← Back to all guidesUpdated Sep 28, 2026
Once you have downloaded an export, the next decision is what to do with it. Most files end up buried in Downloads or sitting on a single cloud drive. Fine for a few weeks, risky for the long term. A simple 3-2-1 backup setup keeps your archive available, encrypted, and recoverable.
Written by Charles
The simple rule to follow
A practical version of the 3-2-1 backup rule works well: keep three copies of important data, use two different storage types, and keep one copy off-site.
- 1 working copy on your computer
- 1 local backup on an external SSD or hard drive
- 1 off-site backup in a separate cloud or physical location
How to organise your exports
- Use folders named by service and date, like google-2026-04
- Keep a top-level folder called data-exports
- Add a short README note for unusual exports or restore steps
What should be encrypted
- Encrypt anything containing <a href="/guides/fitbit-data-export">Fitbit sleep and HRV data</a>, financial records, or precise location history
- Encrypt message archives if they include private conversations
- Use strong device passwords and full-disk encryption on your computer
Recommended storage
Use one local drive plus one off-site encrypted cloud backup.
- ProtonDrive (ProtonDrive) is a strong fit for privacy-first off-site backup
- pCloud (pCloud) is useful for long-term archive storage
- An external hard drive (portable SSD) is the easiest local second copy
- A NAS drive (Synology NAS) is worth it if you export regularly
Sources consulted
The 3-2-1 backup rule has a long history in IT and security practice. The references below informed the framing of the rule and the storage recommendations.
- CISA (US Cybersecurity and Infrastructure Security Agency). Data Backup Options. Https://www.cisa.gov/sites/default/files/publications/data_backup_options.pdf. Primary US federal source on the 3-2-1 backup rule
- NIST SP 800-34 Rev. 1 (Contingency Planning Guide for Federal Information Systems). Https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-34r1.pdf. Federal contingency planning framework, Section 5 covers backup and recovery
- US-CERT (predecessor to CISA) backup guidance. Https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks. Long-standing federal guidance on protecting data and accounts
- Proton Drive security model: https://proton.me/blog/security-model. First-party documentation of Proton's encryption architecture
- pCloud Crypto folder documentation: https://www.pcloud.com/crypto.html. First-party documentation of pCloud's client-side encryption option
FAQ
What is the 3-2-1 backup rule?
It means keeping three copies of important data, on two different storage types, with one copy stored off-site.
Do I need both cloud and local backups?
Usually yes. Local backups are fast and simple, while cloud backups protect against theft, hardware failure, and location-specific disasters.
Should I encrypt my exports?
Yes for anything sensitive, especially location history, financial data, health data, IDs, or private message archives.