The 3-2-1 backup rule gets repeated so often it’s turned into a slogan: three copies of your data, on two different media types, with one copy off-site. It’s good advice. It’s also advice that was mostly written with a few hundred gigabytes of irreplaceable photos in mind, not the 50, 100, or 200TB array a serious data hoarder ends up running. At that scale, “just keep an off-site copy” stops being a checkbox and starts being a real infrastructure and cost decision. Here’s what each part of 3-2-1 actually means once your data won’t fit on a shelf of external drives anymore.

Three copies: what actually counts as a copy

The rule says three, but it means three independent copies, not three places the same failure can take out at once. Your live array plus a snapshot on that same array is not two copies, it’s one copy with a rollback option, a controller failure, a bad firmware update, or ransomware that reaches the snapshot pool takes both out together. A real second copy needs to survive whatever kills the first: separate hardware, ideally a separate power source, ideally not mounted and writable at all times.

At data-hoarder scale, this usually shakes out as: the live/working array (fast, always online, what you actually use day to day), a local backup copy (a second NAS, or a backup-dedicated pool on the same box using different physical disks) that’s slower but survives a drive failure or controller death on the primary, and the off-site copy covering the scenario neither of the first two can, the building itself.

Two different media: don’t overthink this one

“Two different media types” trips people up more than it needs to. The intent is avoiding a single failure mode wiping out every copy at once, a bad batch of drives from the same manufacturing run, a firmware bug specific to one drive model, a RAID controller that corrupts everything it touches. In practice for a data hoarder this means: don’t build your primary array and your local backup out of the exact same drive model bought in the same order, and don’t rely on optical media or tape as your only “different media” unless you’re already invested in that workflow (tape especially becomes genuinely cost-effective again once you’re well past 100TB, LTO media cost per TB drops below spinning disk at that scale, but it’s a real workflow commitment, not a casual add-on).

For most homelab-scale hoarders, “two media types” in practice means two separate arrays, ideally different drive models or at least different purchase batches, rather than a literal tape vs. disk split. That satisfies the intent without forcing a workflow most people don’t actually want.

One copy off-site: the part that actually gets skipped

This is the step almost everyone skips at scale, and it’s the one that matters most, because it’s the only piece of 3-2-1 that protects against fire, flood, theft, or a lightning strike that takes out every drive in the house at once. The honest reason it gets skipped isn’t laziness, it’s that off-site storage for tens of terabytes is genuinely expensive or genuinely inconvenient, usually both. There’s no way around picking a real tradeoff here.

Cloud cold storage (Backblaze B2, Wasabi, or similar). Priced per TB/month, meaningfully cheaper than mainstream cloud storage (S3 Glacier-style tiers exist too but retrieval costs and delays make them a worse fit for a working backup). At 50TB, expect real, ongoing monthly cost, not a rounding error, this is the tradeoff: convenient and automatable, but you’re paying every month indefinitely, and the entire point of a backup, restoring after a real disaster, could mean pulling 50TB back down over a home internet connection, which is a multi-day proposition even on a fast link. Worth pricing out egress/retrieval costs specifically, not just storage cost, before committing, some providers charge meaningfully more to pull data back down than to store it.

A second physical NAS at a friend’s or family member’s house. Zero ongoing cost beyond the hardware itself and whatever bandwidth it uses to sync, and restore speed is whatever your connection to that location allows, often faster than pulling 50TB from the cloud. The tradeoffs are real too: you’re depending on someone else’s power, internet, and willingness to keep a box running indefinitely, and the initial data transfer (the “seed”) for tens of terabytes over the internet can take weeks, most people physically drive the drives to the site once for the initial seed rather than trying to push it all over a home connection.

A rotating drive taken to a safe deposit box or a workplace. The lowest-tech option and the one most likely to actually happen for a solo operator, since it requires no ongoing service cost and no dependency on someone else’s hardware. The tradeoff is currency, a drive that only gets swapped monthly means your off-site copy is, worst case, a month stale, and it’s entirely manual, nothing enforces that the swap actually happens on schedule.

There’s no universally right answer among these three, pick based on what you’ll actually keep doing consistently. A technically superior plan you abandon after two months protects you less than a simpler one you actually maintain.

What to actually back up, since “everything” usually isn’t realistic

At data-hoarder scale, backing up literally everything off-site is often neither affordable nor necessary. Split your data by how replaceable it actually is:

  • Irreplaceable (family photos, personal documents, anything that doesn’t exist anywhere else): this is non-negotiable for the off-site copy regardless of cost, it’s usually a small fraction of total array size anyway.
  • Expensive to re-acquire but technically replaceable (a media library built up over years of ripping/collecting): worth backing up if the off-site option is affordable at that scale, but a real candidate for being excluded from the expensive tier if cost is the limiting factor, since it’s re-buildable, just slowly and annoyingly.
  • Trivially re-downloadable (Linux ISOs, anything you could re-acquire in an afternoon): generally not worth off-site backup budget at all.

Sorting your array into those tiers before pricing out an off-site solution usually cuts the actual off-site footprint by more than half, which materially changes which of the three options above becomes affordable.

Bottom line

3-2-1 doesn’t get easier at data-hoarder scale, it gets more expensive and more inconvenient at exactly the point where skipping the off-site step feels most tempting, because the local array already feels safe with RAID/RAIDZ redundancy. Redundancy protects against a drive failing. It does nothing against fire, flood, theft, or ransomware hitting the whole box at once, that’s what the off-site copy is actually for. Sort your data by how replaceable it is first, then pick whichever off-site option (cloud cold storage, a second box at another location, or a rotating physical drive) you’ll actually keep maintaining, rather than the one that looks best on paper and quietly stops happening after month two.