Nobody backs up their phone until the moment they desperately wish they had. The good news is that iPhone backups are close to automatic once configured, and the whole job takes about four minutes.
There are two ways to do it, they protect against different disasters, and the strongest position is to run both.
iCloud: the one that actually happens
- Open Settings and tap your name at the top.
- Tap iCloud, then iCloud Backup.
- Switch Back Up This iPhone on.
- Tap Back Up Now to run the first one immediately.
From then on it runs by itself whenever the phone is locked, connected to power and on Wi-Fi. In practice that means overnight, which is exactly why it is the backup that actually gets made. A manual routine survives about three weeks of good intentions.
The catch is storage. Apple gives every account 5GB free, which has been the same figure for well over a decade and is now comfortably less than a single phone needs. If backups keep failing, this is why, and no amount of retrying will fix it.
Check what is eating the space under Settings, your name, iCloud, Manage Account Storage. Photos are almost always the answer.
Computer backups: the one that saves you
A backup to a Mac or PC is slower to set up and easy to forget, but it has two advantages that matter enormously when things go wrong.
It is complete. An iCloud backup deliberately skips anything already stored in iCloud, which sounds sensible until you realise it means your photo library may not be inside the backup at all. A computer backup takes everything.
It is also yours. If you are locked out of your Apple account, an iCloud backup is unreachable. A file on your own disk is not.
On macOS Catalina and later, connect the phone and open Finder; the iPhone appears in the sidebar. On Windows, and on older macOS versions, use iTunes. Choose to back up to this computer, and tick Encrypt local backup.
Always tick the encryption box
This is the single most consequential checkbox in the process, and it is off by default.
An unencrypted backup omits your saved passwords, Wi-Fi networks, Health data and call history. Restore from one and the phone comes back looking correct while quietly having forgotten every password you own. People discover this at the worst possible moment, halfway through setting up a replacement handset.
Encrypting the backup includes all of it. The password you set is not recoverable, so put it in a password manager or write it down somewhere real. Apple cannot reset it, and without it the backup is permanently unreadable.
Photos are not a backup
iCloud Photos is a sync service, not a backup, and the distinction is not pedantic. Sync means every device sees the same library. Delete a photo on your phone and it disappears everywhere, including from the copy you thought was safe.
Deleted items sit in Recently Deleted for 30 days, which covers an accidental swipe but not a mistake you notice next year.
For genuinely irreplaceable pictures, keep a copy somewhere that does not sync: an external drive, or a second cloud service that your phone does not delete from. The test is simple. If deleting a file in one place deletes it everywhere, it is not a backup.
Checking it actually worked
Go back to Settings, your name, iCloud, iCloud Backup and read the date under the switch. A backup that says three months ago is a backup that has been silently failing for three months, almost certainly because storage ran out.
Get into the habit of glancing at that date occasionally. It is the only feedback the system gives you, and a failed backup is otherwise completely invisible until the day you need it.
Before you upgrade or sell
- Run a manual backup and confirm the timestamp updates.
- Make an encrypted computer backup as well, so you have two independent copies.
- Check that any authenticator app has its own transfer or recovery method. These often deliberately refuse to restore from backup, and losing them locks you out of accounts the phone was protecting.
- Only then use Erase All Content and Settings.
That third point catches a lot of people. Two-factor authenticator codes are designed not to be portable, and a phone wiped without migrating them first can cost days of account recovery.
Four minutes now, or a very bad afternoon later. The arithmetic is not close.
Join the discussion