How to Back Up Your Phone Properly (Android and iPhone)

Ask ten people whether their phone is backed up and nine say yes. Ask what happens to their WhatsApp history, their authenticator codes and the photos that only ever existed inside one editing app, and the confidence evaporates. Learning how to back up your phone is less about flipping a switch than knowing what it covers, because the gap between “I have cloud backup” and “I can restore everything” is where data loss happens.

Start with the uncomfortable check

Before touching any settings, work through the categories that survive a lost phone badly even when everything is supposedly backed up.

Chat histories. Messaging apps handle their own backups, separately, often to a different cloud account.
Authenticator codes. Many authenticator apps stored secrets only on the device. Lose the device, lose account access.
Offline documents. Scanned receipts and saved attachments, often sitting in an app’s private storage, never reaching a synced folder.
Downloaded media. Offline playlists and shows, usually re-downloadable, occasionally not.
Game and app data. Progress in games without a linked account is commonly lost for good.
Photos that lived in one app only. Images captured or edited inside a social, scanner or third-party camera app often never enter the system photo library, so the photo backup never sees them.

If any of those matter, a single toggle is not enough. That is the point of this phone backup guide.

The 3-2-1 principle, explained simply

Keep three copies of anything you care about, on two kinds of storage, with one copy somewhere else entirely. For a phone that means the device, a cloud backup, and a third copy on a computer or external drive.

The reason for three is not paranoia about hardware. The common causes of loss are mundane: accounts get locked, subscriptions lapse and old backups are purged, a sync propagates a deletion, or a password is forgotten because the recovery method lived on the broken phone. One cloud account is a single point of failure whose credentials often depend on that same phone.

What built-in backups do and do not cover

Both platforms include a system backup. Both are useful. Neither is complete. Setting names differ between Android manufacturers and between iOS versions, so look for the backup section in your settings rather than a fixed path.

Account and settings sync

Contacts, calendars, mail accounts, Wi-Fi networks and preferences typically sync with your platform account, which is why a new phone feels familiar within minutes.

Photo backup

Photo backup is usually a separate service with its own toggle and storage allowance. Free tiers exist but are limited, and the limits change, so confirm current figures in your own account.

App data

Whether an app’s data is included is largely the developer’s choice. Some opt in fully, some keep everything on their own servers behind a login, some opt out entirely. You cannot tell from the outside, so for anything important, confirm the app has account sync or export.

Photos and videos: syncing is not backing up

Photos are the biggest category by size and the most painful to lose. A sync keeps two places identical: delete a photo on the phone and the sync deletes it in the cloud, because that is what identical means. A backup keeps a copy of what existed at a point in time and does not destroy it when the original disappears.

A sync will happily propagate your mistake. If deleting on the device removes it everywhere, it is not a backup.

A recently deleted folder softens this, but it expires: a safety net, not a backup. For photos you cannot replace, keep a copy somewhere a deletion cannot reach.

Chat backups, using WhatsApp as the example

Messaging apps manage backups themselves, to a cloud account that may not match the one your phone backup uses. WhatsApp offers a cloud backup with a frequency setting, plus an end-to-end encrypted backup protected by a password or key you control. Encryption is right for privacy, with one hard condition: lose the key and the backup is unrecoverable by anyone. Our guide to securing your WhatsApp account, including encrypted backups covers the trade-offs.

The second thing is timing. Restoring a chat backup generally only works during the app’s first-run setup on a new device. Skip the prompt and you usually cannot pull the history in later without starting over, so deal with messaging apps first.

Two-factor codes: the one you really cannot lose

If you take one action from this article, take this one. Losing your two-factor codes is worse than losing photos, because it locks you out of the accounts holding everything else.

Enable cloud sync or an encrypted export in your authenticator app if it offers one. Many now sync secrets to an account so a new device picks them up.
Save the recovery codes. Serious services issue one-time backup codes when you enable two-factor. Print them and store them offline. A sheet in a drawer beats a file on the phone you dropped in a lake.

Keep those codes separate from a password manager that is itself protected by the authenticator you are backing up. Circular dependencies are how people get locked out permanently.

Copy two: a local backup to a computer

A local backup restores faster, does not depend on an account staying accessible, and can include more than the cloud version. The important detail is encryption, and not only for privacy: on iPhone it is what allows saved passwords, Wi-Fi settings and health data to be included. An unencrypted local backup silently omits what you would most miss. Record the password somewhere safe, because there is no reset.

Full backups are large. If your machine is short on room, our notes on freeing up storage space on a laptop will clear the way, and Android users will find more context in our Android tips and tricks.

Copy three: an external drive or a second provider

The third copy exists so a single account problem cannot wipe you out, and it need only cover the irreplaceable. An external drive is cheap and independent of any subscription: copy your photo library to it yearly and store it away from the computer. A second cloud provider works too, provided it is a genuine copy and not a mirror, because a mirror inherits every deletion.

A routine that actually holds

Daily, automatic: cloud backup on, running overnight while charging.
Monthly, one minute: open backup settings and read the last successful date. Everyone skips this, and it is what catches the backup that quietly stopped when storage filled.
Yearly, one hour: export the irreplaceable to an external drive, then put it away.

Verify that the backup actually works

An untested backup is a hypothesis. You need not wipe your phone to gain confidence:

Read the status screen for a recent timestamp and a plausible size. A backup far smaller than your data, or one that never grows, is a warning.
Download a few files from the cloud on another device and open them.
Check the per-app list and confirm the apps you care about appear.
When replacing a phone, treat setup as a live test and keep the old device intact for several days.

Before a repair, a sale or a factory reset

Repairs sometimes involve a reset without warning, so back up even for a routine battery swap. If you are still deciding whether the battery needs replacing, start with our phone battery health guide.

Run a full backup, confirm it completed, and add a local backup if the data matters.
Verify chat backups separately, and check authenticator secrets are synced or recovery codes are in hand.
Sign out of your platform account and remove the activation lock. A phone still tied to your account is unusable to a buyer and a headache for a repairer.
Remove the SIM and any memory card, then factory reset from the device’s own settings.

Quick reference: what to back up and how

Data type	Where it usually lives	How to back it up	How often
Photos and videos	Photo library plus individual apps	Cloud photo service plus a drive copy deletions cannot reach	Daily; drive yearly
Contacts and calendar	Platform or email account	Account sync; occasional file export	Continuous; export yearly
Chat histories	The app’s own cloud backup	In-app backup, encrypted, key stored offline	Daily, set in the app
Two-factor codes	Authenticator app, often device-only	Authenticator sync plus printed recovery codes	When adding an account
App and game data	Device storage or developer servers	Link an account in-app; check it appears in backup	At install
Documents and downloads	Downloads folder or app storage	Move to a synced folder, then copy to a drive	Monthly
Passwords	Password manager or keychain	Encrypted local backup; secure manager export	Quarterly
System settings	Platform account	Built-in system backup	Daily

Storage tiers and menu names change regularly, so confirm specifics in your own settings. For more walkthroughs, browse the TechLein technology tutorials and reviews library.

Frequently Asked Questions

Is a single cloud backup enough on its own?

It is a good first copy, but it is one account with one password, and it may exclude chat histories, authenticator secrets and some app data. Treat it as the foundation, then add a local copy and an offline copy of the irreplaceable.

Why does my backup say it is on but nothing has backed up for months?

Usually a full storage allowance, a backup set to run only on Wi-Fi while charging on a phone that is never both, or an account signed out after a password change. Open backup settings, read the last successful date, and act on the error.

Can I restore WhatsApp chats after setting up the new phone?

Usually not without reinstalling. The restore prompt normally appears only during first-run setup, so if you skipped it you generally must uninstall and set up again, risking whatever you have accumulated since.

How often should I actually back up?

Cloud backup should be automatic and daily so the question never arises. Check once a month that it ran, and once a year copy the irreplaceable to an external drive. Run an extra backup before any repair, sale or reset.