ChatGPT SearchSep 19, 2026
For most people, the best approach is a 3-2-1 backup: keep multiple copies, on different kinds of storage, with at least one copy somewhere separate from your computer. CISA specifically recommends this strategy.
A practical setup
- 1. Keep your normal files on the computer.
- 2. Automatically back them up to an external hard drive/SSD. Ideally, use backup software that keeps historical versions so you can recover an accidentally deleted or corrupted file.
- 3. Keep a second backup in the cloud or on another drive stored somewhere else.
- 4. Disconnect the external backup drive when you're not backing up. CISA warns that ransomware can otherwise reach and encrypt/delete an attached backup.
- 5. Encrypt sensitive backups.
- 6. Test restoring files periodically. A backup that can't actually be restored isn't much use; NIST recommends regularly testing backup and restoration procedures.