How to Set Up Time Machine Backups Properly
A complete Time Machine setup covering drive selection, encryption, exclusions, and how to actually verify your backups will restore when you need them.
This sets up Time Machine properly from scratch — not just clicking through the default prompts, but making the specific choices that determine whether your backups are actually usable when you eventually need them.
Step 1: choose an appropriately-sized backup drive
Time Machine needs meaningfully more space than your data currently occupies, since it keeps historical snapshots going back as far as space allows — as a starting point, aim for at least 2–3x your currently-used disk space, more if you want a longer history retained.
Step 2: connect the drive and open Time Machine settings
System Settings → General → Time Machine → Add Backup Disk, then select your drive.
Step 3: enable encryption
When prompted, check “Encrypt Backup Disk” and set a strong password. This matters more than it might seem — an unencrypted Time Machine drive containing a full copy of your data is a serious exposure if the physical drive is ever lost or stolen; encryption makes the backup drive itself as protected as your Mac’s own FileVault-encrypted internal disk.
Step 4: review what’s excluded, deliberately
System Settings → General → Time Machine → Options (or the exclusions list in newer macOS versions) lets you exclude specific folders — useful for large, easily-re-downloadable data (a big Steam games library, a local Docker image cache) that would otherwise consume backup space without providing much real recovery value if lost:
Excluded from Time Machine:
~/Library/Caches
~/Downloads/Games
Be conservative here — excluding too aggressively defeats the purpose of a full backup; the goal is trimming genuinely re-obtainable bulk data, not anything irreplaceable.
Step 5: let the first backup complete uninterrupted
The first backup copies everything and can take hours depending on data size and drive speed — subsequent backups are incremental and much faster. Avoid disconnecting the drive mid-backup, particularly during this first full pass.
Step 6: verify backups are actually running on schedule
tmutil latestbackup
This reports the most recent successful backup’s timestamp — worth checking periodically rather than just assuming the menu bar icon’s silence means everything is fine.
Step 7: actually test a restore, at least once
The step almost everyone skips: open Time Machine from the menu bar (or Launchpad), navigate to a past date, and restore a single, non-critical test file to confirm the restore process itself works, not just the backup process. A backup you’ve never restored from is an assumption, not a verified safety net.
Step 8: consider a second, offsite backup for real disaster recovery
Time Machine backing up to a drive that stays physically connected to your Mac (or on the same local network, for a Time Capsule-style setup) protects against drive failure and accidental deletion, but not against theft, fire, or other events affecting your home/office as a whole. Pairing local Time Machine backups with a cloud-based backup service, or periodically rotating an offsite backup drive, covers the gap Time Machine alone doesn’t.
Why the encryption and restore-test steps matter most
Of everything above, encryption and actually testing a restore are the two steps most commonly skipped, and the two most consequential if skipped: an unencrypted backup drive is a real data exposure risk sitting in a drawer or bag, and a backup you’ve never restored from might have a problem (a corrupted backup, a drive with failing sectors) you won’t discover until the exact moment you actually need it — which is the worst possible time to find out.