What the 3-2-1 backup rule means
The 3-2-1 backup rule means keeping three copies of your data on two different media, with one copy off-site. For a WordPress site that is the live server, a backup on a separate device or storage service, and a third copy in another location.
The first copy is the working data, not a backup. The other two are backups. Two media is about independent failure: a server disk and cloud object storage, or an SSD and an external drive. One disk failure or one closed account should never take both backups.
- 3 copies: production plus two backups.
- 2 media: different devices or storage systems, not two folders on one disk.
- 1 off-site: outside the building and outside the hosting account.
A worked example for a WordPress store
A small Jaipur store sells through WooCommerce. Its three copies look like this:
- The live site: WordPress files and the MySQL database on the hosting account.
- A scheduled backup: files plus database written to the host's remote backup vault, on storage the hosting account cannot erase.
- A weekly export: a full archive plus a database dump, downloaded and kept on an encrypted external drive at the owner's home.
That is three copies, two systems (hosting storage and the home drive), and one copy off-site. If the hosting account is suspended, or the drive is stolen, one copy still survives.
What the rule means for a WordPress site
A WordPress copy is complete only with both halves: the database (posts, orders, settings, users) and the file tree under public_html (core, themes, plugins, uploads). A files-only copy restores a site with no content; a database-only copy restores content with missing images.
Then it has to sit where the live account cannot delete it. A plugin that saves into public_html fails that test. So does a staging clone on the same server, and a Desktop sync folder pointed at the server, which copies deletions as faithfully as it copies data.
The schedule that fits most sites: database daily, files weekly, one full export off-site monthly. A brochure site can run all three weekly. A store that takes orders should not go a day without a database copy. The backup plugin comparison covers which tools write off the server.
3-2-1-1-0: the update for ransomware
The 3-2-1-1-0 rule keeps the original three copies and adds two conditions: one immutable or air-gapped copy, and zero errors, which means a restore has been tested. Ransomware now goes after backups before it encrypts the production data, so the copy an attacker cannot change is the one that ends the negotiation.
Immutable means object storage under a retention lock: for a set period nothing can alter or delete the file, not even the account that wrote it. Air-gapped means the copy is offline or unreachable except while it is being written.
Zero errors is the cheaper half. A backup nobody has opened is a guess. One test restore a quarter turns it into a fact.
Proving the copies are real
Open one archive a month. Import the .sql into a staging database, load the site, and click through a page, an image and the login. You know the copy is real when the import finishes without an error, the home page renders, a recent upload opens, and the error log stays empty.
Rotate which copy you test. If the off-site drive is the one you never open, it is the one that will fail. The restore walkthrough has the cPanel and phpMyAdmin clicks.
Where WebJi fits
WebJi sells the off-site copy and the restore, not the rule. Server-level backup sits under server backup solutions, and a WordPress site can use the managed WordPress backup service instead of running a plugin.
Whichever route you take, keep one copy you control. A provider's vault covers the account, but it is still one system, and the third copy is your insurance against that system rather than a duplicate of it.
Email support@webji.services if you want the retention window on a plan checked before you rely on it. Support is 24/7 by email in Hindi and English, with an average first reply under 60 minutes; the office phone is business hours only.
Frequently Asked Questions
What is the 3-2-1 backup rule?
It is a data protection rule: keep three copies of the data, on two different media, with one copy off-site. The live data counts as the first copy, so you need two backups, and only one of them has to be outside your building.
What counts as two different media?
Two devices with independent failure modes. A server disk plus cloud object storage counts, and so does an SSD plus an external drive. Two folders on the same disk do not, because one disk failure takes both.
Does a plugin backup count as one of the copies?
Yes, when it writes to storage outside the hosting account: Google Drive, Dropbox, S3 or the vendor's cloud. A plugin that saves into public_html is not a copy, because a hack or a suspended account removes it with the site.
Is 3-2-1 still enough in 2026?
It is the baseline, not the finish line. Ransomware now targets backups first, so a modern plan adds one copy that cannot be changed and a restore that has been tested. Without those, three copies can be encrypted in one night.
What is 3-2-1-1-0?
3-2-1 with two additions: one immutable or air-gapped copy that attackers cannot alter, and zero errors, meaning a restore has been tested. The extra copy is usually held under a retention lock or kept off the network.
How do I apply 3-2-1 to a WordPress site?
Keep the live site on the host, send a scheduled files-plus-database backup to storage outside the account, and keep a third copy somewhere else, such as a downloaded export on an encrypted drive. Restore one of them to staging every month.