A Backup You Have Never Restored Is Just a Feeling
Your backup is not verified by existing. It is verified by a restore you actually performed. The quarterly drill, the five checks, and how to test whether you really own your accounts.
By Ryan Nichols
- 5 total reach
- 0 reading now•0 active 24h
- 0 shares•0 inbound
- 0 comments
Ask a business owner if he has backups and he will say yes.
Ask him when he last restored one and watch his face.
That pause is the whole article. Everything after this is just detail.
A backup is not a file. A backup is a promise that on the worst day of your business year, you can get back to work. The file is only evidence that somebody intended to keep that promise. Until you have actually pulled the thing down, stood it up somewhere else, and looked at real data in it, you do not have a backup. You have a feeling.
I have restored. That is the only reason I am allowed to write this.
Here is what I learned doing it, and every bit of it transfers to a plumbing company, a dental school, a church, or a guy running one storefront.
The database is not the business.
Most people back up the database and stop. Your business is the database plus the files plus the settings plus the domain plus the accounts that authorize all of it. Restore the database alone and you get a site full of broken images, dead logins and a payment processor that does not know who you are.
Write down every layer. Data. Uploaded files and images. Environment settings and keys. Domain and DNS. Email sending. Payments. Then ask, for each one, who holds it and can I get it out today.
Ownership is measured at exit, not at signup.
The real test of whether you own an account is what leaves with you when you go. Not what the sales page says. A system you own gives you an export in a format somebody else can read. If the only way to get your customer list out is a screenshot, you do not own your customer list. You are renting access to it.
This is why I put client systems in accounts in the client name, with the client on the billing. If I disappear tomorrow they still have the keys. That is not generosity. That is the minimum honest arrangement.
Run the drill on a calendar, not on a hunch.
Pick a day. Quarterly is plenty for most small operations. On that day you restore to a second location, you open it, and you check five specific things you decided on in advance. Not vibes. Five named items. For a site: newest record present, oldest record present, images loading, a login working, a form submitting. Write the date and the result in a plain text file that lives with the backup.
If you have never done it, the first drill will fail. Mine did not go clean the first time either. That failure is the cheapest thing you will ever buy, because you bought it on a Tuesday you chose instead of a Tuesday that chose you.
Three copies, two places, one off the property.
The old rule still holds and you do not need software to follow it. Three copies of anything that matters. On at least two different kinds of storage. At least one of them somewhere that a fire, a flood or a stolen laptop cannot reach. If both of your copies live in the same building or the same single cloud login, you have one copy wearing a disguise.
Watch the thing everybody forgets, which is the account itself.
Your data can be perfect and still be gone, because the account holding it got suspended, or the card on it expired, or it was in the name of somebody who left. The backup of a rented platform is not only the content. It is the answer to what happens when the platform says no. I build on owned ground for that exact reason, and I keep the export anyway, because owned ground with no export is just a nicer landlord.
The honest version of this for a small operator.
You are not going to build enterprise disaster recovery. You do not need to. You need one hour, four times a year, and a text file. Pull the export. Open it somewhere else. Check your five things. Write the date.
That is it. That is the whole discipline.
The reason I care about this more than most people is not technical. I have had things taken from me by systems I did not control and could not appeal to. I know exactly what it feels like to be told the record exists and to have no way to reach it.
Never again, on anything I build.
Your backup is not real until you have restored it.
Go find out today, on a day you picked.
Read next
Fighting Shadows · Pre-order
Early access for $29.99$29.99
Read it first and own a piece of the story — or become a Founding Supporter (limited to 250).
Don't lose this story to an algorithm.
The next chapter gets posted here first — on my own domain, where no platform can throttle it and no one can ban it. Drop your email or number and the update reaches you the moment it's live.
Email gets one confirmation click. Unsubscribe anytime. No spam, no selling your data — ever.
Tap how this hits you — no signup, everyone sees the count
Share this post — get it back in front of people
Comments
Speak here
Create an account to comment.
This is where people can say what gets buried or cancelled elsewhere. Comments are signed-only, moderated, and tied to a real profile so the record stays usable.
No approved comments yet. Create an account and put the first opinion on the record.