS (network-attached storage) is a small computer with one or more drives that sits on your home network and backs up several devices.

Many NAS units can mirror two drives, so one can fail without losing data. That mirroring protects against a dead drive but not against deleting a file by mistake, because the deletion is mirrored too. It still counts as one copy.

How to do it
  • Choose backup software that copies new and changed files on a schedule and keeps older versions.
  • Keep the backup drive unplugged when you are not using it, if you back up by hand, to protect it from surges and malware.
  • For a NAS, turn on snapshots or versioning if available, so deleted or altered files can be recovered.
  • Label each drive with what it holds and when it was first used.

5Add an offsite copy: cloud or a second drive

The offsite copy is the part people most often skip, and the one that saves them after a house fire or burglary. Cloud backup services upload your files over the internet and keep them in data centres. A low-tech alternative is a second external drive kept at work or with family and swapped regularly.

Large RAW collections can take days or weeks to upload the first time; after that, only new photos are sent.

How to do it
  • Pick a cloud service that offers true backup with file versioning, not just a shared folder.
  • Check how long the service keeps deleted files and what happens if you stop paying.
  • If you rotate drives, swap them at a fixed interval, for example once a month.
  • Consider encrypting an offsite drive so a lost drive does not expose private photos.

6Phone photos: cloud sync is not a backup

Phone photo apps usually sync your library to the cloud, which feels like a backup but works differently. Sync keeps two places identical: delete a photo on the phone, and it disappears from the cloud too, often after a short grace period. An account lockout or a mistaken bulk delete can remove everything at once.

Sync is useful and worth keeping on. It just counts as one copy, and the other copies must be independent of it.

How to do it
  • Regularly export or download your phone photos at full resolution to your computer.
  • Let them join the same 3-2-1 routine as your camera files.
  • Check that downloads are originals, not compressed previews.
  • Know where the 'recently deleted' folder is and how long it keeps photos (approximately 30 days on many phones).

7Test that you can restore

A backup you have never opened is a hope, not a backup. Software settings change, drives fill up silently and cloud uploads can stall for months without anyone noticing. A short restore test finds these problems while the original still exists.

How to do it
  • Every few months, pick a handful of photos from different years and restore them to a test folder.
  • Open the restored files and check they display fully, not as grey or broken images.
  • Check that the newest photos have reached every backup, including the offsite one.
  • Write down how to restore (which software, which account) somewhere others in your family can find it.

8Plan for drive lifespan

No storage lasts forever. Large-scale drive statistics published by data-centre operators show failure rates rising as drives age, and a rough rule of thumb is to plan to replace hard drives after about four to five years. SSDs and memory cards wear out in different ways but are also not permanent. Discs and old formats can become hard to read simply because the readers disappear.

The answer is not to find a perfect medium but to keep copying your library forward onto newer storage.

How to do it
  • Note the purchase date of each drive and plan replacement after roughly 4–5 years.
  • Replace a drive at once if it makes new noises, disconnects or reports errors.
  • When you upgrade, copy everything to the new drive and verify it before retiring the old one.
  • Store drives in a cool, dry place; avoid hot cars and damp basements.

Your backup routine

  • Import the card the same day
  • Date-named folders (YYYY-MM-DD)
  • Copy 2 on an external drive or NAS
  • Copy 3 offsite or in a cloud backup
  • Format the card in the camera only after backing up
  • Export phone photos at full resolution
  • Restore test every few months
  • Drive ages noted, replace after about 4–5 years

Sources

Related guides