How to Back Up a Mac the Right Way: Time Machine, Clones, and the 3-2-1 Rule

The first time I lost real data it wasn’t dramatic. No spilled coffee, no theft, no laptop tumbling down a staircase. An external drive simply stopped mounting one Tuesday, the way drives do, and three years of photos that lived in exactly one place went with it. I had iCloud Photos switched on, and for years I’d assumed that counted as a backup. It does not. iCloud is a sync service, and a sync service faithfully copies everything you do to every device you own — including the one time your library corrupts itself, which it then replicates everywhere, instantly and without asking.

That’s the gap most people carry around without knowing it. They own one copy of everything that matters, plus a sync service they’ve mistaken for a safety net, and they discover the difference on the single worst day to learn it. A real backup strategy isn’t complicated and it isn’t expensive. It’s three layers, each guarding against a different flavour of disaster, plus a rule of thumb old enough to predate the cloud entirely.

Here’s how the layers stack up, and what each one actually saves you from.

iCloud is sync, not backup — say it twice

The most expensive misconception in Apple-land is that iCloud Photos, iCloud Drive, and “Optimise Mac Storage” add up to a backup. They don’t. Sync means your files are mirrored across devices in near real time. That’s wonderful for convenience and useless as a safety net, because the thing a backup must do — keep an old, separate copy that your live mistakes can’t reach — is precisely what sync refuses to do. Delete a folder and it’s gone from every device in seconds. Let a library corrupt and the corruption propagates. iCloud is a brilliant convenience layer sitting on top of your data. It is not underneath it holding the floor up.

Backup means something narrower and stronger: an independent copy, kept apart, that you can roll back to. With that definition in hand, the three layers make sense.

Layer one: Time Machine, the safety net you forget exists

Time Machine is the layer everyone should have and most people don’t, despite it being built in, free, and genuinely close to set-and-forget. Plug in any external drive, open System Settings → General → Time Machine, click Add Backup Disk, choose the drive, and walk away. From then on it keeps hourly snapshots for the past day, daily ones for the past month, and weekly ones until the disk fills, then quietly deletes the oldest to make room.

What it buys you is time travel. Deleted a file last Thursday? Restore exactly that version. Replaced a document with a worse draft? Step back to before you ruined it. And if the Mac itself dies, a fresh machine can pull your entire world — apps, settings, files, the lot — off that drive through Migration Assistant, and you’re back where you were in an afternoon. Buy a drive with roughly twice your Mac’s storage so there’s room for history; a 2TB external for a 1TB Mac is the comfortable ratio, and drives like that run around €100.

The catch is the one nobody mentions: a Time Machine drive sitting on the desk next to your Mac protects you from everything except the things that take the whole desk. A burglar takes both. A flood drowns both. Which is exactly why Time Machine is layer one of three, not the entire plan.

Layer two: a clone, for the morning the Mac won’t boot

A clone is a complete copy of your drive made with a tool like Carbon Copy Cloner or SuperDuper. Time Machine restores your data; a clone aims to hand you a working system you can run from immediately. The distinction matters most at the worst moment — a dead internal drive on the morning of a deadline. With a clone on an external SSD you reboot, hold the power button to pick the external, and you’re working within minutes instead of reinstalling for hours.

I’ll be honest about the modern caveat, because most articles aren’t. On Apple Silicon Macs, Apple seals the system part of the disk, so a truly bootable external clone is fiddlier than it was in the Intel days. In practice the cloning tools now make a complete, browsable copy of all your data and settings, and recovery usually means reinstalling macOS onto a new drive and then pulling everything back from the clone — fast, reliable, and complete, just not always the boot-straight-from-the-spare magic trick of old. The value still stands: a clone is your fastest route back to a working machine, and a weekly schedule plus a manual run before any big macOS update is plenty.

Layer three: offsite, for the disasters that take the building

Layers one and two both live in your home. Offsite is the copy that doesn’t, and it’s the one that turns a catastrophe into an inconvenience. There are two honest ways to do it. The low-effort route is a cloud backup service — something like Backblaze that quietly uploads everything in the background for a flat yearly fee, distinct from iCloud because it’s an actual versioned backup rather than a sync. The low-cost route is a second Time Machine or clone drive that you keep somewhere else — a desk drawer at work, a relative’s house — and swap with your home drive every few weeks. Unglamorous, nearly free, and it works.

Pick whichever you’ll actually maintain. The best offsite backup is the boring one that runs without you thinking about it, not the elaborate one you abandon after a month.

What 3-2-1 actually means

The rule that ties this together is older than the cloud and still the clearest target in backups: three copies of your data, on two different kinds of media, with one copy kept offsite. Count it on the diagram above. The original on your Mac is copy one. Time Machine on an external drive is copy two, on different media. An offsite cloud or rotated drive is copy three, in a different building. Hit those three numbers and there is no single event — no theft, no fire, no drive failure, no fat-fingered deletion — that can take all your copies at once. That’s the entire point.

There’s a fourth number nobody puts in the name, and it’s the one that bites: zero, the number of times most people test a restore. A backup you have never restored from is a hypothesis, not a safety net. Once a year, pick a random file from last month and actually pull it back out of Time Machine, or do a test restore of a single folder from your offsite copy. It takes ten minutes, and it’s the whole difference between believing you’re covered and knowing it. I’ve met more than one person whose faithfully-running backup turned out to have been quietly failing for months, discovered on the precise day they finally needed it.

Start with one drive today, finish the set this month

If all of this feels like a lot, do the smallest useful thing right now and build from there. Today: plug in one external drive and turn on Time Machine. That single act moves you from “one copy, no net” to “two copies” and covers the most common disaster of all — your own deletions and a failing drive. This week: add an offsite layer, whichever kind you’ll keep up with. That’s 3-2-1, done.

The reason I push this so hard is that backups are the one area of computing where the cost of getting it wrong is total and the cost of getting it right is about €100 and an afternoon. I have never once regretted owning too many copies of my data. I have exactly one memory of having too few, and it’s the photos from a stretch of years I can’t get back, gone because I trusted a sync service to be a safety net it never claimed to be. Set up the layers while you have nothing to lose, so that the day a drive dies — and a drive will die — it’s a shrug instead of a funeral.