Why “we back up to the spare drive” is not enough
Most people in Ireland and the UK do not find out that their backup failed because of a fire or flood. They find out on a random Tuesday, when a laptop update goes wrong, a ransomware note appears, or a toddler rearranges a folder of invoices. A backup is only a backup if you can restore a real file, from real storage, in a time you can measure. Everything else is optimism.
The 3-2-1 rule in plain language
Three copies of your important data, two different types of device, and one copy off-site. That is the 3-2-1 rule. The third copy is not paranoia. It is how you stay calm when a power surge kills both internal drives on the same machine, or when someone clicks the wrong link and every attached disk is encrypted. Your phone photos, the sole trader’s VAT spreadsheets, a small firm’s shared drive — the same idea applies. One copy is running live. A second is local but separate — often an external SSD or a NAS on a different cable and controller. A third is somewhere else, physically, so a burglary or a burst pipe in the office or home is not a total loss event.
Local options that work on macOS, Windows, and Linux
Time Machine on a Mac, aimed at a USB drive or a cheap NAS, is a strong default. It is simple enough that you will actually use it, and the hourly snapshots help when a file is damaged gradually rather than deleted in one go. The catch is the same for every “set and forget” tool: the disk can fill quietly, the backup drive can be just old enough to fail on the day you need it, and a Mac that never sleeps on the wrong power settings may skip runs for a week. Check the menu bar or System Settings from time to time, and test a restore, not a browse.
On Windows, File History plus a second tool for a full image is a reasonable split: File History for documents and a periodic image (vendor tool or a third-party one) for the whole system when the machine has to be rebuilt from bare metal. On Linux, Borg or Restic to a local path or a remote Backblaze B2 or S3‑compatible bucket is a pattern we see on laptops running Fedora or Ubuntu for serious small‑business work. Restic is command-line first; Duplicati brings a web UI; keep it updated, because web-facing backup UIs are a common attack surface if you expose them to the internet without hardening.
Cloud destinations that match Irish and UK compliance worries
A residential customer in Cork or a sole trader in Bristol often asks whether data “has to stay in the EU.” The practical answer is: pick a provider that offers EU or UK data residency if the contract or your sector demands it, read their terms, and use client-side encryption where the product supports it. Backblaze B2 and similar object storage are storage rental, not magic; you still want encryption at rest and a strong second factor on the account. Ransomware crews love backup consoles that are logged in 24/7 in the same browser profile as the email they phished. Separate accounts, strong passwords, and a hardware key where possible are not theatrics. They are how you keep the off-site copy off-limits to the same software that is scrambling your C: drive.
When the threat is encryption, not deletion
Ransomware does not only hit large hospitals. A small business with a misconfigured RDP port, or a home user reusing a weak password on a QNAP or Synology that faces the public internet, can lose both live data and a poorly isolated backup. If your NAS is visible from the whole internet, fix that before you add another terabyte of disks. The usual pattern that still works: VPN or Zero Tier back to the office or home, local segmentation so the backup target is not the same share letter as the live files, and immutable snapshots on the NAS if the firmware offers them and you have tested a rollback.
The restore drill nobody schedules
Once a quarter, on a day you are not in crisis, pick a file you would hate to lose, delete the test copy from a scratch folder, and put it back from backup. If that process takes an hour of forum diving, you are not “backed up.” You are hoping. The same test applies to business email: if you are paying for Microsoft 365 or Google Workspace, retention policy and a separate export to cold storage are different things. A deleted mailbox can leave the recycle bin on a schedule you did not read.
Money in rough numbers (€/£, not quotes)
A decent 2–4 TB external drive is often in the order of €80–130 in Irish retailers and similar in the UK, depending on sales and port type. Cloud storage for a few terabytes of real backup, not just phone thumbnails, is usually a two‑figure monthly fee per use case, more if you add team seats and long retention. A NAS is hardware plus disks, then electricity 24/7; budget €400+ for a small two‑bay with drives at the time of writing, and treat it as a five‑year appliance, not a family heirloom. Your numbers will vary. The point is to spend once on something you will maintain, not to buy a silver badge and never log in.
A sensible default for a home with two adults and a pile of photos
- Laptop Time Machine or File History to a drive you can unplug after a run if you are nervous about lightning.
- A nightly cloud job for documents and photo folders that matter, with versioning turned on.
- A check every few months: restore one old photo and one recent document. If you cannot, fix the job before the next “big trip” that will generate irreplaceable images.
If this is too much hassle, we can do it for you — get a quote.