Software · guide

How to back up MacBook, and what a backup gets back

By Alberto Gulotta · Updated · 13 min read

Asking how to back up MacBook gets four answers from Apple, and they are published in an order. The order is most of the answer: only the first runs without being asked, and only one of the four is described as bringing back something you deleted.

One thing no backup covers is the login password itself, and a reset of it costs you the keychain rather than the files — a forgotten Mac password sets out the three routes back in and the sentence Apple buries inside the procedure.

Time Machine

built in · automatic

Apple’s own feature. Uses “a USB drive or other storage device” to back up “all of your files, including apps, music, photos, email, and documents”.

iCloud

sync and store

Filed by Apple under “Sync and store data” — it keeps data “available anywhere you go”, and it “uses storage space in your iCloud storage plan”.

Dragging files

manual · no schedule

“Simply dragging them from your Mac to a USB drive or other external storage device connected to your Mac.” To restore them, drag them back. Nothing automatic, and nothing to configure.

Something else

third party

Apple lists the category and then declines to endorse it: information about products not made by Apple is “provided without recommendation or endorsement”.

That first card is the recommendation, and the wording underneath it is the reason. Apple describes a Time Machine backup as something you can use “to recover your files, including older files, files that have been deleted, or files that are no longer accessible”. That sentence is not attached to any of the other three.

It is worth being exact about the second card rather than arguing with it. Apple does say iCloud keeps your data “safe, automatically backed up, and available anywhere you go”. But it files the section under “Sync and store data with iCloud”, and the promise it makes there is about access across devices, not about recovering an older version of something. The two are different jobs and Apple’s own headings separate them.

Setting up Time Machine — macOS Ventura 13 or later

Four steps, and two questions the Mac may ask you in the middle of them.

  1. Connect the drive, then from the Apple menu choose System Settings.
  2. Click General in the sidebar, then Time Machine on the right.
  3. Click Add Backup Disk, or the Add button (+).
  4. Select the drive and click Set Up Disk.
    · The Mac “might ask if you want to erase the storage device”.
    · It “might ask whether this computer should claim existing backups created on a different computer”.

Two of those steps deserve a second look. The erase question is the one that matters on a drive that already has things on it — Apple’s options are “either erase it or select a different backup disk or volume”, and there is no third path. The claim existing backups question only appears when the drive has been used by another Mac, and claiming them makes them “part of the backups for this Mac”.

A drawn flow of what Time Machine does by itself after the backup disk is set up
What happens with nothing else asked of you. Quotations from Apple. Figure drawn by AI Tools Primer.

After that, nothing more is required: “your Mac immediately begins using the connected storage device to make backups”. To force one, choose Back Up Now from the Time Machine menu in the menu bar — the same menu stops, skips, or shows progress. If that menu is not there, Apple points at Menu Bar settings, Control Center settings, or Desktop & Menu Bar preferences.

A drawn menu path to Back Up Now in the Time Machine menu on a Mac
The menu that forces a backup. If it is not in the menu bar, Apple points at Menu Bar settings, Control Center settings, or Desktop & Menu Bar preferences. Figure drawn by AI Tools Primer.
The encryption password is not a formality

If you turn on Encrypt Backup, “you’re asked to create a backup password”. Apple follows that immediately with the consequence: “You will need it if you later attempt to restore files from the backup.” A password chosen carelessly during a two-minute setup is the same password standing between you and your files on the worst day of the year.

Old backups are deleted, on purpose

“The oldest backups are deleted when your backup disk is full.” Time Machine is not an archive that grows for ever; it is a rolling window whose length depends on how big the disk is. That single sentence is the reason the sizing rule below exists.

Ejecting matters

“Before disconnecting your backup disk, either eject the backup disk or shut down your Mac.” Pulling the cable is not covered by the automatic behaviour that follows it — Time Machine “will automatically resume its backup schedule” on reconnection, but the instruction about how to disconnect comes first.

Two rules about the drive itself. Apple asks for “a storage device with at least twice the storage capacity of your Mac” — the published example is a 1TB Mac wanting a 2TB backup disk — and adds that if Time Machine needs more room, “your Mac will let you know”. The second rule is the one people break: use the backup disk “only for Time Machine backups, not for storage of other files”. A drive doing two jobs is a drive whose free space is being decided by the wrong one.

The drive that is always plugged in

Apple explains how to make a backup. It does not discuss what a backup is exposed to, and two public bodies do. The UK cyber security centre, writing in August 2019 about incidents it had handled: “The NCSC has seen numerous incidents where ransomware has not only encrypted the original data on-disk, but also the connected USB and network storage drives holding data backups.” A Time Machine disc left attached is precisely that drive.

Its rule is short and it is about connection, not about copies: “only connecting the backup to live systems when absolutely necessary”, and “never having all backups connected (or ‘hot’) at the same time”. The reason follows in one line: “With at least one backup offline at any given time, an incident cannot affect all of your backups simultaneously.”

And the famous rule does not cover it

The 3-2-1 rule gets repeated everywhere: the US agency spells it out as “3 copies of important files”, “2 different types of storage media (like a hard drive and the cloud)” and “1 copy stored off-site”. But the NCSC adds the sentence almost nobody repeats with it: “it does not require any backup location to be offline – hence the need for our first offline rule.” Three copies can all be reachable from the same infected machine. The US guidance lands in the same place from the other side, listing what to protect a backup with: “physical security, encryption and offline copies”.

Both documents are written for organisations rather than for one laptop, and that is worth saying. The mechanism they describe does not care about the size of the network: it cares whether the disc is attached.

The schedule is fixed unless you change it, and it is finer at the near end than at the far end. Time Machine keeps hourly backups for the past 24 hours, daily backups for the past month, and weekly backups for all previous months. To change how often it runs, open Time Machine Settings from that menu, click Options, and use the “Back up frequency” menu.

A drawn table of the Time Machine schedule: hourly, daily and weekly backups
The published schedule. How far the weekly backups stretch is decided by the size of the disk, not by this table. Figure drawn by AI Tools Primer.

One reassurance about the first run, in Apple’s own words: “The first backup might take longer than you expect, but you can continue using your Mac while a backup is underway.” After that it “backs up only the files that changed since the previous backup, so future backups will be faster”. The slow one happens once.

The guides below take it in three directions: the setup itself, what Apple promises about getting things back, and the drive the whole arrangement depends on.

Where to start

Three ways in. If the drive is already connected, take the first.

“I have a drive and want this working.”
Setup and schedule — setting it up
“I need something back.”
What Apple promises — getting things back
“Which drive, and how big?”
The rules on the disk — the drive itself

Setting it up

Four steps, two questions in the middle of them, and a schedule that is already running before you look at it again.

Is the Mac actually chargingAmber means two opposite things, USB-C has no light at all, and the menu has four answers.Open this guide → Restoring an iPhone from a backupIt only happens at setup — so a phone already in use has to be erased first.Open this guide → Restarting a MacBookOne menu item and one checkbox — and the power button does two other things entirely.Open this guide → Factory resetting a MacBookIt erases settings, data and apps — and leaves the operating system exactly where it was.Open this guide → Checking a drive’s healthMicrosoft has removed WMIC from supported versions of Windows 11; Get-PhysicalDisk, a PowerShell cmdlet, has a HealthStatus column.Open this guide → Backing up an iPhoneThe same job on the phone, where the choice between iCloud and a computer changes what you get.Open this guide → Freeing up iCloud storageWhat is actually taking the space, in the order Apple lists it.Open this guide → iCloud syncing pausedSeven different reasons with seven different remedies — and Apple warns against the obvious fix.Open this guide →

Getting things back

A backup is only the half of this you can see. These guides are about the other half — and about the password that stands in front of it.

Recovering deleted filesWhere a deleted file actually goes, and how long the window stays open.Open this guide → Transferring to a new iPhoneWhat moves across, what does not, and the step people skip.Open this guide → Recovering deleted photosThirty days, one album, and what happens on day thirty-one.Open this guide →

The drive itself

Twice the capacity of the Mac, used for nothing else, and ejected rather than unplugged. Three rules, all published, all easy to break.

Transferring photos to a computerGetting the originals off the phone and onto something you control.Open this guide → Clearing a cache on a MacTwo separate commands — and one of them also forgets which sites asked for your location.Open this guide → Deleting apps on a MacTwo different routes, and the one that leaves things behind.Open this guide →

Not covered here. It will not name a backup drive to buy. That needs drives bought, filled, and still working a year later, and until that has happened a recommendation here would be a guess with a link on it.

It will not tell you iCloud is not a backup. Apple’s own page says your data is automatically backed up there; what this page does instead is show which promises are attached to which method, and let the difference speak.

And it will not recommend a third-party backup utility. Apple lists the category without endorsing anything in it, and this page has tested nothing in it. What holds instead is simple: every step and figure here is Apple’s own, in Apple’s own order, and nothing has been rounded or modernised on the way through.

Sources

  1. Apple, Back up your Mac with Time Machine — Apple Support (that Time Machine can back up all files including apps, music, photos, email and documents; the instruction to use a storage device with at least twice the storage capacity of the Mac, with the 1TB-to-2TB example, and that the Mac will let you know if more space is needed; the instruction to use the backup disk only for Time Machine backups and not for storage of other files; the macOS Ventura 13 or later setup steps through System Settings, General, Time Machine, Add Backup Disk and Set Up Disk; that the Mac might ask to erase the device, with the options of erasing it or selecting a different disk or volume; that it might ask whether the computer should claim existing backups created on a different computer; that turning on Encrypt Backup requires creating a backup password which will be needed to restore files later; that the Mac begins making backups immediately after setup; the Back Up Now command in the Time Machine menu and the settings that show that menu; the schedule of hourly backups for the past 24 hours, daily backups for the past month and weekly backups for all previous months; that the oldest backups are deleted when the disk is full; the Options and Back up frequency settings; that the first backup might take longer than expected while the Mac remains usable and that later backups cover only changed files; and the instruction to eject the backup disk or shut down the Mac before disconnecting it) — support.apple.com, read 22 August 2026.
  2. Apple, How to back up your Mac — Apple Support, published 2 October 2025 (the four methods and the order they are given in; that Time Machine is the built-in backup feature and that a backup can be used to recover files including older files, files that have been deleted, or files that are no longer accessible; the section heading “Sync and store data with iCloud” and that iCloud keeps data safe, automatically backed up and available anywhere, while storing files in iCloud uses space in the iCloud storage plan; the manual method of dragging files to a USB drive and dragging them back to restore; and the note that information about products not manufactured by Apple is provided without recommendation or endorsement) — support.apple.com, read 22 August 2026.
  3. National Cyber Security Centre (UK), Offline backups in an online world, published 13 August 2019 (that the NCSC has seen numerous incidents where ransomware encrypted not only the data on disk but also the connected USB and network storage drives holding the backups; the offline rule of only connecting a backup when necessary and never having all backups connected at the same time; and that the 3-2-1 rule does not require any backup location to be offline) — www.ncsc.gov.uk, read 26 August 2026.
  4. Cybersecurity and Infrastructure Security Agency (US), Back Up Business Data — guidance written for organisations rather than for one laptop (the 3-2-1 rule spelled out as three copies, two kinds of storage media and one copy off-site, and the instruction to protect backups with physical security, encryption and offline copies) — www.cisa.gov, read 26 August 2026.

Written by Alberto Gulotta

Founder and editor of AI Tools Primer, writing from Palermo, Italy. Thirty-five years of taking computers apart, starting with a Commodore 64 — the long version is on the about page.

Something wrong on this page? Write to aitoolsprimer@gmail.com and it gets fixed.

Written on 22 August 2026 · last checked 23 September 2026.

Independence and limits

No affiliate links and no paid placements anywhere on this site. Nobody pays to appear here, and no company has seen this page before you did.

This is general information, not professional advice. Where a page touches money, health, safety or the law, it names its source and the date it was read — and your situation may still differ. See the privacy page and the cookie policy.