Almost everyone who has lost a photo library thought they were covered. They had it "on the computer," or "in iCloud," or "on a hard drive." One copy, one failure point.
Photos are the one category of digital file that is genuinely irreplaceable. You can re-download music, re-buy software, re-request tax documents. You cannot re-take a photo of a grandparent who has died.
The 3-2-1 rule is the standard answer, and it's simpler than it sounds.
What 3-2-1 means
Three copies of your data. The one you use, plus two backups.
Two different types of storage. Not three external drives from the same batch, which can share a manufacturing defect and fail in the same month. Mix technologies: a computer's internal drive and an external drive, or a local drive and cloud storage.
One copy offsite. In a different building. This is the one people skip, and it's the one that saves you in a house fire, a flood, a burglary, or the surge from a lightning strike that takes out everything plugged into the wall at once.
That's it. Three copies, two media types, one somewhere else.
The thing most people get wrong
Sync is not backup. This trips up more people than anything else in this article.
Google Drive, iCloud, Dropbox, and OneDrive are sync services. They mirror your files. If you delete a photo on your phone, sync faithfully deletes it everywhere. If a corrupted file overwrites a good one, sync propagates the corruption. If ransomware encrypts your folder, sync encrypts the cloud copy too.
Sync protects you against one specific thing: a device dying. It does not protect against deletion, corruption, or your own mistakes. Those are the more common causes of photo loss.
Real backup keeps versions and retains deleted files, so you can go back to how things were last Tuesday. If your only "backup" is a sync service, you have one copy that happens to exist in two places.
Some cloud services soften this with a trash retention window — typically 30 to 60 days. That's better than nothing, and it's not a substitute for a backup that keeps history.
What counts as each copy
Copy 1: your working library. The photos on your computer, or on the drive you actively use. This is what you open, edit, and add to.
Copy 2: a local backup. An external drive, ideally a second one that isn't your working drive. Local backups exist because they're fast — restoring 500 GB from an external drive takes an hour; from the cloud it can take days.
Copy 3: offsite. Cloud backup, or a physical drive stored at a relative's house or in a safe deposit box.
Three setups that work
The simple setup (under $100 one time, plus a small monthly fee)
- Working copy: photo library on your computer
- Local backup: one external hard drive, 2 TB, running automatic backup (Time Machine on Mac, File History on Windows)
- Offsite: cloud backup service, or a cloud storage plan you already pay for
Good for: most families with a library under about 500 GB.
The weak point is the single external drive. If it fails the same week the cloud upload is behind, you're briefly down to one copy. In practice this risk is small, and this setup is dramatically better than what most people have.
The rotating drive setup (about $150 one time, no subscription)
- Working copy: on your computer
- Local backup: external drive A, connected, automatic
- Offsite: external drive B, identical copy, stored at a relative's house or your workplace
Every month or two, swap them. Bring B home, update it, take A to the offsite location.
Good for: people who don't want a subscription, or who have a library too large to upload over a slow connection.
The weak point is discipline. If you stop swapping, your offsite copy silently ages. Put a recurring reminder on your calendar and treat it as non-optional.
Rural users with limited broadband — where uploading 800 GB isn't realistic — often find this is the only workable offsite option.
The serious setup (about $500 up front, plus a monthly fee)
- Working copy: on your computer, or directly on a NAS
- Local backup: a NAS with two drives configured to mirror each other
- Offsite: cloud backup running from the NAS automatically
Good for: photographers, people with libraries over a terabyte, households with several people contributing photos.
A NAS is a small always-on box with drives in it that sits on your home network. The mirrored configuration means a single drive failure doesn't lose anything — you replace the drive and it rebuilds. It also gives everyone in the house a shared destination, which solves the very common problem of a family's photos being scattered across four devices with no shared archive.
Important: mirroring is not a backup either. It protects against drive failure, not against deletion or ransomware. The NAS still needs its own backup.
Where phone photos fit
Your phone is not one of the three copies. It's a capture device, and it's the most likely of all your devices to be dropped, stolen, or dropped in a lake.
The chain should be: phone → automatic upload to cloud → downloaded into your working library at home → included in local and offsite backups.
That middle step is the one that breaks silently. Cloud photo services are excellent at getting photos off your phone and terrible at getting them into a library you actually control. If your only copy of the last two years of photos lives in a cloud account, you're one billing failure or account lockout away from losing them.
Set a recurring reminder — twice a year is enough — to export from the cloud service into your home library. Google Takeout, or the export options in Apple Photos, or a direct download.
Testing the backup
An untested backup is a hope, not a plan. The most common failure isn't a drive dying — it's discovering the backup stopped running eight months ago and nobody noticed.
Twice a year, do this:
- Check the date. Open your backup software and confirm the last successful run was recent. If it says three months ago, that's your answer.
- Restore something. Pick a specific photo from a few years back. Restore it from your backup to your desktop. Open it. Confirm it's the right photo and not corrupted.
- Check the offsite copy specifically. This is the one that quietly stops working — an expired card on a cloud subscription, an offsite drive nobody's swapped since 2023.
Fifteen minutes, twice a year. This is the single highest-value habit in this article, and it's the one people skip because nothing appears to be wrong.
A realistic starting point
If you currently have one copy of your photos, don't wait until you can build the perfect system. Do this today:
Buy a 2 TB external drive. Copy your entire photo library onto it. Now you have two copies, which is infinitely better than one.
Then this month, add offsite — either a cloud backup subscription or a second drive at a relative's house.
Then set a calendar reminder for six months out to test it.
The gap between one copy and two is where nearly all the risk lives. Everything after that is refinement.
Next in this series: How to Scan Old Family Photos and Actually Organize Them