Create a practical personal or small-office computer backup and restore plan.
A backup is a separate recoverable copy, not merely another folder on the same computer or a synchronized cloud view that can repeat deletions. A resilient plan has multiple copies, at least one separate failure location, automation, encryption where needed, and evidence that restoration works.
Inventory what must survive
List documents, photos, projects, email archives, browser data, passwords and recovery keys, finance or tax records, application data, licenses, virtual machines, and device configuration. Identify cloud-only data, local-only data, and files created inside apps that require an export.
Design the recovery set
- Primary data plus at least two backup copies where risk warrants
- One copy offline, disconnected, immutable, or otherwise protected from account-wide deletion
- One copy in a different physical or provider failure domain
- Automatic schedule with visible success and capacity alerts
- Encryption, device account, recovery key, trusted contact, and inheritance considerations
- Documented restore steps, priority order, replacement-device requirements, and test date
Combine complementary methods
| Method | Strength | Main risk |
|---|---|---|
| External drive | Fast local copy and restore | Theft, damage, or always-connected malware exposure |
| Cloud backup service | Off-site automation and version history | Account, provider, bandwidth, and subscription dependency |
| Cloud sync | Convenient multi-device work | Deletion and corruption may synchronize |
Build and prove the backup
- Inventory and prioritize data.
- Choose independent copy locations.
- Configure encryption and automated schedule.
- Run the first complete backup.
- Restore sampled files to another location.
- Record recovery and review alerts regularly.
Find false backups
- Drive has been full for months
- Backup app paused after an account change
- Photos visible as thumbnails but originals remain only in cloud
- Recovery key stored only on the computer being backed up
Maintain a backup register
Record data scope, destinations, schedule, encryption and recovery-key custody, last success, capacity, last restore test, test files and result, subscription or device owner, failure alert route, and next review. Never put actual passwords or keys in an unprotected register.
Continue with the next decision
Sources and further reading
Primary and contextual sources used to verify definitions or give readers a relevant next resource.
- CISA Secure Our World Official public cybersecurity guidance; backups complement account, update, and phishing protections.