The 3-2-1 backup rule for photographers and video editors
Turn the 3-2-1 rule into a practical protection plan for camera originals, project files, catalogs, exports, and long-term photo or video archives.
1. Translate 3-2-1 into three independent copies
The 3-2-1 rule means three total copies of important data, stored on two kinds of media or storage systems, with one copy offsite. The working file counts as the first copy; a second folder on the same drive does not count as an independent backup because one failure can remove both.
For a photography or video business, define what must survive before choosing products. Camera originals, project files, catalogs or databases, audio, graphics, and final masters may all be irreplaceable. Cache files and generated previews are usually reproducible and may not need the same protection.
| Copy | Example location | Main purpose |
|---|---|---|
| Primary | Internal SSD or fast direct-attached project drive | Current editing and organization |
| Local backup | Separate HDD, SSD, or NAS | Fast recovery from deletion or drive failure |
| Offsite backup | Encrypted cloud backup or rotated drive stored elsewhere | Recovery after theft, fire, flood, or local ransomware |
2. Keep the backup outside the failure boundary
A backup should not share every risk with the primary copy. Two partitions on one physical disk can disappear together. Two drives permanently attached to the same computer can both be damaged, stolen, encrypted by malware, or erased by an incorrect command.
CISA recommends storing an external backup safely when it is not in use and warns that a continuously connected drive can be reached by ransomware. An offsite copy adds protection from building-level events. Encrypt portable or cloud backups that contain client or personal data, and keep the recovery key somewhere you can actually retrieve it.
3. Set recovery targets before choosing capacity
Decide how much recent work you could afford to recreate. That is your recovery point target and it should drive backup frequency. A commercial shoot may justify two verified copies before leaving the location, while a personal archive may be protected by an automatic daily backup plus a less frequent offsite copy.
Also decide how quickly you need files back. A local disk or NAS is useful for fast recovery; a cloud archive can be slower but protects against local loss. Many creators need both rather than forcing one system to solve every problem.
- During capture: do not erase the card until at least two verified copies exist.
- During editing: automate a local backup and keep an offsite copy current.
- After delivery: preserve originals, project metadata, and final masters according to a written retention policy.
4. Distinguish backup, sync, snapshots, and redundancy
Synchronization keeps locations aligned, which is convenient for access but can also propagate deletion or corruption. Version history and snapshots can help recover earlier states, but their retention and failure boundaries must be understood. Confirm what happens when a file is deleted, renamed, encrypted, or replaced.
RAID can keep a storage system available after certain disk failures, but it does not create an independent historical copy. It cannot by itself protect against accidental deletion, theft, controller failure, malware, or damage to the entire enclosure.
5. Test restores and refresh the archive
A backup is useful only if it can be restored. Periodically recover a sample folder, a catalog, and a large media file to a different location. Confirm that filenames, folder structure, metadata, and application links still work. Keep backup notifications visible rather than assuming an unattended job is succeeding.
Long-term preservation is an ongoing process. The Library of Congress recommends organizing files, keeping copies on different media in separate locations, and migrating saved copies to current storage over time. Record what each drive contains, when it was last checked, and which software or credentials are needed to open the work.
Frequently asked questions
Does the memory card count as one of the three copies?
Temporarily, yes, while the card still contains the original files. Do not treat it as the long-term offsite copy or format it until at least two other verified copies exist.
Does cloud sync count as an offsite backup?
Only if the service preserves recoverable versions and its deletion, retention, and recovery behavior meet your needs. A mirrored folder without useful history is not equivalent to a backup.
Is a NAS enough by itself?
No. A NAS can be the primary copy or a local backup, but important work still needs an independent copy outside that device and preferably outside the location.
Primary references
Technical standards can change. We use the relevant standards organizations as primary references and recommend checking the device maker's current manual.