People lose their photos in a small number of ways, and almost none of them involve a hard drive failing. The drive failure is what everyone plans for. What actually happens is an accidental deletion that syncs everywhere before it is noticed, an account suspension with no appeal, a phone lost on holiday with three months of unsynced pictures on it, or ransomware encrypting a folder that a cloud client faithfully replicates.
Every one of those defeats "my photos are in the cloud." That is the gap worth closing, and it does not require much.
What changed in 2026
- Libraries got larger faster. Higher-resolution stills and constant video pushed typical family libraries into the multi-terabyte range, which made free tiers irrelevant and storage cost a real consideration.
- Account lockouts got more visible. Automated content scanning producing suspensions with limited appeal made single-provider dependence look considerably riskier.
- Local AI indexing improved. Self-hosted photo tools gained good on-device search and face grouping, closing much of the feature gap that kept people locked into a cloud service.
- Ransomware kept targeting synced folders. Encrypting files a sync client then dutifully uploads remains a reliable way to destroy backups that were never really backups.
Sync versus backup
|
Sync |
Backup |
| Purpose |
Same files everywhere |
Recover a previous state |
| Deletion |
Propagates immediately |
Retained |
| Corruption |
Propagates |
Prior version survives |
| Ransomware |
Encrypted copy uploaded |
Clean copy remains |
| Versioning |
Limited window, if any |
Explicit history |
| If your account closes |
Everything gone |
Independent copy |
Sync services often include a trash with a retention window, which softens the deletion case if you notice within it. It does not help with a corruption you discover a year later, an account closure, or a bulk deletion nobody catches. The distinction is worth internalising: sync is about convenience across devices, backup is about recovering from a past state. A system built only from sync has no past states.
Three, two, one
The old rule remains the answer because every simplification of it keeps failing in practice: three copies of your data, on two different types of media, with one copy offsite.
For a photo library that usually looks like:
Copy one — the working library. Your phone and computer, synced to whatever cloud service you use. This is what you interact with daily.
Copy two — a local backup. An external drive or a NAS, holding a copy that is not continuously synced. The lack of continuous sync is the feature; it is what makes this copy survive a deletion. NAS buying guide covers the always-on option, and a plain external drive is entirely legitimate at smaller scale.
Copy three — offsite. A second cloud provider, or a drive kept somewhere else physically. This is what survives a fire, a burglary, and an account suspension. Using a different provider matters — two folders in the same account is one copy wearing two hats.
The offsite copy is the one people skip and the one that covers the failures that take out everything else at once.
The account lockout problem
Worth treating separately because it is the modern failure mode people have not adjusted to.
If your photos exist only in one company's cloud, that company's automated systems are a single point of failure for twenty years of family history. Account suspensions triggered by content scanning have hit people who did nothing wrong, and the appeals process is frequently opaque and slow. The photos are not deleted, exactly. You simply cannot reach them.
The fix is not to distrust cloud storage — it is to not let one account be the only thing standing between you and your library. One local copy is enough to make this survivable. A local copy plus a second provider makes it a nuisance rather than a catastrophe.
The same reasoning applies to the practical question of what happens to your accounts if you die or are incapacitated, which most people have not addressed either. Digital estate planning covers it.
Making it actually happen
The best strategy is the one that runs without you. Manual backups get done enthusiastically for two months and then not at all.
Automate the local copy. Scheduled software or a NAS pulling from your library. Set it, verify it once, then check the logs occasionally rather than trusting silence.
Keep the offsite copy versioned. Backup services that retain history let you recover from a corruption discovered late, which a mirror cannot.
Test a restore annually. Pick a photo from five years ago, delete nothing, and confirm you can actually retrieve it from each copy. Untested backups fail surprisingly often — wrong folder excluded, a job that stopped silently, an encryption password nobody wrote down.
Keep originals. Services that upload compressed versions save space and discard data you cannot recover. If storage cost drives that choice, keep full-resolution originals in at least one copy.
Common mistakes
- Counting sync as a backup. The single most common error.
- Both copies in the same account. One suspension takes both.
- Phone storage as a copy. It is the device most likely to be lost or broken.
- Never testing a restore. You discover the failure at the worst possible time.
- Ignoring video. Video dominates library size and quietly breaks storage plans built around photo counts.
- Compressed-only uploads. Convenient until you want to print or crop.
- A single external drive as the whole plan. Drives fail; that is one copy, not three.
FAQ
Is a NAS enough on its own?
No. A NAS is an excellent second copy and is still in your house — fire, theft, and flood take it along with everything else. Pair it with an offsite copy; many NAS units can back themselves up to a cloud provider automatically, which is the easiest way to get all three.
How much does this cost?
An external drive is a one-off purchase. Cloud storage is a subscription that scales with library size. For most families the total is modest measured against what it protects — and considerably cheaper than any professional recovery attempt, which mostly do not work for cloud losses anyway.
What about photos on social media?
Not a backup. Uploads are compressed heavily, originals are not retrievable, and accounts can vanish. Treat social platforms as publishing, never as storage.
Do I need to organise before backing up?
No, and waiting until you have organised is how people end up with no backup at all. Back up the mess first. Organise afterwards, or never.
Where to go next
For the always-on local copy, read the NAS buying guide and NAS vs cloud storage. For portable drives suited to an offsite rotation, the best portable SSDs, and for what happens to your accounts when you cannot reach them, digital estate planning.