Cloud storage handles one category of disaster extremely well: the physical one. Laptop stolen, drive dead, house flooded — your files are fine.
What it doesn't handle is everything caused by software, people, and time. And those are the more common causes of loss, by a wide margin.
Here's how to tell whether the gap applies to you, and what the smallest fix is.
Nine signs you have sync, not backup
1. Everything you own is in one account. Files, photos, email, phone backups, all in the same provider. One account problem — compromise, suspension, a payment failure you didn't notice — and you lose access to all of it simultaneously.
2. You couldn't get back a file you deleted six months ago. Trash retention is typically weeks. If the answer to "can I recover something from last spring" is no, you don't have a backup, you have a grace period.
3. Your only copy of your photo library is a sync. Especially where "optimize storage" is on, which means the phone or laptop holds compressed versions and the originals exist only in the cloud.
4. You've never restored anything. An untested backup is a hypothesis. The failure rate of first restores is high enough that this genuinely matters.
5. A ransomware event would reach your cloud folder. Which it would, on any always-connected synced folder. Encrypted files sync as changes and propagate within minutes.
6. You have local-only files with no backup. Photo libraries, video projects, application databases, virtual machines — the categories that shouldn't be synced. If they're not synced and not backed up, they're not protected at all.
7. You'd struggle to prove what you had. After a loss, could you list what was in that folder? If not, you'd never know what to try to recover.
8. Your backup, if you have one, is always plugged in. A permanently connected drive is reachable by anything that reaches your computer.
9. You've never checked whether backups are still running. Backup software fails silently more often than anyone expects. A backup that stopped in February and never mentioned it is a common finding.
Three or more of these and you have a real exposure, not a theoretical one.
The threats sync genuinely doesn't cover
Deletion you don't notice quickly. The single most common cause of permanent loss. Every recovery route in cloud storage is time-boxed, and the files you lose are the ones you weren't using — which is why you don't notice.
Ransomware. Malware encrypts everything reachable. Your sync client uploads the encrypted versions. Some services offer mass restore; the ones that don't leave you restoring file by file, if at all.
Account loss. Compromised, suspended, or locked out. Everything intact, nothing reachable, and appeals processes are slow and uncertain.
Corruption that syncs. A file damaged on save propagates. Version history helps if you notice within the retention window.
Provider problems. Outages, service changes, discontinued products, companies closing. Rare, and not zero.
A mistake made across the whole structure. A bad reorganization, a sync misconfiguration, a script that went wrong. Cloud services are much better at restoring one file than at restoring the shape of a folder tree from three weeks ago.
The smallest fix that actually works
You don't need an elaborate system. You need three things.
1. One backup that isn't sync.
Either an external drive with automated backup software running to it, or a cloud backup service — a different product category from cloud storage, designed to retain history and resist propagation.
The requirement: it keeps old versions, and it doesn't blindly mirror deletions.
2. One copy that's disconnected some of the time.
A drive you plug in weekly and then unplug. This single behaviour defeats ransomware, defeats a script that deletes everything, and defeats most software failure modes, because a drive that isn't attached cannot be modified.
It's the least technical item on the list and among the most effective.
3. One copy that isn't in your building.
Fire, flood, and theft take everything in one location. Off-site can be a cloud backup service, a drive at a relative's house, or a drive in a safe deposit box. Rotating two drives — one at home, one elsewhere, swapped monthly — is a perfectly good arrangement.
Those three, combined with your existing cloud sync, give you the standard three-copies-two-media-one-offsite arrangement without any planning.
Protect the small pile first
Most people's data divides sharply. There's a large volume of replaceable material — software, media you could re-acquire, downloads, files that would be inconvenient but not painful to lose. And there's a small pile that's genuinely irreplaceable.
The small pile is usually a few gigabytes:
- Photos and video of people
- Tax records and financial documents
- Contracts, deeds, insurance policies
- Identity documents
- Business records, client work, product source files
- Personal writing, projects, correspondence that matters
If you do nothing else this month: copy that pile to two external drives, verify one opens, and put the other somewhere that isn't your home.
That's an hour of work and it addresses most of the actual risk. Everything else is refinement.
Test it, once
Pick a file. Restore it from your backup. Open it.
Not check that the backup ran — restore something and open it. This finds:
- Backups that have been failing silently
- Drives that are physically failing
- Encrypted backups whose password you no longer have
- Backup software you can no longer run
- Files that backed up as empty
Do it now, and then once a year. The failure rate of untested backups is high enough that this five-minute exercise is the highest-return item in this entire category of the site.
Keep an inventory
One text file listing what exists and where:
WHAT I HAVE AND WHERE
Photos — [cloud service] + external drive A + external drive B (at parents')
Documents — [cloud service] + drive A + drive B
Financial — [cloud service] + drive A + drive B + encrypted copy in [second service]
Video projects — local only + drive A ← NOT off-site, fix this
Phone — device backup to [service], last verified 2025-04-08
Website — [host] backup + monthly export to drive A
Last full verification: 2025-04-08Fifteen minutes to write, and it does two things: it tells you what to try to recover after a loss, and — more usefully — writing it exposes the gaps. Almost everyone who writes one of these finds at least one line where the answer is "only in one place."
The weekend plan
If you've recognized yourself in this article, this closes the gap:
Saturday morning. Write the inventory. Identify the small irreplaceable pile. Note every gap.
Saturday afternoon. Buy or find two external drives. Copy the small pile to both. Verify by opening files from each.
Sunday morning. Set up automated backup software on your computer, pointed at drive A. Let the first backup run — this takes hours, so start it and leave it.
Sunday afternoon. Restore one file from the backup and open it. Take drive B to a relative's house, or arrange off-site storage. Set a recurring calendar reminder: monthly drive swap, annual restore test.
One weekend, and you go from "everything is in the cloud" to a genuine three-copy arrangement.
The line to remember
Sync is about access. Backup is about recovery.
Having one says nothing about having the other. Cloud storage is excellent and you should use it — for having your files everywhere, current, on every device. Just don't let it be the only thing standing between you and a mistake, because it isn't designed to be, and it doesn't claim to be.
The detailed how-to for building the backup side of this — choosing drives, setting up automation, testing restores, and handling phones, websites, and business data — is the subject of the next section of this site.