The 3-2-1 Backup Rule in 2026: What Each Clause Actually Defends

A Rule Worth Understanding

The rule is quoted constantly and examined rarely. Each of its three clauses defends against a specific, different failure, and an estate that satisfies the count without satisfying the intent is not protected by it.

Clause by Clause

Three copies survive corruption of any one. Two media types survive a defect common to a class of hardware. One offsite copy survives loss of the building. Remove a clause and you remove exactly the failure it covers.

Where It Needs Extending

The 3-2-1 backup rule predates attackers who hunt backup catalogs first, which is why 2026 variants add immutability and verification rather than replacing the original clauses.

Counting Is Not Protecting

Three copies reachable from one compromised console behave as a single copy. Isolation and immutability are what turn a satisfied count into an actual defence against the threat that dominates today.

Auditing Your Own Estate

Map each existing copy to the clause it satisfies and name the failure it survives. Most teams find at least one clause met on paper only, and finding it is the point of the exercise.