I tell my customers this more than almost anything else: if your important files live in only one place, you're one bad day away from losing them — for good. The good news is that protecting yourself is simple and, these days, can be almost completely automatic.
The single point of failure
Most people's files live in exactly one place: their computer. If you've set up a local backup — a Mac Time Machine drive, or an external drive on Windows — that's a big step, and it'll save you from the most common disaster, a failed hard drive.
But here's the question I always ask: that backup drive — where does it sit? Usually right next to the computer. So if the house or office burns down, or here in North Texas takes a direct hit from a tornado, both your computer and your only backup are gone at the same time. If nothing is kept anywhere else, you could lose everything. That's a single point of failure — and it's the trap most people fall into.
The simple rule: 3-2-1
You don't need to be technical to remember this. It's the rule the professionals use, boiled down:
Three copies
Your working files, plus two backups — not just one.
Two kinds of storage
For example, an external drive and the cloud — not both on the same device.
One off-site
At least one copy somewhere else entirely, safe from fire, theft, or weather.
That third number — one copy off-site — is the one almost everyone is missing, and it's the one that saves you when the worst happens.
Local backups (the easy first step)
On a Mac, Time Machine makes this almost effortless: plug in an external drive, turn it on, and it quietly backs up in the background. It's also a lifesaver when you buy a new Mac — your whole setup moves over in one step. Yet I still meet so many people who've never turned it on. On Windows, the built-in File History and backup tools do much the same job.
Local backups are fast and they're the right first move — but remember, on their own they're still one location. Pair them with an off-site copy and you're genuinely protected.
The cloud — automatic off-site protection
Services like iCloud on the Mac and OneDrive on Windows can make that off-site copy completely automatic — your files are safely stored somewhere else without you lifting a finger. It's the easiest way to cover the "1" in 3-2-1.
Some people tell me they don't trust the cloud — they've heard about data breaches, and that's a fair concern. My honest take: reputable providers encrypt your data and are, for most people, far safer than the much bigger and more likely risk — having no off-site copy at all when a drive dies or disaster strikes. You don't have to choose one or the other, either; the strongest setup combines a local backup you control with an off-site copy for peace of mind. I'm happy to help you weigh the options for your situation.
Watch out — not every file survives every backup. Some cloud and sync services don't handle certain file types correctly, especially on the Mac, where some files look like one document but are actually a bundle of many files inside (a number of design and web-project files work this way). A service that mishandles them can quietly corrupt the file, so what you get back won't open. That's exactly why the real test isn't "is the file there?" — it's "does the file I restored actually open and work?"
A backup you've never tested isn't really a backup. Whatever method you use, check now and then that you can actually open the files back up. The two stories below are exactly what happens when no one does.
Two true stories worth remembering
When the backup device itself got attacked
A while back, a major maker of network storage drives (NAS) offered a handy feature: connect your drive to their cloud service and reach your files from anywhere. Then attackers exploited that setup and pushed ransomware to thousands of these devices around the world at once — encrypting everything and replacing each device's login screen with a ransom demand and a unique code tied to that device's decryption key.
In its rush to stop the spread, the manufacturer force-pushed an update that wiped the ransom screen — and with it, the very information some victims needed to decrypt. People who had even paid couldn't get their files back. This is well documented, and it happened to one of my own customers. It was a very hard recovery.
Three years of backups onto a single worn-out tape
Early in my career I looked after the Mac-based graphics department of a large multinational — a team their IT group otherwise left alone. IT installed a tape backup on a Mac that hosted two big shared drives holding all the department's work, and showed one employee how to insert a tape each night. But they gave her exactly one tape, and never checked back. For three years she dutifully ran that same single cassette every night — with no one ever showing her how to tell whether the backup actually worked.
Then, two days before the annual shareholder report went to the printer, with the whole team away on vacation, one shared drive failed catastrophically and took the other down with it. They called me. I reached for the tape… and it had been run so many times you could see right through it. Nothing was recoverable. The company had to track down its designers, pull them off vacation, and rebuild the entire report in 24 hours.
Prove you can recover — then keep checking
Here's the step almost everyone skips: setting up a backup is not the finish line. A backup is worth nothing until you've actually restored a file from it and watched it open and work properly. Do that the very day you set it up — and then keep checking every so often.
Backups fail quietly. A drive wears out, a cable works loose, a cloud sync stops without telling you, a setting changes after a software update. Nothing flashes red. The only way to know your backup is real is to test a restore now — and test it again down the road. If it's been a year since you last tried, you don't have a backup; you have a hope. That worn-through tape ran every night for three years and looked like it was working the whole time. The bottom line: if a backup can't hand you back files that actually open and work, it isn't a backup at all.
What good backup looks like
You don't need all of this on day one — but this is the picture we're aiming for:
- It runs automatically — no remembering
- At least one copy off-site (the cloud counts)
- More than one backup, not a single drive
- Tested over time — you've restored a file, and re-check
- One copy kept offline / disconnected
- Recovery keys & codes kept somewhere safe
Let me set it up for you
If any of this feels like one more thing to worry about — don't. Setting up Time Machine, turning on a cloud backup, and building a simple, genuinely safe 3-2-1 plan is exactly the kind of thing I do all the time, on both Mac and Windows. We can have you protected in a single visit, and I'll document exactly how it's set up so you always know where your data lives.