Every photographer loses files eventually. The hard drive that contained 8 years of family photos dies and the lab quote for data recovery is 1800 dollars. The external SSD that held a wedding shoot fails on the drive home. The cloud account that backed up everything gets locked because of an automated flag and customer support takes 6 weeks to respond. These failures happen often enough that backup strategy is not optional. The 3-2-1 rule, first formalized by photographer Peter Krogh in the 2000s, is the simplest framework that survives the common failure modes. It is not the only strategy, but it is the one most photography teaching converges on.

What 3-2-1 actually means

The rule has three parts.

Three copies of every important file. The working copy on your editing computer is copy one. A second copy somewhere else is copy two. A third copy somewhere else again is copy three.

Two different storage media. This means not just two drives of the same kind. If both backups are external HDDs, you have media concentration risk: the same failure mode (controller failure, manufacturing defect in a batch, firmware bug) could take both. Mix HDD with SSD, or local drive with cloud, or NAS with cloud.

One copy off-site. If your house burns down, gets flooded, or gets burglarized, all the drives in your house are gone. Off-site means physically elsewhere: a cloud backup, a drive at a relative’s house, a drive in a safety deposit box, a drive in your office.

For most photographers in 2026, the practical interpretation is: working files on the editing computer or a fast external SSD, a local backup on a NAS or large external HDD, and a cloud backup of the photo library.

Step one: the working copy

The working copy is where you actually edit. It needs to be fast: a NVMe SSD (internal or via USB4/Thunderbolt) for active projects, with capacity sized to current work plus 6 to 12 months of recent shooting.

A typical setup for an enthusiast photographer: 1 TB or 2 TB internal NVMe SSD for the current year’s shooting plus current edits. A typical setup for a professional: 2 TB to 4 TB internal or external NVMe SSD for current and recent client work.

The working copy is not the backup. It is the file you edit. The backup strategy protects against failure of the working copy.

Step two: the local backup

The local backup is fast to access and complete (everything you care about, including older archives). It lives in your home or office, on the same network as your editing computer.

For libraries under 4 TB, a single external HDD or large SSD is sufficient. A 8 TB or 12 TB external HDD costs 150 to 250 dollars and holds a deep photo library. The HDD is slower than the working SSD but it is for backup, not for editing.

For libraries 4 TB and above, a NAS (network-attached storage) is the better tool. A 4-bay Synology DS923+ or QNAP TS-464 with 4x4 TB or 4x6 TB drives provides 8 to 16 TB of usable redundant storage, plus features for time-machine backup, photo serving (Synology Photos or QNAP Photo Station), and remote access. The setup cost is 1300 to 2200 dollars depending on drive sizes.

The local backup needs to update regularly. Time Machine on Mac and File History on Windows handle incremental backups automatically. For NAS-based backups, the Synology and QNAP utilities or third-party tools like Carbon Copy Cloner and ChronoSync run scheduled backups in the background.

Step three: the off-site backup

The off-site copy is the insurance policy against fire, flood, theft, and major hardware failure. Most photographers use cloud backup for this.

Backblaze Personal at 9 dollars per month is the cheapest path for unlimited backup of one computer. It backs up everything on the computer plus directly attached drives, runs in the background, and keeps version history. The trade is that it backs up your computer’s perspective: it does not directly back up a NAS unless the NAS is mounted as a drive on the computer.

Backblaze B2 (the business cloud storage tier) at 6 dollars per TB per month is the better path for backing up a NAS or for very large libraries. Many NAS units have native B2 support: Synology Hyper Backup and QNAP Hybrid Backup Sync both work with B2.

iCloud Photos at 10 dollars per month (2 TB tier) is simple for Apple users and provides photo sync across devices, but the costs scale up for larger libraries (5 TB tier is 30 dollars per month, 12 TB tier is 60 dollars per month).

Google One at 10 dollars per month (2 TB tier) is similar. Google’s photo organization features (face recognition, search) are strong, but the JPEG-focused interface is less convenient for RAW workflows.

For photographers concerned about cloud provider lock-in, a second physical drive stored off-site (at a relative’s house, at the office, in a small safety deposit box) is a low-tech but reliable alternative. Rotate the drive monthly: bring it home, update the backup, take it back to the off-site location.

What about RAID

RAID (Redundant Array of Independent Disks) is redundancy, not backup. RAID 1 mirrors data across two drives; if one fails, the other still has the data. RAID 5 distributes data and parity across three or more drives; one drive can fail without data loss. RAID 6 distributes data and double parity; two drives can fail without data loss.

RAID does not protect against accidental deletion, ransomware, fire, theft, or RAID controller failure. A RAID array is one storage target; it counts as one copy in the 3-2-1 framework, not two.

Use RAID inside a NAS to maximize uptime and tolerate drive failures without service interruption. Do not treat RAID as a replacement for separate backups.

Versioning and ransomware protection

Modern backup systems keep version history. Time Machine keeps hourly snapshots for 24 hours, daily for a month, and weekly past that. Backblaze keeps 30 days of version history on the basic plan and unlimited on the version-history tier. Synology snapshots can keep daily, weekly, and monthly versions for years.

Version history protects against accidental deletion and ransomware. If a ransomware infection encrypts all your files, the cloud backup with version history lets you restore the pre-infection version. Without version history, the backup itself gets overwritten with the encrypted files.

Some photographers add a true offline backup: a drive that connects to the computer once a month for backup and is then disconnected and stored offline. An offline drive cannot be reached by ransomware or by accidental deletion.

Building the right system for you

For a hobbyist with 500 GB of photos: working copy on internal SSD, local backup on a 4 TB external HDD (50 to 80 dollars), cloud backup via Backblaze (9 dollars per month). Total cost: 50 to 80 dollars one-time plus 110 dollars per year.

For an enthusiast with 2 TB of photos: working copy on internal SSD or external NVMe, local backup on an 8 TB external HDD (150 dollars), cloud backup via Backblaze (9 dollars per month). Total cost: 150 dollars one-time plus 110 dollars per year.

For a professional with 8 TB of photos: working copy on external NVMe (300 to 500 dollars), local backup on a 4-bay NAS with 4x6 TB drives (1500 to 1800 dollars), cloud backup via B2 from the NAS (around 50 dollars per month at 8 TB). Total cost: 1800 to 2300 dollars one-time plus 600 dollars per year.

The point is not to spend a specific amount. The point is to have three copies, two media types, and one off-site copy. The exact configuration scales with library size and budget.

For more on photography workflow, see our guide on Lightroom Classic vs CC and our piece on free RAW editors.

Frequently asked questions

Is RAID a backup?+

No. RAID is redundancy, not backup. RAID 1 (mirroring) and RAID 5 or 6 (parity) protect against a single drive failure inside the same enclosure. They do not protect against accidental file deletion (deleted on RAID equals deleted everywhere), ransomware (encrypts all drives), theft (one stolen NAS equals all data gone), fire or flood (one location equals all data gone), or RAID controller failure (specific RAID controllers can corrupt the array). A RAID array still needs separate backups. RAID protects uptime. Backup protects data.

How much cloud storage do I need for my photo library?+

Calculate from your shooting volume. A 24 MP RAW file is typically 30 to 50 MB. A 45 MP RAW is 50 to 90 MB. If you shoot 5000 RAW files per year at 24 MP, that is roughly 150 to 250 GB per year. Most enthusiast photographers fit comfortably in 1 TB of cloud storage. Professional photographers and high-volume shooters need 2 TB or more. Backblaze Personal is 9 dollars per month for unlimited backup of one computer (the cheapest path for large libraries). iCloud and Google One are easier but cost more per TB.

Is a NAS worth it for a single photographer?+

Above 4 TB of photo library size, usually yes. A 4-bay Synology DS923+ or DS1522+ with 4x4 TB drives costs around 1300 to 1600 dollars total and gives you 8 to 12 TB of usable redundant storage. The NAS handles photo serving, time-machine backups, and remote access. For libraries under 4 TB, external SSDs and direct cloud backup are simpler and cheaper. Above 4 TB, the NAS makes the workflow cleaner.

What is the realistic lifespan of an SSD and an HDD?+

SSDs typically last 5 to 10 years of normal use, with consumer drives rated for 600 to 2000 TBW (terabytes written) and modern drives often outliving the rating. SSDs can fail suddenly with little warning when they do fail. HDDs typically last 3 to 7 years, with failure rates rising sharply after year 5. HDDs often give warning signs (slow performance, occasional errors, SMART warnings) before complete failure. Both drive types should be considered finite. The 3-2-1 strategy assumes drives will fail and plans around it.

Should I trust cloud storage for the long term?+

Cloud is one leg of the 3-2-1 strategy, not the whole strategy. Cloud providers can lock accounts (sometimes incorrectly), raise prices, change features, or shut down services. Google Photos, iCloud, Dropbox, and Backblaze are all reasonable but not invincible. Treat cloud as one backup target, with local copies as the other backup paths. The point of 3-2-1 is that no single failure (including a cloud provider problem) loses your data.

Priya Sharma
Author

Priya Sharma

Beauty & Lifestyle Editor

Priya Sharma writes for The Tested Hub.