Phone Backups: Cloud vs Computer

Phones offer backup to the platform's cloud service and, on iOS, to a computer. They are presented as alternatives. They cover different things and fail in different ways.

Cloud backup

Automatic, which is the decisive advantage. It runs nightly while charging on wifi, without anyone remembering.

Off-site by definition. Survives fire, theft and a destroyed computer.

Restores over the air to a new device.

Limited by the free storage tier, which on both platforms is small enough that a phone backup does not fit. Most people either pay or silently stop backing up. Check when your last successful backup was; the answer is frequently months ago with a full-storage message nobody read.

Depends on the account. If you lose access to the account, the backup is unreachable. This is the scenario people do not plan for.

Slower to restore, since everything downloads.

Computer backup

Faster, both ways. A full restore over a cable takes a fraction of the time.

Not size-limited beyond the computer's disk.

Can be encrypted, and on iOS this matters more than it appears: an encrypted backup includes saved passwords, health data and some account credentials. An unencrypted one does not, which means an unencrypted backup restores a phone that then asks you to sign in to everything.

Turn on encryption. It is a checkbox and it substantially changes what is preserved.

Manual. It happens when you remember, which means rarely.

In the same building as the phone, so it does not survive fire or theft.

Independent of the account. This is its real value. If your account is locked or compromised, a local backup is still yours.

What neither includes

Authenticator codes, on most authenticator applications, by deliberate design.

Content from applications that store data server-side, which is not lost but is not in the backup either — it returns when you sign in.

Some application data where developers have marked it as excluded.

Media already in a cloud photo service, which is referenced rather than included. If that account is lost, the photos are not in the phone backup.

That last point catches people. A phone backup plus a cloud photo library is not two copies of your photos. It is one copy, in the photo service.

The arrangement that works

Cloud backup on, with enough storage that it actually completes. The cheapest paid tier usually suffices, and it is the difference between a backup and a setting.

A periodic computer backup, encrypted, before anything significant — a phone replacement, a major update, travel.

A separate export of the photo library to a computer or drive, once or twice a year. This is the copy that survives losing the account, and it is the one most people do not have.

Authenticator codes handled separately, through the application's own export or by registering a second device.

Verifying

Check the date of the last successful backup, not whether backup is enabled. These differ more often than people expect, usually because storage filled.

Look at what is included. Both platforms list which applications are being backed up and their sizes. Applications can be excluded and sometimes are by default.

Before wiping a phone, restore the backup to something if you can, or at minimum confirm it completed within the last day.

Restoring

Restore during initial setup. Both platforms offer it at first launch; after setup you generally must erase and start again.

Expect a long tail. The device appears usable quickly and continues downloading applications and media for hours.

Check the specific things you care about once it finishes: message history depth, photo count, authenticator codes, anything stored only locally.

Keep the old device until you have checked. A fortnight is a reasonable window.

When the account is the problem

If you cannot sign in, cloud backup is unavailable exactly when you need it.

This is the argument for the local copy and for handling account recovery properly — a second factor that does not live only on the phone, recovery codes stored physically, and a recovery contact.

A backup you cannot reach is not a backup, and the most common reason people cannot reach one is that the second factor was on the device that broke.