My twins are nine years old. A few months ago, one of them got curious about my editing machine while I was making coffee. By the time I got back to my desk, a folder of client proofs, about 340 JPEGs destined for a corporate headshot delivery the next morning, was sitting in the Trash. Emptied. Gone from the primary drive.

I had them restored from a local backup in 90 seconds. My kid looked more impressed than sorry.

That moment didn’t stress me out because I’d built a system that assumed disaster would happen. Not might happen. Would happen. If you’re running a photography business and your backup strategy is “I have an external drive,” you’re one bad afternoon away from a very expensive lesson.

Why Hard Drives Lie to You

Here’s what most photographers don’t think about: a drive doesn’t fail dramatically. It doesn’t smoke or make a loud noise. It quietly starts dropping bits. A sector here, a cluster there. Your operating system often masks the errors until the damage is significant enough that your RAW files open corrupted, or don’t open at all.

SSDs have made this worse in one specific way. Unlike spinning hard drives, SSDs don’t always give you the gradual warning signs of impending failure. They can drop dead without any prior symptoms. That’s not a reason to avoid SSDs, they’re faster and more reliable overall, but it is a reason to understand that no single drive is a backup. A drive is just a place your file lives right now.

RAID arrays are not backups either. A RAID-1 mirror means if you accidentally delete a file or a ransomware attack encrypts your data, both drives reflect that damage instantly. RAID protects against hardware failure. It does not protect against human error or software corruption.

The Actual System I Use, With Specific Numbers

I run what I call a 3-2-1-1 workflow. Three copies of every file, on two different media types, one offsite, and one offline. That extra “1” is the offline piece, a drive that is never connected to the internet or my local network.

Here’s how it looks in practice.

The moment a card comes out of my camera, it goes into a dual-slot card reader connected to my editing machine. I use Photo Mechanic 6 ($200 one-time) to ingest, and I have it set to copy to two locations simultaneously: my primary internal SSD and a dedicated 4TB Samsung T7 Shield external drive ($90) that sits on my desk. That ingestion takes about 8 minutes for a typical 2,000-image commercial shoot. Neither drive is the backup yet. They’re both just live copies.

That evening, Backblaze Personal Backup ($99/year) runs in the background and pushes everything offsite. This is my cloud layer. It’s not the fastest for recovery, a full restore from Backblaze can take days if you’re pulling terabytes, but it’s geographically separate, and for individual files it’s fast enough.

The offline copy is a Western Digital MyPassport 5TB ($110) that lives in a fireproof document safe in my home office. Every Friday I run Carbon Copy Cloner ($20/year) to sync it. I physically unplug it after the sync. It never touches my router.

Total cost of this system: under $320 in hardware plus $120/year in subscriptions. That’s less than I charge for two hours of shooting.

Your Website Is Part of Your Backup Problem

Most photographers treat their business website as something separate from their file workflow. It’s not. Your portfolio, your client galleries, your contact database, your licensing agreements, your booking forms. These are business assets.

I’ve seen photographers lose their entire Squarespace site because they let the subscription lapse and lost access before backing up. I’ve seen WordPress sites get wiped by plugin conflicts with no backup in place.

If you’re on WordPress, install UpdraftPlus (free tier covers basic needs) and set it to auto-backup weekly to Google Drive or Dropbox. If you’re on a hosted platform like Squarespace or Showit, export your content manually every 90 days and save it to your local backup chain. For client galleries hosted on Pic-Time or Pixieset, keep the original delivered files in your archive. Don’t assume the gallery platform is your backup. It isn’t.

The Monthly Test Nobody Does

Owning backup drives is not the same as having backups. I test mine every month on the first Sunday. I pull a random folder from the offline drive and verify three things: the files open correctly in Capture One, the folder matches the file count from my shoot log, and the drive is healthy according to DriveDx ($20 one-time), which reads S.M.A.R.T. data and flags early warning signs.

This takes 15 minutes. Most photographers skip it entirely. The ones who skip it are the ones who discover their external drive failed six months ago when they actually need it.

I keep a short note in my lessons learned journal after every test. Nothing fancy, just the date, which drive I tested, and whether anything flagged. If a drive shows any S.M.A.R.T. warnings, I replace it before it fails, not after.

What a Corrupted Card in 2008 Taught Me

I shot weddings early in my career. In 2008, I lost an entire wedding’s worth of images to a corrupted CF card. The couple got partial coverage. I refunded my full fee. I kept in touch with them for years afterward out of guilt. That experience didn’t just make me cautious about backups; it rewired how I think about risk across my entire workflow.

The thing I learned wasn’t just “get more drives.” It was that the system has to be automatic and habitual. The moment backup becomes a manual step you remember sometimes, it has a gap. Every piece of my current workflow is either automated or physically ritual, like the Friday sync, so it doesn’t rely on me having a good memory after a long shoot day.

If there’s one thing I want you to take away from this, it’s that a backup strategy that requires you to remember to do it is not a backup strategy. Build the automation first, then build the habits around testing it.