My Actual 3-2-1 Backup System for a Wedding Day, After Almost Losing One
My laptop's hard drive failed three days after a wedding, before I'd made a single backup copy beyond the original memory cards still sitting in my bag, a genuinely sick feeling I remember specifically because the failure happened before I'd even started culling. I got lucky, the original cards were untouched and everything was recoverable, but that near miss is the entire reason I now run a genuinely redundant backup system rather than trusting any single copy of a wedding day, ever.
The 3-2-1 principle, and what it actually means in practice
Three total copies of every file, on two different types of storage media, with one copy kept somewhere physically separate from the other two. This isn't a photography-specific idea, it's a standard data backup principle, but applying it specifically to a wedding day's irreplaceable files is what turned it from an abstract rule into something I actually follow without exception now.
Copy one: the original memory cards, kept untouched until delivery
I don't reformat or reuse a wedding's memory cards until the client has received their final gallery and I've confirmed the backup copies are verified and complete. This means buying enough cards to avoid needing to reuse them mid-season, a real cost, but a genuinely small one against the alternative of formatting a card before confirming a backup actually succeeded.
Copy two: an external drive at home, backed up the same night
Every wedding day's files get copied to a dedicated external drive the same night, before I sleep, regardless of how late the day ran or how tired I am. This is the copy I actually edit from, keeping the original cards and this drive as two genuinely separate copies on two different physical devices from the very first night.
Copy three: cloud backup, uploaded before I touch a single edit
A cloud backup service syncs automatically once files land on my external drive, uploading a third copy to a location physically separate from my house entirely, covering the scenario my near-miss didn't even test, a house fire, theft, or any disaster that would take out both physical copies at once. I don't start any actual editing until I've confirmed this upload completed successfully.
Why I stopped trusting a single external drive as "backup enough"
For the first year after my near miss, my backup system was just one external drive, better than nothing, but a single point of failure I didn't fully appreciate until reading about how often external drives themselves fail without warning. Adding the cloud copy specifically addresses the scenario where my one physical backup drive fails independently of the original cards, a real, documented failure mode I wasn't accounting for with just one backup copy.
Verifying backups, not just running them
Early on I trusted that a backup had completed successfully without actually checking, until a genuinely partial, interrupted copy sat undetected for weeks before I happened to need a file from it. I now spot-check a handful of files after every backup, opening them to confirm they're complete and uncorrupted, a small step that costs a few minutes and has caught at least one genuinely incomplete backup since I started doing it.
What happens to the original cards after final delivery
Once a client has received and confirmed their final gallery, and I've verified the drive and cloud backups independently, I reformat the original cards for reuse rather than holding onto them indefinitely, since I trust my two remaining backup copies by that point and don't want an ever-growing pile of cards I can no longer physically manage. I keep the external drive copy for at least a year afterward before eventually archiving older weddings to lower-cost, longer-term cloud storage instead.
What I'd tell a photographer who's never had a scare like mine
It's genuinely easy to skip a proper backup system until something forces the issue, I did exactly that for the first several years I shot professionally, and I got lucky that my own near miss didn't cost a client their entire wedding day. Building a real, redundant system before a scare happens, rather than after, is the only responsible way to handle files a couple can genuinely never recreate, and the actual cost in time and storage is small enough that I have no good excuse for having waited as long as I did to take it seriously.
