Backups that actually restore

The 3-2-1 rule still rules: three copies of important data, on two different media, one offsite. The offsite copy is what saves you from theft, fire and ransomware — a second copy on the desk next to the PC is barely a backup at all.

An untested backup is a rumor. Restore one random file every quarter and do a full dry run once a year; most people discover broken backups exactly when they need them. Back up in this order: documents and photos, password vault export, then system images if you have space left.

Ransomware changes the rules

Ransomware encrypts everything it can write to — including the backup drive that is always plugged in. The offsite copy must be unreachable from the infected machine: versioned cloud storage, a drive you plug in monthly, or append-only media. A backup the malware can rewrite is decoration.

Automate or it will not happen

Manual backups die in week three. Schedule them: OS tools daily for documents, a weekly image before patch day, phone photos syncing on Wi-Fi automatically. Then put a quarterly calendar reminder titled «restore one file» — the reminder is the system, willpower is not.