Published: 17.07.2026
Hard disks fail, updates break websites and mistakes happen. A backup is the only insurance that always pays out. The 3-2-1 rule gives a simple plan.
What does 3-2-1 mean?
- 3 copies of your data: the original and two backups.
- 2 different types of storage, for example the server disk and an external storage.
- 1 copy in a different location, away from the primary server.
What to back up
- Website files and uploaded media.
- Databases (use a proper dump, not a copy of live files).
- Configuration files and the list of installed packages.
- E-mail boxes, if you host mail.
Snapshots and file backups
A snapshot saves the whole disk and gives a fast restore of the entire server. File-level backups are smaller, can be restored one file at a time and can be stored elsewhere. Use both.
How often?
Decide how much data you can afford to lose. A busy shop needs backups several times a day; a static site needs one after each change.
Retention
Keep daily copies for a week, weekly copies for a month and monthly copies for a year. Old copies help when a problem is discovered late.
Test the restore
A backup that has never been restored is only a hope. Once a quarter restore a copy to a test server and check that the site works.
Protect the backups
- Encrypt them if they contain personal data.
- Use separate credentials, so an attacker on the server cannot delete them.
- Monitor the backup jobs and alert on failures.
Frequently asked questions
Does my provider make backups? Often yes, but check the frequency and retention and keep your own copy too.
