Windows Backup Strategies That Actually Work (3-2-1, Without the Enterprise Price)

Windows backup strategies that survive ransomware and dead drives: the 3-2-1 rule, what to back up, free tools that do it right, and how to test restores.

Quick answer

A Windows backup survives ransomware only with the 3-2-1 rule: three copies, two media types, one offsite. Back up documents and photos continuously, test restores quarterly, and use free tools — File History plus cloud versioning covers most homes without buying anything.

Illustration for Windows Backup Strategies That Actually Work (3-2-1, Without the Enterprise Price)
Advertisement

What to Back Up (and What to Skip)

Backup everything you can't re-download:

  • Irreplaceable: photos and videos, documents, tax records, saved game files, browser bookmarks/passwords (export or use a synced password manager), the '_notes' files of your life.
  • Re-creatable (skip or last): installed programs (re-install from winget — see our utilities list), Windows itself, the Steam library you can re-download, application settings you'll re-tune.

This distinction halves backup size and time: ~50–200 GB for most households, not 2 TB of programs.

The 3-2-1 Setup, Household Edition

  1. Copy 1 — the live data: your files on the PC (that's what you're backing up).
  2. Copy 2 — local backup: an external USB drive with scheduled, versioned backups. Windows' built-in File History (Settings → Backup) does this free and well: hourly versions, easy file-by-file restore. Budget drive: 2 TB external, ~$60, buy a name brand.
  3. Copy 3 — off-site: either cloud backup (Backblaze: unlimited, ~$99/year, genuinely zero-config for the whole drive) or the rotation method — a second external drive that lives at a relative's/office and comes home monthly to update.

Cloud sync services (OneDrive etc.) can substitute for copy 3 IF you use their version history (OneDrive keeps 30 days; paid tiers more) — ransomware and accidental deletions then have a recovery path. But a dedicated backup app remains the gold standard.

The Ransomware Clause (Why 'Attached Drive' Isn't Enough)

Modern ransomware encrypts every drive it can reach — including the USB backup left plugged in. The defenses:

  • Disconnect after backup: File History runs on schedule; unplug the drive between runs (or use a NAS with snapshot support).
  • Versioned cloud backup (Backblaze, and OneDrive's version history) — the off-site copy is untouchable by anything on your desk.
  • Test restore quarterly: a backup that has never been restored is a hypothesis. Pull one file, then one folder, from each copy. Ten minutes, four times a year.

This is the difference between 'we had backups' and 'we recovered.' Every ransomware story you've heard with a sad ending skipped one of these three lines.

Free Tools That Do It Properly

  • File History (built-in): the household default — enable it today if you do nothing else in this article.
  • Macrium Reflect Free / Clonezilla: full disk images for the 'my drive died, rebuild everything in 30 minutes' scenario. More technical; the complete answer.
  • Backblaze Personal Backup: not free (~$99/year) but the honest recommendation for off-site: unlimited, automatic, restores by mail on USB if needed.
  • SyncBackFree or FreeFileSync: for mirror-to-NAS/custom-folder workflows with rules.

Skip: trialware backup suites that nag toward purchase, and anything advertising itself as 'PC backup cleaner.' The free tier of backup is genuinely complete in 2026 — this is one category where Windows' built-ins plus one cloud account cover everything.

The 30-Minute Setup (Do It Today)

  1. Buy/borrow a 2 TB external drive if you don't own one.
  2. Enable File History onto it (Settings → Backup → Add a drive). Let the first backup run overnight.
  3. Set a cloud account for the crown jewels: OneDrive/Google Drive for the Documents+Photos folders (free tiers cover essentials; 100 GB is $2/month).
  4. Calendar a quarterly restore test — one file from the drive, one from the cloud.
  5. Optional but ideal: Backblaze on the whole machine for the off-site copy done-for-you.

Thirty minutes, roughly the cost of two coffees, and the next drive failure, ransomware hit, or 'the laptop fell in the pool' incident becomes an afternoon instead of a bereavement. There is no cheaper insurance in computing.

Frequently Asked Questions

Three copies of your data, on two different types of storage, with one copy off-site (cloud or a drive kept elsewhere). The logic: any single failure — drive dies, ransomware encrypts everything including attached drives, house flood — leaves at least one good copy.
Advertisement

Related reading