Photos are the files people most regret losing and least systematically protect. The standard answer is simple enough to actually follow.
The Rule
- 3 copies of your data.
- On 2 different types of storage.
- With 1 copy offsite.
Each element counters a specific failure:
- Three copies — protects against a single drive failing, which is a matter of when rather than if.
- Two media types — protects against a systematic failure affecting one kind of storage, or a single software problem corrupting everything on one system.
- One offsite — protects against fire, flood, theft and ransomware, which take everything in one location regardless of how many drives you own.
Why Cloud Sync Is Not a Backup
This is the most important practical point. Sync services replicate the *current state* of your files. That means:
- Delete a photo and it disappears everywhere, usually within seconds.
- Corrupt a file and the corruption syncs.
- Ransomware encrypts your files and the encrypted versions sync, overwriting the good ones.
- An accidental folder move propagates to every device.
Most services keep deleted files for a limited window (often 30 days) — useful, but that's a safety net, not an archive. If you notice a loss a year later, it's gone.
A backup keeps *previous versions*, independent of the live copy. That's the distinction that matters.
A Realistic Personal Setup
- Copy 1: your working library on your computer or phone.
- Copy 2: an external drive with an actual backup tool that keeps version history (Time Machine, File History, or a dedicated backup application). Not a manual drag-and-drop copy, which is a mirror rather than a backup.
- Copy 3: a cloud backup service (as opposed to sync), or a second external drive stored somewhere else — a relative's house, an office, a safe deposit box.
Rotate the offsite drive periodically if you use one, or an incident that happens between rotations costs you the interval.
Habits That Make It Work
- Automate it. A backup you have to remember is a backup that stops after three weeks.
- Verify restores, not backups. A backup that has never been restored is an untested assumption. Restore a random folder once or twice a year.
- Watch the phone. Most photos are taken on phones and many are never copied off. Ensure automatic upload is on *and* that the upload target is itself backed up.
- Back up the originals, not just exports. Losing a RAW library and keeping the JPEGs is a real and common regret.
- Include the catalogue. If you use a photo manager, its database holds your edits, ratings and keywords — often more work than the images themselves.
- Check the storage plan. Free tiers fill silently, and uploads stop. Many "lost" photos were never uploaded at all.
Long-Term Considerations
- Drives fail with age — plan on replacing external drives every 3–5 years, and migrate rather than accumulate.
- Formats and services outlive neither — keep archives in widely-supported formats (JPEG, TIFF, PNG) rather than proprietary ones, and don't rely on a single vendor existing forever.
- Storage is cheap relative to the loss. The entire cost of doing this properly is usually less than one professional data recovery attempt, which may fail anyway.