What a Backup Protects Against and What It Does Not

Why sync is not a backup, why it fails against ransomware and deletion, the 3-2-1 principle, why versioned backups matter, and why to test a restore.

External drive cables, photographed for a technology article.

Everyone knows they should back up, but few understand what a backup actually protects against, and this gap leads people to think they are protected when they are not. A copy of your files is not automatically a backup, and some things people call backups fail precisely when they are needed most. Understanding what a real backup protects against, and what it does not, is the difference between genuine safety and false confidence.

Sync is not backup

The most important and most common misunderstanding is that syncing files to the cloud is the same as backing them up. It is not. Sync keeps a copy of your files that mirrors the current state, so if a file changes, the synced copy changes too, and if a file is deleted or corrupted, the synced copy is deleted or corrupted as well, since sync faithfully reflects the original. A backup, by contrast, keeps copies as they were at points in time, so a deleted or corrupted file can be recovered from before the problem. This distinction is crucial: sync protects against losing a device but not against losing or corrupting the files themselves, because it mirrors the damage, the sync-versus-backup point the guide on protecting data properly reflects.

Why sync fails against the worst threats

The failure of sync becomes stark against the threats a backup most needs to handle. If ransomware encrypts your files, sync dutifully copies the encrypted versions to the cloud, replacing the good copies with the ruined ones, so the sync offers no protection. If you accidentally delete files, sync deletes them everywhere. If a file corrupts, sync spreads the corruption. In each case, sync fails precisely because it mirrors the current state faithfully, including the damage. This is why relying on sync as a backup leaves you exposed to exactly the disasters a backup should protect against, and why understanding the difference matters so much, the mirrored-damage problem the guide on how storage behaves under stress reflects in another form.

The 3-2-1 principle

The rule Means
3 copies The original plus two backups
2 media On two different kinds of storage
1 offsite One copy kept away from the others

The established principle for real protection is often summarised as three copies, on two kinds of media, with one offsite. Three copies means the original plus two backups, so no single loss destroys everything. Two kinds of media means not relying on one type of storage that could all fail together. One offsite means keeping a copy away from the others, so a local disaster like fire or theft does not take every copy. This principle protects against the range of threats a backup should cover, from device failure to disaster, and following it, even loosely, is what turns a vague sense of being backed up into genuine protection, the layered-safety approach the guide on understanding what storage can and cannot do reflects.

Retention and versioned backups

A real backup keeps versions over time, not just the latest state, and the retention window, how far back you can recover, matters. A backup that keeps only the most recent version protects against device loss but not against a problem you discover later, since the good version may already have been overwritten. A versioned backup keeping a history lets you recover a file as it was days, weeks, or longer ago, which is what protects against corruption or unwanted changes discovered after the fact. This is why good backup keeps a history rather than just a mirror, and why the retention window is worth considering: a longer history costs more storage but protects against problems noticed late, the versioning point the guide on choosing storage for a purpose reflects.

Testing that it works

The final, most neglected part of backup is testing that it actually restores, because a backup you have never tested is a hope, not a guarantee. Backups can silently fail, become corrupted, or not include what you assumed, and the time to discover this is not when you have lost the original. Periodically restoring some files from a backup, to confirm it works and contains what it should, is the only way to know the backup will save you. This test transforms a backup from an assumption into a verified protection, and skipping it is why people with backups still lose data, when the backup they trusted turns out to be incomplete or unrecoverable at the crucial moment, the verify-it approach the guide on making protection real reflects.

Building a backup that actually protects

Turning this understanding into real protection is simpler than it sounds. Combine a versioned backup that keeps a history, so you can recover from problems discovered late, with an offsite copy, so a local disaster does not take everything, and you have covered the main threats. Many backup services and tools do this automatically once set up, keeping versions and storing a copy remotely, so the effort is mostly in choosing and configuring a real backup rather than relying on sync. The key is to recognise that a backup must keep history and be separate from the original, which is what distinguishes it from a mere mirror of your current files, a distinction the guide on choosing the right storage for the job reflects.

Once such a backup is running, the final step is simply to test it occasionally, restoring some files to confirm it works, which is what separates genuine protection from false confidence. With a versioned, offsite, tested backup in place, you are protected against the full range of threats: device failure, deletion, corruption, ransomware, and disaster, because you have copies from before any problem, kept somewhere safe, that you have confirmed you can restore. This is what a real backup provides and what sync alone cannot, and understanding the difference is what lets you build protection that will actually save your data when something goes wrong, rather than discovering at the worst moment that what you had was never a backup at all.

Frequently asked questions

Is cloud sync the same as a backup?

No. Sync mirrors the current state of your files, so if a file is deleted, corrupted, or encrypted by ransomware, the synced copy is too, since sync faithfully reflects the original including any damage. A backup keeps copies as they were at points in time, so you can recover from before a problem. Sync protects against losing a device but not against losing or corrupting the files themselves, which is what a real backup does.

How many backup copies do I need?

The established principle is three copies, on two kinds of media, with one kept offsite. Three copies mean the original plus two backups, so no single loss destroys everything; two kinds of media avoid relying on one type that could fail together; one offsite protects against a local disaster like fire or theft. Following this, even loosely, gives genuine protection against the range of threats a backup should cover.

How often should I test a restore?

Periodically, and certainly before you rely on the backup for anything important. A backup you have never tested is a hope, not a guarantee, since backups can silently fail, corrupt, or omit what you assumed. Restoring some files occasionally to confirm the backup works and contains what it should is the only way to know it will save you. Testing turns an assumption into verified protection, which is why it matters so much.