Guide

The 3-2-1 Backup Rule for Mac Users

3 copies, 2 kinds of media, 1 copy offsite. The rule itself is one sentence — most explanations of it stop at generic enterprise advice. Here's what it actually looks like when the computer in question is a Mac, a NAS, and maybe a cloud account, not a corporate server room.

Updated August 9, 2026.

Key takeaway

3-2-1 means three copies of your data, on two different kinds of storage, with one of them offsite. On a Mac, a practical version looks like: the files on your Mac (copy 1), an automatic local mirror to a NAS or external drive (copy 2), and an offsite or cloud copy (copy 3). A tool like ThirdCopy is built for copy 2 — it doesn't replace the offsite leg, it needs one paired with it.

What the rule actually says

The 3-2-1 backup rule is a simple formula for not losing your data: keep 3 total copies of anything you care about — the original plus 2 backups — store them on 2 different types of storage media, and keep 1 copy offsite, away from wherever the original lives. That's the whole rule. No specific software, no specific brand of drive, no specific cloud provider — just a shape your backup strategy should have.

A "copy" here means a separate, complete, current copy of the data — not a version history. Time Machine keeping ninety snapshots of one disk is still one copy of the data, on one medium, for the purposes of this rule.

Where it comes from

The rule is usually credited to photographer Peter Krogh, who introduced it in his 2005 book The DAM Book: Digital Asset Management for Photographers. Krogh was writing for photographers protecting irreplaceable image libraries — a failed drive or a lost laptop bag could mean years of photos gone for good — and 3-2-1 was his answer to "how many backups is actually enough." The logic doesn't care what kind of data it's protecting, so it spread well past photography: government and industry data-protection guidance, including material from CISA and NIST, references the same 3-2-1 shape today, two decades later.

Why "2 different media" matters

If your 2 backup copies are two external drives bought at the same time, they can fail together in ways that defeat the whole point of having two. Drives from the same manufacturing batch tend to fail around the same age. A power surge that damages one drive connected to your Mac can just as easily damage a second one plugged in right next to it. Ordinary drive-fleet aging is a shared failure mode too — if both backups are the same age and the same technology, they're wearing out on roughly the same clock. Two copies that share a failure mode aren't really two independent copies; they're one copy with slightly better odds, which isn't the same thing the rule is asking for.

Mixing media types — an internal SSD, a NAS on the network, a cloud storage account — means each backup fails for genuinely different reasons. A bad drive controller doesn't take out your cloud account. A cloud outage doesn't take out your NAS. It takes more than one unrelated bad day to lose everything.

Why "1 offsite" matters

A second backup sitting right next to your Mac protects you from drive failure. It does nothing for anything that happens to the room: a fire, a burst pipe, a break-in, a laptop bag and an external drive stolen together on the same night. Local redundancy and offsite redundancy are solving two different problems, and only one of them is covered by "buy a second drive."

Offsite doesn't have to mean anything exotic. It can be as simple as a drive that lives at a family member's house and gets swapped in occasionally, or it can be cloud storage, which is offsite by definition and doesn't require you to remember to physically move anything.

What 3-2-1 looks like on an actual Mac

Translate the rule into a setup you can actually build:

Copy 1 — the working files on your Mac. This is the one you use day to day, and the one every failure scenario in this guide starts with.
Copy 2 — a local mirror to a NAS or external drive. This is where a continuously-running mirror tool earns its keep. Rather than relying on you to remember to run a backup, something like ThirdCopy watches your folders and keeps a NAS or drive copy current automatically, on its own schedule or continuously as things change. That's a second copy, on a second medium — exactly what the rule is asking for.
Copy 3 — something offsite. Cloud storage (iCloud, Backblaze, or similar) is the easiest version of this for most people; a drive kept at a different physical location works too. If you're already leaning on iCloud for this, it's worth understanding how iCloud's storage optimization interacts with backups before you count on it.

Worth being precise about the boundaries here: ThirdCopy's job is copy 2 — a fast, automatic, local mirror to a NAS or drive. It is not a cloud or offsite backup tool, and it isn't trying to be one. Satisfying the "1 offsite" leg of 3-2-1 means pairing it with something else: iCloud, a cloud backup service, or a drive you actually rotate offsite. Any single local tool that claims to cover all of 3-2-1 by itself is quietly skipping the offsite requirement, not meeting it.

A newer variant: 3-2-1-1-1

You'll sometimes see 3-2-1-1-1, or 3-2-1-1-0, in more recent writing, usually from vendors focused on ransomware recovery. The extra digits generally mean 1 immutable or air-gapped copy — a backup that can't be altered or encrypted even if malware reaches your network — and/or 0, meaning zero errors on a verified test restore. Both are reasonable refinements for a business worried about a targeted attack on live infrastructure. For a typical home Mac setup, they're worth knowing the terms for, but not something to lose sleep over — the original 3-2-1 shape already covers the failure modes that actually threaten most personal backups: drive death, theft, fire, and an accidental delete.

Does Time Machine alone satisfy 3-2-1?

No. Time Machine backing up to a single local disk is one backup, on one medium, in one location — it's a solid copy 2, with real version history macOS builds in for you, but it isn't the whole rule by itself. It doesn't become 3-2-1 until you add an offsite copy alongside it: iCloud, another cloud service, or a drive that actually leaves the house. The leg most home Time Machine setups are missing isn't a second backup — it's the offsite one.

Questions

What is the 3-2-1 backup rule?

It's a simple formula for backup safety: keep 3 total copies of your data (the original plus 2 backups), store them on 2 different types of storage media, and keep 1 copy offsite, away from the other two. It's usually credited to photographer Peter Krogh's 2005 book The DAM Book: Digital Asset Management for Photographers, and the same logic now shows up in general data-protection guidance from organizations like CISA and NIST.

Does Time Machine alone satisfy the 3-2-1 rule?

No. Time Machine backing up to a single local disk is one backup, on one medium, in one location — a solid copy 2, but not 3-2-1 by itself. Getting to 3-2-1 means adding an offsite copy alongside it, whether that's iCloud, another cloud backup service, or a drive kept at a different physical location.

What counts as an 'offsite' backup?

Any backup copy that isn't in the same physical location as your Mac and your other backup. Cloud storage counts automatically, since it lives on servers elsewhere. A physical drive counts too, as long as it's genuinely somewhere else — a family member's house, an office, a safe-deposit box — not sitting on the same desk as everything it's supposed to protect against.

Try ThirdCopy free for 14 days — no card required.

Then $19.99 once. No subscription.