Technology in terms you understand. Sign up for my weekly newsletter, "Confident Computing", for more solutions you can use to make your life easier. Click here.

Full? Incremental? Differential? What Kind of Backup Do I Want?

Full, incremental, and differential: three confusing terms when it comes to traditional backups.

In this article, I’m going to describe how each one works so we can compare them and see which is most appropriate for you.

Become a Patron of Ask Leo! and go ad-free!

Backing up your computer

The files on your computer, along with a little overhead information, represent everything stored on it.

This includes your data, the programs you run, the operating system, settings, temporary information, and much more.

Your Hard DIsk

It’s these files — your data, your programs, your everything else — you can lose in an instant should you encounter a sudden hardware failure, malware, or other unexpected event.

Regardless of which approach you take, backing up, at its core, is nothing more than making copies of those files and putting those copies somewhere else in a way they can be recovered should your originals be lost.

Full backups

We’ll start with the simplest: the full backup.

When we perform a full backup, we back up everything. A full backup includes Windows, your programs, your settings, your data files… everything.

Full Image Backup

That’s why I love it — because there’s no question about what is being backed up.

Let’s say we take a full backup on Sunday night.

On Monday, you take some pictures and upload them, you update your resume, and you work with a spreadsheet. On Monday night, we do another full backup, so in this backup, we have Windows, all of our programs, and all of our files, including the new photo files and the changes you made to your resume and spreadsheet.

Monday's Full Backup

The result? A full backup image that completely represents the entire machine as it is on Monday night.

You can keep Sunday’s backup if you like; it’s a representation of the machine as it was on Sunday night.

How many previous backups you keep is up to you. I recommend keeping at least two, so if something goes wrong while the next is being created, you still have the current one.

Now Tuesday comes along. Maybe you work on your resume some more, and edit some of those photos you uploaded on Monday, and you start work on your friend’s resume. We’re doing nightly backups, so sure enough, Tuesday night we take another full backup: Windows, all the programs, and all your files, including the work you did on Tuesday, plus everything that changed on Monday, plus everything that was already there on Sunday.

Tuesday's Full Backup

  • On Sunday, we have a full backup of the machine as it was on Sunday.
  • On Monday, we have a full backup of the machine as it was on Monday.
  • On Tuesday, we have a full backup of the machine as it was on Tuesday.

Each is complete; each has everything; each is independent of the others.

As you can imagine, the size of these backup files is proportionate to the amount of the data on your disk. They can get large, which means keeping a lot of them requires a lot of space.

Incremental backups

Incremental backups are so called because they work in increments (“an increase or addition”, though here it also means “any change”).

Let’s repeat our scenario, this time doing incremental backups.

Sunday night: the very first backup that happens is a backup of everything. In other words, it really is a full backup.

Full Image Backup

Monday night: since we’re doing an incremental backup, we’re going to back up only those things that have changed since the previous backup. (Remember, on Monday you worked on your resume, a spreadsheet, and uploaded some pictures.)

Monday's Incremental Backup

Our Monday incremental backup will not stand alone. In order to have a copy of the entire machine as it existed on Monday night, we need the machine as it is existed on Sunday night, plus anything that changed Monday.

So, the first back up we did — a full backup — represents the machine on Sunday. The full backup plus that first incremental backup together represent the machine as it was when we performed Monday night’s backup. If your hard drive fails, you’re going to need both backup files to put things right.

Now Tuesday rolls around. On Tuesday, we back up only those things that have changed incrementally since Monday, because we already have everything that changed on Monday in Monday night’s backup. What we’re missing are the things that changed on Tuesday, so that’s all we have to back up.

Tuesday's Incremental Backup

Now, to get a representation of the machine on Tuesday night, we need:

  • The backup we started with (the full backup on Sunday night).
  • Plus any changes that were made on Monday (Monday’s incremental backup).
  • Plus any changes that were made on Tuesday (Tuesday’s incremental backup).

These incremental backups do not stand alone. They each rely on the preceding backups in order to build an image of the machine as it was at the time the backup was taken. Every time we do an incremental backup after this, we’re only adding things that have changed since the one the night before.

Tuesday night’s backup only backs up what changed during the day on Tuesday.

Monday night’s backup only backs up what changed during the day on Monday.

Sunday night was the start of the sequence. We backed up everything — and that’s how you reset an incremental backup sequence.

In practice, you don’t simply keep taking incremental backups forever. Since each backup relies on the previous ones, if something happens to any of the previous backups, the chain is broken, and none of the following incrementals can be used. So every so often, we start over again with a full backup.

I choose to do that once a month. I keep a month’s work of incremental backups, and take a brand new full-system image backup at the end of the month, starting the sequence over. At the end of the month, I have a single full backup and 30 incremental backups. Since I have a new full backup, I can discard those 30 incremental ones (or archive them, if I so desire).

That’s what I recommend most folks should do: a monthly full backup with daily incrementals. You can restore your machine to any day along the way, as long as you have all of the intervening incremental backups. It takes a lot less space than 30 full backups for a month, and since most of what’s on your machine doesn’t change that often (like the operating system itself and the programs), you don’t really need a full backup every day.

Differential backups

It’s important you understand incremental backups, because they’re what I believe most people should use.

If adding differential backups to the mix seems too confusing or overwhelming, don’t fret; it’s probable you will never need to use them. But there are cases where it comes up, including in the options offered by backup programs.

The key to understanding differential backups is that each backup is the difference from the starting point.

Back to Sunday night: again, we begin with a full backup, an image of everything on your machine as it was on Sunday night.

Full Image Backup

Monday night, we back up those things that changed Monday.

Monday's Differential Backup

That sounds a lot like the first incremental, right? So far, not dissimilar:

  • Sunday’s night’s backup has everything.
  • Monday night’s backup has everything that changed since Sunday: resume, spreadsheet, photos.

Tuesday is where it gets weird. Tuesday, you changed your resume, edited those photos, and started your friend’s resume.

Tuesday night’s differential backup = Monday’s changes + Tuesday’s changes.

Tuesday Differential Backup

Differential backups record the differences between the machine as it is today and the machine as it was when we started — everything that changed since Sunday’s full-image backup.

It’s not incremental. Tuesday’s backup does not know about, does not care about, and does not rely on Monday’s backup. Tuesday’s backup ignores Monday’s and builds only on the first, full Sunday backup. If we were to continue this, Wednesday’s backup would ignore Tuesday and Monday’s backup, and back up all the differences that happened since the backup sequence began on Sunday.

The big takeaway here is that each differential backup requires only the initial full backup to be complete, whereas an incremental backup requires every increment between it and the full backup that started it.

Now, the practical reality of this is that each differential backup gets larger and larger, because things change more and more. As the days go on, they get progressively bigger. At the end of the month, the differential backup includes everything that changed all month long.

Summary

Full backup is easy. Everything, every time, no questions.

Incremental: everything that changed since the previous backup.

Differential backup: everything that changed since that first, full backup.

One way to remember:

  • Incremental is literally the smaller increments of change. Each day, there are incremental changes to your machine, and that’s what gets backed up.
  • Differential is everything that’s different from the first backup. You have a single reference point—the first full backup—and every day you back up everything that’s different from it.

More

Normally, I’d simply list this article in the “related” section below, but experience has shown that these can be confusing concepts. I’d recommend you consider also reading the article “What’s an Incremental Backup?”, which presents much of this information with a slightly different approach. I hope that between the two, the concepts come across clearly.

Podcast audio

Play

29 comments on “Full? Incremental? Differential? What Kind of Backup Do I Want?”

  1. Excellent explanation of the different types of backups one can use on their computers. Good job!
    Personally, I take full backups on Sundays and incrementals the remainder of the week.
    Probably overkill, but I have a large enough (dedicated) hard drive for this purpose and it gives me peace of mind.

  2. I’ve switched from incremental to differential backup. Not because I think it’s better, but because I use Macrium Reflect free which I prefer to EaseUS Todo. I delete previous differentials pretty often because I rely on OneDrive for my data backup and Macrium Reflect to restore my system.

    I recently re-learned the value of a system image backup. My computer crashed and as it was my take to work machine, I hadn’t backed up in a long while as the machine never comes out at home. Reinstalling was easy and OneDrive restored all of my files. It took a couple of weeks, and I had to manually download a few files from the OneDrive website. And I’m still finding I have to install programs that I forgot when I installed Windows.

  3. I do differentials because I too use Macrium Reflect free, which only does full and differential backups. It is an excellent program and I want to thank Leo for bringing it to my attention. To anyone who hasn’t tried it, I highly recommend it. Get an external USB drive, download Macrium Reflect free and start making backups.
    Brian

  4. I think you may confuse people that are really not familiar with backups. Including windows in the backup usually will not work as files may become locked and thus not backed up. It gives them the false impression that if the OS gets corrupted they can just restore from backup. You may want to differentiate between a backup and a system image for the OS to be restored properly. Just a thought. But a good article and explanation otherwise.

    • Backup programs like Macrium Reflect, EaseUS Todo or Acronis will back everything up including locked and in use files.

      • Ok, thanks, but I would still assume that if Windows is in a state where it cannot load, that only an image or DVD reinstall would be needed to get it up and running, as individual Windows files on a backup won’t do much good. Am I correct?

        • The idea of regular image and incremental or differential backups is to go back to the backup of the computer in it’s last good state. For example, if your OS is corrupted or virus infected, when you backed up yesterday, you can go back to the day before yesterday’s backup and restore from that.

          • Just to be clear, and please forgive my ignorance, but with all this talk about “locked files” and so forth, I just want to clarify that the free version of Macrium Reflect CAN be used to make an image backup that would allow everything (most importantly, of course, the OS) to be installed on a “bare metal” machine (e.g., in the event of a catastrophic hard drive failure, which DOES HAPPEN [frown] ). Yes?

          • Macrium Reflect free is nearly identical to the paid versions in its ability to restore from a backup. You can definitely use it to restore your system to a bare bones machine, providing it’s the same machine (or identical model) the backup was taken from. You wouldn’t normally be able to restore it to a dissimilar machine because of driver incompatibility issues. You might be able to make it work with some hacking. I have done it, but it’s not always possible.

  5. Excellent article as usual! You prefer differential versus Incremential backups, so you don’t have to rely on ALL the Incremential backups being intact since recovery is dependent on the chain of Incrementials.

    I prefer Incrementals because this gives me the option of recovering to any particular day. Incrementals also has the option of mounting any of the Incrementals if I want or need to recover data from any particular day.

    I am willing to accept the risk associated with the Incremental method. I guess it comes down to each person considering the alternatives when making their choice.

  6. Thanks for breaking down the different ways to backup. That is the first time I have seen it described as such. I have been following Ask Leo for a few years, and recall seeing that saving files to cloud storage is a form of backing up. I cannot afford to pay for backup software, but have been using Google Drive with 17 free gigabytes of storage and have used a little over 1 of them. Every time I save a file I also do Save As Google Drive. I even have pictures and videos saved on Google Drive. I hope I am doing enough. Thanks again for helping this novice learn more and more!

    • That’s not a bad approach as long as you are placing everything important to you in Google Drive. I recently had a crash on the one computer I don’t do image backups on because it’s always in my travel bag and only used at work. I didn’t lose anything except for the time it took me to restore all of the programs I use, A month and a half later, I’m still finding a program I need to install. EaseUS Todo and Macrium Reflect have free versions, so even if you can’t afford to buy the software, system image backup is still possible. System Image and cloud backup used together are a great combination.

  7. Enjoyed the info; however I need to know which external hard drive to purchase to use specifically for backing up my system. I have a Dell Inspiron. Windows 10 and a 1 Terabyte HDD. Thank you.

  8. Thanks for this clear article. On askleo recommendations i downloaded macrium reflect free and want to create differential or incremental backups after the first complete backup on a wd external drive. How do I specify it to the program? I have not done it yet, is there a command for this ? How do I define it? Thanks to all who can instruct me

    • It’s one of the options when you setup the backup plan. You might want to search this site for “Macrium” — you’ll see I have several articles, as well as a book, on the topic.

    • Macrium Reflect free does differential but not incremental backups. If you have an additional cloud backup, you can get away with not keeping differential backup copies.

  9. I just reread this article. I think I am understanding the differences between Full, Incremental and Differential. Then I was rereading another article and you are talking about an Image backup. Is an Image backup the same as a Full backup? I am still not sure I am doing this right. I have purchased Macrium Reflect and your books. I am trying to start over from the beginning. Thanks for your help.

Leave a reply:

Before commenting please:

  • Read the article.
  • Comment on the article.
  • No personal information.
  • No spam.

Comments violating those rules will be removed. Comments that don't add value will be removed, including off-topic or content-free comments, or comments that look even a little bit like spam. All comments containing links and certain keywords will be moderated before publication.

I want comments to be valuable for everyone, including those who come later and take the time to read.