Skip to content
daniel@cosenza:~/blog
macOSHow-To September 30, 2025 3 min read

How to Set Up Time Machine Backups Properly

A complete Time Machine setup covering drive selection, encryption, exclusions, and how to actually verify your backups will restore when you need them.

This sets up Time Machine properly from scratch — not just clicking through the default prompts, but making the specific choices that determine whether your backups are actually usable when you eventually need them.

Step 1: choose an appropriately-sized backup drive

Time Machine needs meaningfully more space than your data currently occupies, since it keeps historical snapshots going back as far as space allows — as a starting point, aim for at least 2–3x your currently-used disk space, more if you want a longer history retained.

Step 2: connect the drive and open Time Machine settings

System Settings → General → Time Machine → Add Backup Disk, then select your drive.

Step 3: enable encryption

When prompted, check “Encrypt Backup Disk” and set a strong password. This matters more than it might seem — an unencrypted Time Machine drive containing a full copy of your data is a serious exposure if the physical drive is ever lost or stolen; encryption makes the backup drive itself as protected as your Mac’s own FileVault-encrypted internal disk.

Step 4: review what’s excluded, deliberately

System Settings → General → Time Machine → Options (or the exclusions list in newer macOS versions) lets you exclude specific folders — useful for large, easily-re-downloadable data (a big Steam games library, a local Docker image cache) that would otherwise consume backup space without providing much real recovery value if lost:

Excluded from Time Machine:
~/Library/Caches
~/Downloads/Games

Be conservative here — excluding too aggressively defeats the purpose of a full backup; the goal is trimming genuinely re-obtainable bulk data, not anything irreplaceable.

Step 5: let the first backup complete uninterrupted

The first backup copies everything and can take hours depending on data size and drive speed — subsequent backups are incremental and much faster. Avoid disconnecting the drive mid-backup, particularly during this first full pass.

Step 6: verify backups are actually running on schedule

tmutil latestbackup

This reports the most recent successful backup’s timestamp — worth checking periodically rather than just assuming the menu bar icon’s silence means everything is fine.

Step 7: actually test a restore, at least once

The step almost everyone skips: open Time Machine from the menu bar (or Launchpad), navigate to a past date, and restore a single, non-critical test file to confirm the restore process itself works, not just the backup process. A backup you’ve never restored from is an assumption, not a verified safety net.

Step 8: consider a second, offsite backup for real disaster recovery

Time Machine backing up to a drive that stays physically connected to your Mac (or on the same local network, for a Time Capsule-style setup) protects against drive failure and accidental deletion, but not against theft, fire, or other events affecting your home/office as a whole. Pairing local Time Machine backups with a cloud-based backup service, or periodically rotating an offsite backup drive, covers the gap Time Machine alone doesn’t.

Why the encryption and restore-test steps matter most

Of everything above, encryption and actually testing a restore are the two steps most commonly skipped, and the two most consequential if skipped: an unencrypted backup drive is a real data exposure risk sitting in a drawer or bag, and a backup you’ve never restored from might have a problem (a corrupted backup, a drive with failing sectors) you won’t discover until the exact moment you actually need it — which is the worst possible time to find out.