In This Article
Backup architecture is simpler than it has been in twenty years and most people still get it wrong. The reliable shape is the same 3-2-1 rule it has always been (three copies of data, two storage media, one off-site), but the modern tooling does most of the work automatically if you set it up once. The actual failure mode is rarely losing data to hardware death; it is losing data to ransomware that encrypted the backup along with the source, to a phone that broke before the photo sync completed, or to a sync conflict that quietly overwrote the good file.
This guide covers a backup plan that survives the common failure cases for phones, laptops, and household NAS setups, with concrete tool picks and price ranges as.
TL;DR
The pick: Follow the 3-2-1 rule with at least one immutable backup that ransomware cannot reach; Backblaze B2 Object Lock or iDrive S3 work well at modest cost.
Runner-up: Phones backup to Google One or iCloud at the largest tier you need; do not rely on the free 5 GB or 15 GB starters.
Skip if: Skip backup strategies that depend on a single cloud account; if that account is compromised, you lose source and backup at once.
Why 3-2-1 still works
The 3-2-1 rule says you need three copies of your data, on two different storage media, with one copy off-site. It is durable because the cases that destroy one copy rarely destroy all three. A drive fails; the other copies survive. A fire takes the house; the off-site copy survives. Ransomware encrypts everything online; the cold off-site backup survives.
The 2020s addition is the immutability layer. Modern ransomware actively targets backups stored in writable cloud accounts. The fix is at least one backup with object-lock or write-once-read-many semantics that an attacker cannot delete even with stolen credentials.
Phone backup tiers
Google One offers 100 GB at $1.99 monthly, 200 GB at $2.99, 2 TB at $9.99, and 5 TB and up for power users. The included backup covers SMS, MMS, RCS (with end-to-end backup enabled via a Messages PIN), contacts, calendar, app data through Android Backup, and Photos at original quality. iCloud+ offers similar tiers and covers the same surface on Apple devices.
Pick the tier that holds two to three times your current usage so you have growth room. Free tiers (15 GB Google, 5 GB iCloud) run out fast and silently fail on photos and messages, which are the data you actually want.
Laptop backup that covers ransomware
On Mac, Time Machine to an external drive plus Backblaze Personal at $9 monthly gives you local restore speed plus off-site coverage. On Windows, File History plus Backblaze, or Veeam Agent Free plus Backblaze, covers the same ground. Both Mac and Windows benefit from a third immutable copy: Backblaze B2 with Object Lock or iDrive S3 with bucket-lock, at $5 to $10 monthly for several hundred gigabytes.
The immutable copy is the one that survives a credential compromise. An attacker who steals your password and 2FA still cannot delete a copy held under object lock. Set the lock window to thirty days minimum; this is the bedrock layer.
Home NAS and Synology backups
A Synology NAS at home covers the local copy of laptop and phone backups, photos via Synology Photos, and home video. Synology’s Hyper Backup ships with native targets for Backblaze B2, Wasabi, and S3-compatible providers; configure it to push an off-site copy nightly with thirty-day version retention.
For households with multiple devices, the NAS becomes the natural hub: laptops back up to the NAS, the NAS pushes to the cloud, and phones back up directly to the cloud as well. This satisfies 3-2-1 across the household with one capital purchase and a small monthly cloud bill.
What about photos and the major cloud services?
Google Photos and iCloud Photos are not by themselves a backup; they are sync services. If you delete a photo on the phone, it deletes from the cloud after the trash retention window expires. A real photo backup needs a second copy that is not in the same Google or Apple account.
Tools like icloudpd, gphotos-sync, and Synology Photos pull copies of your cloud photo library to a separate location nightly. That second copy survives an account compromise or an accidental sync deletion. For irreplaceable photos, the rule is at least two independent copies, one of which is not in your sync provider.
Common failure modes worth testing for
Test the restore. The single biggest backup failure is realising at restore time that the backup did not include the files you assumed it did, or that the restore process is too slow or complex to be useful. Schedule a quarterly restore drill: pick a random file or folder, restore from each backup tier, confirm the data matches.
Watch for silent failures. Phone backups can fail for weeks before a user notices the storage full notification. Set monthly calendar reminders to open Google One or iCloud and confirm the last backup timestamp matches your expectation. A backup that has not run in three months is no backup at all.
Which backup tier fits my situation?
- Single user with phone and laptop: Google One or iCloud at 200 GB plus Backblaze Personal plus one immutable cloud copy.
- Family of four: Google One Family at 2 TB or iCloud+ Family at 2 TB plus Backblaze for each laptop plus a household NAS.
- Photographer or videographer: Synology NAS at home plus Backblaze B2 with Object Lock plus a separate cold copy on rotation drives.
- Small business: On-prem NAS or server, immutable cloud (B2 Object Lock or iDrive S3), and quarterly restore tests.
- Just starting out: Google One or iCloud at the smallest paid tier this month. Add immutable cloud next month.
FAQ
Is Google Photos a backup?
No, it is a sync service. Deleting from one device deletes from all after the trash window expires. Use it as one tier but pair with a separate independent copy.
How often should I test restores?
Quarterly is a reasonable minimum for personal users. Businesses should test monthly. Pick a random file, restore it, confirm it matches the source.
Are external hard drives still a good backup?
Yes, as the local fast-restore tier. They are weak as the off-site tier because they live in the same building. Pair with a cloud copy for the off-site role.
What about backup to USB stick?
USB sticks have higher failure rates than external SSDs and HDDs. Use them for short-term file transport, not as a primary backup medium.
The verdict
The 3-2-1 rule still works: three copies, two media, one off-site, with an immutable tier on top. Phone users start with Google One or iCloud at a paid tier; laptop users add Time Machine or File History plus a Backblaze-style cloud backup; households with a NAS get the best deal per gigabyte. The piece almost everyone misses is the immutable layer that ransomware cannot reach. Add it now, before you need it.
