Backups and recovery: copies you can actually restore

A backup is only useful if you can restore it without the same phone, laptop or even the same account. Syncing photos or contacts to the cloud does not by itself meet that test. If there is only one copy in one place and that place disappears, nothing is left to restore. A good backup has more than one independent copy, keeps at least one copy away from the device you use every day, and has been tested so you know it actually comes back.

This guide is about building that kind of copy: what to save, how not to confuse sync with backup, how to take a copy on Android, iPhone, Windows and Mac, and how to test a restore before a reset or a trip. Encrypting especially sensitive files is covered separately in encrypting stored files. Keep sign-in secrets in a password manager and export a separate copy from there.

How sync differs from a backup

Sync means the same file appears on several devices right now. If you delete a photo on the phone, the cloud copy and the tablet copy often follow it. A backup is a copy that does not depend on that live deletion and that you can roll back to an earlier state. Many services do both jobs at once, which is why it is easy to believe you have a second copy when you only have a mirrored set.

A clear example: if contacts live only in a Google account and that account is locked, those contacts are not waiting on a new phone either. If you also exported the contacts or took a device backup, you still have a way back. The same logic applies to messengers. A cloud copy tied to the same number and the same account does not help when you cannot reach the account itself.

What you should back up

You do not need a copy of every temporary file on the phone. Start with the things that would stop work or daily life if they vanished, or that cannot be rebuilt.

• Photos and videos that exist only on that device.
• Important conversations and their files, if the tool actually offers a separate restore path.
• Contacts, calendars and notes that are not stored anywhere else.
• Work documents, drafts and project files.
• A password-manager export, account recovery codes and encryption keys.
• Device settings only insofar as restoring them saves time; you will usually reinstall the operating system itself.

For each item ask: if this phone disappeared tonight, where would this data come back from? If the only answer is “this phone”, you do not yet have a backup.

How many copies, and where

A simple, well-tested approach is to keep at least three copies of important data, on two different kinds of media, with one copy away from your everyday location. You do not need to memorise a slogan. The point is not to rely only on the phone’s internal storage and the same cloud account you sign into every day.

1. The first copy is the working file on the device you use.
2. The second can be a cloud backup or an external disk at home.
3. The third should survive if the house or that account is hit: a second disk somewhere else, or a separate cloud service with its own sign-in.
4. Do not count two folders on one hard drive as two media; they are still one disk.
5. Refresh the copies often enough that you are not restoring a six-month-old snapshot when you need yesterday’s work.

For many people, “the official device backup plus a separate export of passwords and the most sensitive documents” is enough. You do not have to turn your life into a home data centre. You only have to remove the single point of failure.

Android device backup

Android can store apps, some app data, call history, contacts, settings and SMS in your Google account. Part of that data is encrypted with the screen lock, which is why a real lock (PIN, pattern or password) matters, not only a swipe. Free storage is shared with Gmail and photos.

1. Go to Settings > Google > All services.
2. Under backup and restore, tap Backup.
3. Check that backup is on and see which account it uses. Choose an account you control.
4. Read the details so you know what is actually stored. Not every app restores all of its data.
5. Tap Back up now and wait until the time of the last backup updates.

On some phones Settings > System > Backup opens the same screen. Samsung may also offer a separate backup tied to a Samsung account. If you use that, apply the same care: which account it goes to, and what it includes. Private Space usually does not come back with the device backup.

Treat photos and videos as their own problem

Photos often take most of the space on a phone, and they often follow a separate backup path. If you rely on Google Photos or an equivalent, do not mix library sync with the device backup.

1. Open the official photos app and look at backup or upload status.
2. Make sure the right account is selected and that uploads run automatically on Wi-Fi, unless you have chosen to use mobile data as well.
3. Once, sign in to the same library from a computer or browser and find a few recent photos, so you know they arrived rather than sitting on the phone marked “pending”.
4. If a photo should not go to the cloud, exclude it from automatic upload and give it another path, such as an encrypted disk.
5. Copy albums that live only on a memory card somewhere safe as well. Resetting the phone does not necessarily wipe the card, but losing or breaking the card is just as serious.

iPhone and iPad backup

On Apple devices, an iCloud backup stores settings, a great deal of app data and the device state. Photos have their own path if iCloud Photos is on. A restore usually needs the same Apple Account and, often, the device passcode.

1. Go to Settings > [your name] > iCloud.
2. Tap iCloud Backup and turn it on.
3. If you want a copy right now, tap Back Up Now. The device should be on Wi-Fi and, preferably, on charge.
4. Read the time of the last successful backup. If the date is old, check whether storage is full or Wi-Fi dropped.
5. In the same iCloud section, see which apps are allowed to store data, and turn off any app whose sensitive data you do not want in the cloud.

You can also take a local backup from a Mac with Finder or from a Windows PC with Apple’s official app. If you encrypt that local backup, items such as Health data and some keys are included. Do not leave the only copy of that file on the same laptop you carry every day.

Windows backup

In Windows 11, Windows Backup can store folders, apps and some settings with a Microsoft account. That helps when you replace a laptop, but it does not replace an independent copy of important documents. For work files you still need a copy on an external disk or a file service you chose yourself.

1. Go to Settings > Accounts > Windows backup.
2. Turn on the folders and settings you want stored.
3. If you use File History or an older system backup tool, open Control Panel > File History or the backup tool for that version and point it at a separate disk.
4. Also look manually at Documents, Desktop and Downloads; many important files live there and never get picked up by a “system” backup.
5. If BitLocker encrypts the disk, keep the recovery key somewhere other than that same computer; an encrypted backup is useless without the key.

Mac backup and Time Machine

On a Mac, Time Machine is still the simplest way to roll files and some system state back to an earlier date.

1. Attach an external disk with enough space.
2. Go to System Settings > General > Time Machine.
3. Add the backup disk and, if you can, turn on backup encryption.
4. Wait for the first copy to finish; the first run can take a long time.
5. After it updates, eject the disk or at least do not leave it permanently attached to the same laptop you travel with, so one theft does not take both copies.

Besides Time Machine, if you use iCloud Drive for Desktop and Documents, remember that a deletion in one place can follow you elsewhere. For a truly important file, keep a separate copy on a disk or in another service.

Export passwords, codes and keys

A device backup usually does not store the password manager’s master passphrase, or some encryption keys, in a form you can restore without the same lock or the same account. Treat these separately:

1. Take a fresh export from the password manager; if an encrypted export is available, use that.
2. Keep recovery codes for email, banking and the manager itself somewhere offline.
3. Store the recovery key for an encrypted disk, FileVault or BitLocker away from that device.
4. If you use security keys or passkeys, test a second device or an alternate sign-in method before you need it.
5. After you move a plaintext export, delete it from the desktop and the trash.

Messengers each have their own catch

WhatsApp may offer a cloud backup or an end-to-end encrypted backup; Signal does not keep your messages on its own servers by default and moving to a new phone has its own method; Telegram keeps much of its cloud chat on the account and does not do the same for secret chats. Before you change phones, read the method for that app rather than applying one rule to every messenger.

1. In each messenger’s settings, find backup or device transfer.
2. If the backup goes to Google Drive or iCloud, harden that account and see whether the backup itself has a separate password.
3. If the tool only transfers when two phones are near each other, finish that step before you sell the old phone.
4. Check groups and large media if they matter to you; some backups do not restore media in full.

Encrypt the backup and limit who can reach it

A backup is often more attractive than the device itself because it gathers everything in one place. If it sits on an unencrypted disk or in an account with a reused password, anyone who reaches it has an easier job than searching through scattered files.

1. Encrypt the external disk if you can, and write the key down separately.
2. Lock the cloud account that holds the backup with a unique password and two-step verification.
3. Do not share the backup folder with other people, even as “view only”, unless you mean to collaborate.
4. You do not need a folder name that announces its contents on the desktop. The encrypted contents matter more than the label, but there is no reason to attract extra attention.

Test a restore before the day you need it

An untested backup is only a feeling of safety. You do not have to restore everything from scratch; a small restore already reveals a lot.

1. Restore one folder or a few photos from the backup onto another device and open the files to see that they are intact.
2. If you take a device backup, at least compare the time and size of the latest copy with what you see on the phone.
3. Import the password-manager export into a test app or onto a second device, then delete the temporary file.
4. When you write down a disk recovery key, read it back carefully once and mark characters that look alike.
5. Note the result: where it was stored, on what date, and what did not come back.

If the restore fails, fix the path the same day. Finding that out after a theft or a dead disk no longer helps.

Before travel, repair or selling a device

1. Take a fresh backup and confirm the time it succeeded.
2. Renew password exports and recovery codes if they are not recent.
3. Deal by hand with photos that have not uploaded yet.
4. If you leave a device at a repair shop, finish the backup and keep the screen lock if you can. Remove especially sensitive data or reset the device and restore later from the backup.
5. Before selling, once you are sure of the backup, do a factory reset from inside Settings.

When you should not restore a backup

If a device was infected with malware or an account was taken over, blindly restoring the latest copy can bring the same suspicious session back with it. In that case:

1. First harden the main accounts from a healthy device.
2. Treat the backup as a source of personal files, not as a complete image that must be applied exactly to the new system.
3. Reinstall apps from the official store, not from a questionable package inside the backup.
4. If you can use version history to go back to a day before the incident, choose that date.

Common mistakes

• Assuming that because photos are in the phone gallery, they also exist somewhere else.
• Keeping only one backup disk that stays plugged into the same laptop.
• An unencrypted backup of every sensitive document.
• Switching phones before a messenger transfer has finished.
• Storing the only recovery key on the same device that was encrypted.
• Taking backups for years and never opening a single file from them.

What a device backup usually leaves out

Knowing the limits matters as much as turning the backup switch on. Many people only notice after they change phones that part of their digital life was never in that copy.

• Apps that did not come from the official store, or that stored data outside the expected space.
• Content that lives only on a memory card, unless you copied the card separately.
• Data inside Private Space, a separate work profile or a second device user.
• Messages in apps that do not support their own backup or device transfer.
• Downloads, offline maps and media the app is meant to fetch again later.
• Sign-in state for apps tied to that device or to a particular security key.

Before you wipe the old device, walk through your personal list against what the backup actually stored. If a particular app holds conversations or a project you cannot replace, follow that app’s own method as well.

How restore works on Android and iPhone

On Android, after a reset or while setting up a new phone you are usually asked to sign in with the same Google account and pick a backup. Have the old device’s screen lock ready; without it, some encrypted data will not unlock. Apps are installed again from the store, and each app’s data returns only if that app took part in the backup.

On iPhone and iPad, during setup you can restore from an iCloud backup or from a computer backup. You need the same Apple Account, and you may have to wait through an account security delay or use a familiar network. If photos live separately in iCloud Photos, they can take hours to appear in full. Do not confuse that delay with “nothing was backed up”, but wait until you can see the important items before you wipe the old source.

If power or the network drops mid-restore, start the device again from scratch and choose the same backup, instead of carrying on with a half-finished state.

External disks, flash drives and offline copies

The cloud is the easiest second copy for many people, but an offline copy still has a place: when the internet is unreliable, when you do not want a full set of documents sitting in an account that might be locked, or when you want distance from ransomware. Ransomware often spreads to a disk that is attached at that moment. A disk you unplug after the copy is much more resistant.

1. Buy a disk with more capacity than your important data needs right now, not one that is already full.
2. Format it at the start and encrypt it if you can.
3. Use a simple layout, such as folders by year or by device, not dozens of nested folders you will get lost in later.
4. After copying, open a few files from the disk itself; a completed progress bar is not the same as a healthy file.
5. Keep the disk somewhere dry and away from your everyday bag. A tiny flash drive on a keyring is easy to lose.

If you rotate two disks, write the date of the last update on each. Guessing which copy is newer becomes hard after a few months.

Budget cloud storage carefully

Free storage from Google, Apple and Microsoft is shared between mail, photos and the device backup. When the space fills up, new backups stop and you may only notice weeks later. Do not ignore the “storage full” notice.

1. Check when the last successful backup ran, and if it is old look at storage first.
2. Move very large or duplicate videos out of the main library, or choose an upload quality deliberately.
3. Lighten backups from several devices on one small account; an old unused phone may still send a copy every night.
4. If paying for more space is not an option, put bulky data on a disk and keep the cloud for things you need from more than one place.

Version history and files that change every day

For documents you edit every day, last night’s copy is better than nothing, but it is better to have a service or method that keeps several earlier versions. Some cloud folders keep file history; some backup tools create a restore point every hour. That history helps when you damage a file yourself, or when you realise an unwanted change happened last week.

Manual naming helps too. Instead of overwriting the same file and calling it “final-2-revised”, put a date in the name or use a tool that numbers versions for you. Just do not let the versions folder become so crowded that you no longer know which one to restore.

Shared family accounts and work devices

If a phone backup goes to an account that other family members also sign into, everyone with access to that account is effectively close to your copy. For work data or anything highly personal, use a separate account or at least a separate folder and backup. On a work device, organisation policy may send a personal backup into company space or, conversely, limit personal backups. Before you drop family photos onto an office laptop, ask where that data will be stored and what happens after you leave the job.

What remains after a restore

When the new device comes on, the job is not finished.

1. Sign in to the main accounts one by one and close the old device’s session if it is still active.
2. Check that two-step verification and security keys still work.
3. Open messenger apps and see whether the important conversations arrived; if not, repeat that app’s transfer method before you wipe the old device.
4. Review in-app payments, stored cards and location access again.
5. Turn on backup on the new device so a fresh copy starts from here; the old snapshot alone will not cover the next incident.

Checklist

1. List the data that cannot be rebuilt if it disappears.
2. Turn on the official backup for your main devices and take a fresh copy.
3. Check photos separately and confirm they have reached their destination.
4. Take a separate export of passwords, codes and recovery keys.
5. Keep at least one copy away from the everyday device and location.
6. Encrypt the backup where you can and harden the cloud account that holds it.
7. Do a small test restore and remember the date you did it.