Your Backup Has a Second Party, and It Is Whoever Has to Restore It

Most people who lose files do not lose them in a disaster. They lose them in an ordinary week, to a dropped phone, a dead drive, an account closed for non-payment, or a ransomware note on a small business machine that also happens to hold six years of invoices. The loss is rarely the headline event. It arrives later, disguised as something else: a warranty claim refused because nobody can produce the receipt, a refinance stalled because two years of returns are on a laptop that will not boot, an insurance adjuster asking for the photographs of the room before the water came in.

The copy is one transaction, the restore is another

Backups get discussed as though the only party involved is the person making the copy. Buy the service, point it at the folders, watch the little check mark. That is half the arrangement, and it is the half that almost never fails. The party most people overlook is the one on the other side of the transaction: whoever is going to perform the restore, under pressure, probably without the original passwords, and quite possibly without you. In a household that is often a spouse. In an estate it is an executor. In a small business it is a bookkeeper or a contractor billing by the hour.

That person has a different set of problems than you do. They do not know which folder mattered. They do not know that the photos live in one account and the tax documents in another, that the backup service is paid on a card that expired, or that the recovery code was written on the back of an envelope in a desk you no longer own. Two-factor authentication, which is a genuine improvement in security, is also the single most common reason a restore stalls, because the second factor is a phone that went into the river with everything else.

Sync, versioned backup, and a drive in a drawer

A sync service keeps a folder identical across devices and a server. It is excellent at continuity and poor at protection, because it is designed to propagate changes faithfully, including the change where a file is encrypted by malware or deleted by a teenager cleaning up space. The good ones keep prior versions and a deletion window, which is the feature that converts sync into something defensible, and that feature is exactly the one nobody checks until the day it is needed. Judged by the restore, sync wins on convenience and loses on anything that happened more than a month ago.

Versioned backup services work on a different premise: they keep the history, not the current state, and they expect that you will one day want a file as it existed on a specific Tuesday. They handle the ransomware case and the slow-corruption case, where a database or a photo library degrades quietly over months. The cost is that restores are slower, sometimes considerably, and that a full recovery over a residential connection can run into days. They are also the option that most depends on somebody remembering they exist, because they do their work invisibly and bill quarterly.

The external drive in a drawer is the arrangement I see most often in the houses I work in, and it is not nothing. It is fast, it is cheap, it survives an internet outage, and it is entirely yours. It also sits in the same building as the computer, which means one fire, one burst supply line above the office, or one burglary takes both. The honest comparison is not that one of these is correct. It is that each one fails differently, and the sensible household keeps two that fail for unrelated reasons.

The terms you agreed to decide how long the window stays open

Every cloud arrangement has a counterparty, and that counterparty has written down how long it keeps your deleted files, what happens when payment lapses, and how much notice you get before an account closes. Thirty days is a common figure for consumer file retention, but it is not a law and not a promise you should assume applies to your plan. Business tiers often hold longer. Free tiers often hold shorter, or hold nothing at all once storage is exceeded. The useful exercise is to find the retention period in writing, in your account, for your plan, and note it where a second person would see it.

The same question applies to records you do not control at all. Your bank, your payroll provider, your doctor's office and your insurer each keep copies of documents you will need, each on their own schedule, and several of them will purge after a period that is shorter than you expect. The National Institute of Standards and Technology is the federal body responsible for the cybersecurity framework that many of these organizations align to, and the recovery function within it is explicitly about restoration rather than defense. Borrow the structure. Ask of each provider what they hold, for how long, and how fast you can get it.

A restore drill takes an hour and settles the argument

Assumed backups and tested backups look identical right up to the morning they do not. The test is simple and it should be performed by the person least familiar with the setup, not the person who built it. Hand them a short written sheet, then ask for three specific files from three different years: last year's tax return, a photograph from a named month, and the current customer list or household inventory. Give them the password manager and nothing else. Time it. The failures surface immediately and they are almost always administrative rather than technical.

What you learn from an hour of that is worth more than another subscription. You learn that the second factor goes to a number nobody else can reach, that the backup stopped running in March when the drive letter changed, that the account is in a name the executor has no authority over, or that the restore works perfectly and the whole thing can be left alone for a year. Write down the result and the date. Repeat it when something structural changes: a new computer, a new phone, a new provider, a death, a divorce, a business reorganization.

The arrangement that holds up is rarely the most sophisticated one. It is the one where a second person, holding a single sheet of paper and a password manager, can produce a named file from four years ago without calling anyone. Build toward that and the comparison between services mostly answers itself, because the differences that matter are the ones a stranger runs into in the first ten minutes.