My twins are nine years old and curious about everything, which is mostly wonderful and occasionally catastrophic. About two years ago, one of them was poking around on my editing workstation and deleted an entire folder of client proofs from a senior portrait session. Not to the trash. Gone. I had those files restored from a local backup in ninety seconds. My kid was more shaken up than I was.

That ninety seconds didn’t happen by accident. It was the result of a backup system I’ve been building and refining since 2008, when I lost an entire wedding’s worth of images to a corrupted memory card and had to make the worst phone call of my career. I won’t go into the full story, but I’ll tell you this: I have not shot a single paid job since then without redundant capture, redundant storage, and an offsite copy. Not one.

If you’re a working photographer treating your files like they’ll just sort themselves out, this post is for you.

Why Storage Fails and Why You Won’t See It Coming

Hard drives fail silently. A drive can be writing corrupted data for weeks before you notice anything wrong, and by then the damage is already in your backup if you’re not careful. SSDs are faster and more durable in some ways, but they fail without warning and often without recovery. Memory cards corrupt under heat, physical stress, and sometimes for no reason anyone can explain. The failure rate on any single storage device over five years is not trivial, and most photographers are one bad day away from losing work they cannot recreate.

This is not paranoia. This is physics. The question is not whether a drive will fail. It’s whether you’ve structured your system so that no single failure costs you anything real.

The 3-2-1 Rule, Implemented Specifically

The 3-2-1 rule is the industry standard: three copies of your data, on two different media types, with one copy offsite. Here’s exactly how I run it.

On-set capture: I shoot to dual cards whenever the camera supports it. My primary bodies write simultaneously to CFexpress and SD. If one card corrupts mid-job, the other has everything. This single habit would have saved my 2008 disaster.

Same-day ingest: When I get back to the office, I use Photo Mechanic 6 to ingest directly to two locations at once, my primary working drive (a 4TB Samsung T7 Shield, around $120) and a dedicated backup NAS (I run a Synology DS223, which holds two 8TB WD Red Plus drives in a mirrored RAID 1 configuration, total cost around $500 for the enclosure and $300 in drives). Photo Mechanic’s ingest copies to both destinations simultaneously. It does not take extra time. It runs in parallel.

Offsite cloud backup: I use Backblaze Personal Backup at $99 per year. It runs continuously in the background, and my NAS is mapped as an external drive so it gets backed up too. For a 30-megabyte RAW file, upload time is negligible on a standard broadband connection. For a 500GB job, full cloud sync usually completes overnight.

Catalogue backups: Lightroom Classic is set to back up its catalogue every time I launch it. Those catalogues go to a dedicated folder that Backblaze also watches. A corrupted catalogue without a backup is nearly as bad as losing the RAW files.

The Monthly Test Nobody Does

I test my backups every month. Not “check that the drive is still plugged in.” Actually restore a random folder and verify the files open correctly. This takes about ten minutes, and it has caught two failing drives in the past four years, once a NAS drive showing read errors and once an external that was silently corrupting data on writes.

I keep a short log in a notebook I’ve had since 2011, one entry per test, date and result. If I skip a month, I know about it because the last entry is staring at me. Most photographers set up their backups once, feel good about it, and never touch them again. That’s not a backup strategy. That’s wishful thinking with extra hardware.

What This Costs and What It’s Worth

Here’s the full annual cost of my backup infrastructure: Backblaze at $99 per year, the Synology NAS I’ve amortized over four years at roughly $200 per year, replacement drives as needed at maybe $80 per year on average, and the Samsung portables I rotate through at $120 each every few years. Call it $450 to $500 per year, total.

I bill between $3,000 and $8,000 per commercial job. One lost job because of a storage failure, one lawsuit from a client whose images disappeared, one reputation hit in a market as competitive as San Francisco, and the math is not close. Five hundred dollars a year is the cheapest insurance I buy.

The One Thing You Can’t Automate

The system I’ve described is mostly automatic after setup. Dual-card capture, parallel ingest, continuous cloud sync, automated catalogue backups. What you cannot automate is the decision to actually build the system before something goes wrong.

Every photographer I’ve talked to who lost files has the same story: they knew they should have had better backups, they just hadn’t gotten around to it yet. Getting around to it after the fact is not an option.

Build the system this week. Test it this month. The ninety seconds I spent recovering my kids’ accidental deletion was the return on fifteen years of being annoyingly disciplined about something most people treat as optional.