Your home server has three drives. You feel safe. Then a pipe bursts, or lightning hits, or a thief walks off with the whole box.

All three copies gone in one afternoon.

That's the mistake almost every new self-hoster makes: they keep every backup under one roof. Let's fix it without spending a fortune.

Mistake 1: Counting drives in the same machine as "backups"

Two drives in one server is not two backups. It's one flood, one power surge, one theft away from zero. A real backup lives somewhere your main machine can't drag it down with it.

The fix is a rule worth memorizing: 3-2-1.

  • 3 copies of anything you care about
  • 2 different types of storage (say, an internal drive and an external one)
  • 1 copy kept somewhere else entirely — offsite

Most people nail the 3 and the 2. They skip the 1. That's the copy that saves you.

Mistake 2: Treating "it synced" as "it's backed up"

Sync tools like Nextcloud or Syncthing mirror changes instantly. That sounds great — until you delete a file by accident, or ransomware scrambles it. The sync happily copies the damage everywhere in seconds.

A backup keeps old versions. Tools like Restic or Kopia snapshot your data on a schedule. Delete something today, and yesterday's copy is still sitting there. Sync is for convenience. Backup is for recovery. You need both, and they are not the same thing.

Mistake 3: Never testing the restore

The cruelest failure is the backup that ran every night for two years — and turns out to be corrupt the day you need it.

Once a month, pick one file. Restore it. Open it. Confirm it works. A backup you've never restored is a rumor, not a safety net.

The easy offsite copy for beginners

You don't need a second house. Two cheap options:

  • Encrypted cloud storage. Restic and Kopia both encrypt before upload. Point them at a Backblaze B2 or Wasabi bucket. Even the storage company can't read your files. A few dollars a month for the peace.
  • A drive at a friend's place. Copy your backup to an external SSD, encrypt it, and leave it at a relative's home. Swap it every few weeks. Free, and refreshingly low-tech.

Encrypt either way. An offsite copy that anyone can plug in and read is a privacy leak, not a backup.

Your one action today

Open a terminal and install Restic. Point it at one folder that would hurt to lose — photos, documents, your password vault export. Send that snapshot to an encrypted cloud bucket. One command, one folder, one offsite copy.

That single step moves you from "one bad day away from disaster" to actually protected.