Time Machine and Windows Backup: a household backup setup you can set up once

Every Mac ships with Time Machine. Every Windows PC ships with some combination of File History, Windows Backup, and OneDrive. None of these are enabled by default in a way that produces a useful backup, and most people never turn them on. That’s the single largest gap between “I own a laptop” and “I have a backup”.

This article walks through enabling the built-in backup tools correctly, and what each one protects (and doesn’t) under the 3-2-1 rule. It assumes no prior backup software and no paid subscription.

What a built-in backup does

Built-in backup software watches a set of folders on your computer and copies changes to a second location (usually an external drive) automatically. It keeps version history so you can recover a previous state of a file, not just the latest version. It runs in the background with no ongoing attention.

It does not, by itself, provide:

• Off-site protection. Your external drive is in the same room as your laptop; a fire or burglary takes both.
• Ransomware resilience on its own. A ransomware payload that touches your external drive can encrypt the backup too, unless the backup is immutable.
• System-image restore (Time Machine does; File History does not — Windows has separate “Windows Backup” for that).

The fix: layer a cloud backup service on top for off-site, which also gets you immutability in most modern offerings. See cloud sync is not backup for why you need both.

macOS: Time Machine

Time Machine is Apple’s full backup system. It backs up your entire Mac — applications, system files, user data — to an external drive or network destination, and maintains hourly, daily, and weekly snapshots for as long as the destination has space.

Pick a destination drive

Any external USB drive works. Some guidance:

• Size: at least 2× the size of your Mac’s internal drive. If your Mac has a 512 GB SSD, get at least a 1 TB external. 2 TB gives you comfortable version history depth.
• Type: SSDs are faster and more reliable but cost more; HDDs are cheaper for the same capacity. For a backup drive that sits on your desk and gets used passively, HDD is fine.
• Connector: USB-C or USB 3.0, whichever your Mac has. Don’t buy the cheapest drive you can find; Time Machine is read and write-heavy, and cheap drives fail.
• Dedicated to backup: don’t use the drive for anything else. Time Machine prefers to own it.

Set it up

1. Plug the drive in.
2. macOS often prompts “Do you want to use this drive with Time Machine?” — say yes. If it doesn’t prompt:
3. Apple menu → System Settings → General → Time Machine.
4. Click Add Backup Disk.
5. Select your external drive. Choose Encrypt Backup — this asks for a password that will be required to restore. Use your password manager; write the password down on paper and keep it with your other important paperwork.
6. Time Machine starts an initial backup. First backup takes hours (copying everything). Subsequent backups are incremental and fast.

What to expect day-to-day

• A small Time Machine icon in the menu bar lets you check status and trigger a backup on demand.
• Backups happen hourly when the drive is connected.
• Old backups are automatically pruned when the drive fills up — Time Machine keeps hourly backups for 24 hours, daily for a month, and weekly for as long as space allows.
• If you unplug the drive for a week, it resumes when you plug it back in. Periodic drive-plug-ins are fine.

Restoring

• Single file: Click the Time Machine icon → Browse Time Machine Backups. Navigate through time with the arrows on the right, find the version you want, click Restore.
• Full Mac: Boot into Recovery (hold power until Options appears on Apple silicon, or Cmd-R on Intel), choose Restore from Time Machine Backup.

A note on encryption

Always tick “Encrypt Backup” when setting up. An external drive with unencrypted backups is a complete copy of your life that can be read by anyone who steals the drive. Encrypted Time Machine backups use AES-128 or AES-256 depending on macOS version; the password is the only way back in, so store it properly.

Windows: File History + Windows Backup

Windows has two related but distinct features. Both are built-in. Both are underused.

File History

File History backs up specific folders (Documents, Desktop, Pictures, Videos, Downloads by default, plus whatever else you add) to an external drive. It keeps version history of changed files.

Setup:

1. Plug in an external drive.
2. Settings → Update & Security → Backup → Add a drive (Windows 10), or Settings → System → Storage → Advanced storage settings → Backup options (Windows 11).
3. Select the external drive.
4. Click More options to configure:
   • Back up my files: set to “Every hour” (default) or more frequent.
   • Keep my backups: “Forever” until space is needed, or a specific retention window.
   • Add a folder: include anything important outside the default set (e.g., C:\Users\you\Documents\Taxes is already in, but a folder on D: drive isn’t).
5. Back up now to trigger the first backup.

Limitations:

• File History backs up files, not the system. If Windows itself becomes unbootable, File History doesn’t help you recover the OS — you’d reinstall Windows and then restore your files.
• No built-in encryption option. If you need the backup drive encrypted, use BitLocker To Go on the drive itself (see full-disk encryption).

Windows Backup (new unified tool)

Windows 11 has introduced a newer “Windows Backup” that syncs specific folders, settings, credentials, and apps to OneDrive. Note the shift: this is cloud-backed, not drive-backed. It’s convenient but is essentially glorified OneDrive sync — not a substitute for File History’s versioning or for a real off-site backup service. Don’t rely on it alone.

Restoring from File History

• Single file: Open the folder containing the file. Ribbon → Home → History. Browse through time to find the version.
• Full drive restore: Control Panel → System and Security → File History → Restore personal files.

A note on BitLocker To Go

If you want the external drive encrypted:

1. Right-click the drive in File Explorer → Turn on BitLocker.
2. Choose to unlock with a password.
3. Save the recovery key — print it, store it with your other important paperwork. Do not save only to your Microsoft account if this is a backup of that same Microsoft account.

Then set up File History on the encrypted drive. File History will treat it transparently.

The hardware you need

For either platform:

• One external SSD or HDD, 1–2 TB, $80–150.
• A USB port that stays occupied or a simple habit (“plug in the orange drive every Sunday”).

For a 3-2-1 setup, add:

• Cloud backup service — Backblaze (~$100/year, unlimited storage, supports macOS and Windows) is the usual recommendation. Covers off-site and typically provides immutability that defeats most ransomware.

Maintenance

Built-in backups are mostly set-and-forget, with three habits:

1. Plug the drive in regularly. External drives can’t back up what they can’t reach. Weekly is fine for a household; daily is better for a freelancer with client work.
2. Check the backup date occasionally. “Last backup: 43 days ago” is a signal that something stopped working.
3. Do a test restore once a quarter. Pick a random old file, restore it to a new location, open it. Twenty seconds of work. If it doesn’t open, you’ve just discovered a problem at a time when the house isn’t on fire.

See testing your backups for why this last step matters so much more than most people realize.

If you do nothing else this month

Pick up an external drive on the way home from work today. Plug it in. Turn on Time Machine or File History. Encrypt it. Write the password on a piece of paper and put it with your other important documents.

You are now ahead of the majority of the population, and ahead of where you were this morning. The cloud off-site and the ransomware immutability come next; they’re additions to this foundation, not replacements for it.