Time Machine is the built-in backup system of macOS that automatically copies a Mac’s data to an external or network disk and keeps multiple versions of every file over time. In macOS storage and backup, it is the default way to protect user data, recover deleted or overwritten files and move a complete user environment to a new Mac.
Introduced with Mac OS X Leopard in 2007, Time Machine has been rebuilt around APFS snapshots since macOS Big Sur. It requires no configuration beyond choosing a backup disk, which makes it the most widely used Mac backup method, though not a complete backup strategy on its own.
How Time Machine creates and stores backups
Each backup begins with an APFS snapshot of the data volume, a frozen, consistent view of the files at one moment. Time Machine then compares that snapshot with the previous one and copies only the changed files to the destination, so after the first full backup each run is incremental and usually completes in minutes.
On an APFS-formatted backup disk, every completed backup is stored as a read-only snapshot on the destination. Unchanged files are shared between snapshots, so the backup browser can show each version as a complete copy without storing duplicate data. Older backups on HFS+ disks achieved the same effect with directory hard links, a technique that new backups no longer use.
Time Machine also keeps local snapshots on the startup disk for roughly 24 hours. They allow quick recovery of a recently changed file even when the backup disk is disconnected, and macOS deletes them automatically when it needs space, which is one reason they appear as purgeable space.
Backup schedule and retention
By default, Time Machine backs up every hour and thins old versions according to a fixed retention scheme. Recent versions are kept densely, older versions sparsely, until the disk fills.
| Age of backup | Versions kept | Purpose |
|---|---|---|
| Last 24 hours | Hourly | Undoing recent mistakes |
| Last month | Daily | Recovering files changed in recent weeks |
| Older than one month | Weekly | Long-term history |
| When the disk is full | Oldest backups deleted | Making room for new backups |
Recent macOS versions let the user choose hourly, daily, weekly or manual backups. A larger backup disk extends the history; a common guideline is a destination of at least twice the size of the data being protected.
Supported backup destinations
Time Machine can write to local disks and to network shares, and it can rotate between several destinations automatically. The destination type affects speed, reliability and how the backup is stored.
| Destination | Storage format | Strengths | Weaknesses |
|---|---|---|---|
| External USB or Thunderbolt disk | APFS volume with snapshots | Fast, simple, reliable | Must be connected; stored next to the Mac |
| NAS with an SMB Time Machine share | Sparse bundle disk image | Automatic over the network | Slower; image can become corrupted |
| Another Mac with file sharing | Sparse bundle disk image | Uses existing hardware | Depends on that Mac being on |
| Several rotated disks | Separate backup sets | One copy can stay off-site | Each disk has its own history |
Network backups are stored inside a sparse bundle, a disk image split into many small band files. Time Machine periodically verifies these images; if verification fails, it may ask to start a new backup, which discards the old history.
Time Machine compared with other Mac protection methods
Time Machine is a versioned file backup, which distinguishes it from synchronization services and disk clones. Each method answers a different failure scenario.
| Method | What it protects against | Main limitation |
|---|---|---|
| Time Machine | Deletion, overwrites, disk failure, migration | Usually local only |
| APFS snapshot alone | Recent changes on the same disk | Lost if the disk fails |
| iCloud Drive sync | Loss of one device | Deletions and damage sync everywhere |
| Cloud backup service | Fire, theft, local disasters | Slow full restores |
| Disk clone | Fast return to a working copy | Usually no version history |
Since macOS Big Sur, Time Machine does not back up the sealed system volume. A full restore therefore reinstalls macOS from macOS Recovery and then restores user data, applications and settings, usually through Migration Assistant.
Restoring data and common pitfalls
Single files are restored by opening a folder in Finder and entering Time Machine, which shows a timeline of versions. A complete Mac is restored from macOS Recovery or migrated to a new computer with Migration Assistant. The tmutil command offers scripting options such as starting a backup or listing local snapshots.
- One disk is not a strategy: a backup disk on the same desk is lost to the same theft, fire or power surge.
- Encrypt the backup disk, because it contains a complete copy of personal data.
- Files stored only in iCloud under Optimize Mac Storage are not on the local disk and are not included in the backup.
- Excluded folders in settings stay unprotected, so the exclusion list should be reviewed.
- Test a restore occasionally, since a backup that has never been restored is an assumption, not a guarantee.
The most robust approach combines Time Machine with an off-site copy, such as a rotated disk stored elsewhere or a cloud backup, in line with the familiar 3-2-1 rule.
Stripped to the essentials
Time Machine is like a photo album of a Mac’s files, with a new picture taken every hour. If a document is deleted or ruined, it is possible to flip back through the album and pick the version from yesterday or last week.
It runs on its own once a backup disk is chosen. The only thing it cannot do is protect against losing the Mac and the backup disk together, so keeping a second copy somewhere else is wise.
Where it is applied
A freelance architect works on a MacBook Pro with 700 GB of project files and backs up with Time Machine to a 2 TB encrypted external SSD. Late one afternoon, she accidentally saves over a building model with an older version and loses a day of work.
She opens the project folder in Finder, enters Time Machine and scrolls back to the hourly backup from 4 p.m., restoring the correct file in under two minutes. Months later her laptop is stolen during a trip. Because she also rotates a second encrypted disk kept at home, she sets up a new MacBook from that disk with Migration Assistant and loses no project data.