Devices Looking after devices and the data on them
Twenty thousand photos: a backup and sorting system that holds
A photo setup that survives a lost phone, a cancelled subscription and twenty more years, without a weekend of sorting.
The short answer
- One primary library with automatic upload, a yearly export to a drive you own, and a yearly cull is the whole system, and each layer covers a failure the others do not.
- A synced photo library is one collection on several screens, so deleting a photo on your phone to free space deletes it from the cloud as well.
- Optimize storage settings leave only small versions on the device, so a phone is not a usable copy of the library you think it is.
- Compressed upload tiers are hard to see on a screen and obvious when you crop hard, print large or edit a photo again years later.
- Albums, captions and face names usually live in the provider database rather than in your files, so an export gives you photos and dates but rarely the organization around them.
- When a storage subscription lapses the library normally goes read only first, and deletion of anything over the free allowance becomes possible after a grace period set by the provider.
A photo collection that survives decades needs three layers. One primary library that every device uploads to automatically, so nothing depends on you remembering. A periodic export of the whole thing to storage you physically control, so the collection is not hostage to one account or one subscription. And a short yearly pass to cull the waste and mark what matters. That is the entire system. The rest of this article is where each layer quietly fails, because the failures are predictable and almost all of them are silent.
The three layers that make it hold
Pick one primary library and make every camera feed into it. Two half libraries is the arrangement that loses things, because neither one is ever the complete set and you will not remember which is which. The primary library should sync automatically over wifi and be the place you browse, search and share from. It solves device loss and nothing else. Sync copies deletions and corruption as faithfully as it copies photos, which is why the second layer exists: an export to a drive in your house, made on a schedule you can keep, holding actual files in actual folders. The third layer is a copy of that export somewhere other than your home.
| Layer | Covers | Does not survive | Effort |
|---|---|---|---|
| Camera roll on the phone only | Nothing beyond daily use | Loss, theft, water, a failed update | None, and it is not a plan |
| Cloud library with automatic sync | A lost, stolen or dead phone | Deletion, account lockout, a lapsed subscription, a provider closing the service | Set up once |
| Yearly export to your own drive | Account loss, service changes, price rises, format lock in | Fire, flood, burglary at your address | An hour or two a year |
| Second copy kept elsewhere | Anything that takes the whole building | Neglect, if it is never refreshed | A drive swap every few months |
This is the same reasoning as any other backup, applied to the one collection nobody can recreate. If you want the general version, including how often to test a restore, it is in the 3-2-1 backup rule in real life.
The optimized storage trap
Most phone photo services offer a setting called something like optimize storage. Turned on, the phone keeps a smaller version of each photo and leaves the full one in the cloud, fetching it when you open it. Useful, and it hides two sharp edges.
The first: what is on your phone is no longer a copy. Plug that phone into a computer to grab the photos and you may pull down small versions, or nothing at all for older years. People discover this while exporting, which is the worst moment to discover it.
The second is worse. In a synced library, deleting a photo on the phone deletes it everywhere. Clearing space by working through the camera roll is not tidying the device, it is editing the master collection. When the phone is full, delete the things that are genuinely local, starting with the categories listed in what to delete first when a phone fills up, and leave the photo library to the service.
Original quality versus the compressed copy
Services usually offer two upload tiers. Original quality stores the exact file your camera produced and counts fully against your allowance. The cheaper tier re-encodes each photo, often capping the long edge at a few thousand pixels and raising compression, and it may or may not count against the allowance.
For photos you will only ever view on a screen, the compressed tier is genuinely hard to tell apart. The difference shows up in three places: cropping hard into a picture, printing larger than a sheet of paper, and re-editing later, because compression artifacts compound every time a file is saved again. It also matters for video, where the compressed tier typically drops the frame rate or resolution of anything shot in high definition.
The decision that actually matters is that the tier applies going forward, and re-uploading everything at original quality later is only possible if you still have the originals. So the practical rule is to keep originals on the source device or an export until you are certain, rather than assuming you can upgrade the library in place.
Two file formats are worth knowing. Modern phones shoot HEIC or HEIF, which stores the same picture in roughly half the space of a JPEG, and older software sometimes cannot open it. RAW files from a camera or a pro phone mode are much larger and are stored in a format specific to the manufacturer, so a generic export of RAW files may not keep the edits. When in doubt, export a JPEG alongside the original.
The export that keeps the library portable
The export is the layer people skip, and it is the one that makes everything else optional. Every major service has a bulk download function, usually buried in account settings rather than the photos app. Run it once a year, unpack it, keep the result on a drive.
Expect it to be clumsy. Large libraries arrive as numbered archive files that must all be downloaded before any of them can be unpacked, and album structure often does not survive. Captions, favorites and face names usually arrive as separate data files beside the photos rather than inside them, because those things live in the provider database, not in your pictures.
What does travel inside the file is the standard metadata: date and time taken, camera and lens, exposure settings, and location if it was recorded. That is what lets any software anywhere rebuild a timeline from a folder of loose files, and it is why an export is a real escape route rather than a pile of images. Check that your export kept it, because a few tools strip location data on the way out.
Store the result in a structure so dull it needs no software to navigate: a folder per year, subfolders by month, original filenames left alone. Then check the drive has room to keep doing this for a decade, since storage is the cheapest thing to overspecify, as the laptop buying checklist that survives the marketing argues.
Guard the account as hard as the files, because a photo library is usually tied to the same account as your email and your phone. Recovery codes and a second contact method have to exist before the lockout, which is the point of setting up account recovery before you need it.
Shared libraries, duplicates and the yearly cull
A shared library is not a shared album. An album shares pictures you choose. A shared library merges two collections, so a photo added by either person lives in both and a photo deleted by either person can disappear for both. It is excellent for a household and it doubles the number of people who can delete your photos by accident. Agree who does the culling before you turn it on.
Duplicates arrive from importing the same card twice, saving a picture someone sent you that you already have, and the same photo existing as an original and as a screenshot of itself. Tools that match on exact file content are safe to run unsupervised. Tools that match on visual similarity are the ones that quietly delete the one frame of a burst you wanted, so review their suggestions rather than accepting them in bulk.
The yearly cull takes an hour and is worth more than any software. Work through one year at a time and delete only the obvious: failed shots, near identical bursts, screenshots you no longer need, video you filmed by accident. Do not agonize over borderline pictures, because your judgment about what will matter in twenty years is unreliable. Then mark the fifty that do matter as favorites.
What happens if the subscription lapses
Nothing is deleted the moment a payment fails, but the sequence is worth knowing in advance because it runs quietly. Typically uploads stop first, so new photos pile up on the phone and never leave it. The library then becomes read only: you can view and download, but not add. If the account stays over the free allowance past a grace period set by the provider, deletion of the excess becomes possible, and the provider decides what goes.
The grace period is stated in the terms rather than anywhere obvious, but the warning method is consistent: an email to the address on the account. If that address is one you no longer read, the first you learn about it is a gap in your timeline. Check which address the account uses, and treat storage warnings as urgent mail.
The same logic applies to any paid plan you are carrying without noticing, and photo storage is one of the most common. Sweeping for forgotten plans is covered in finding the subscriptions you forgot and cancelling for real, but photo storage is the one to cancel deliberately rather than by letting a card expire, and only after the export is done and verified.
The setup worth doing this weekend
- Choose the primary library and turn on automatic upload from every phone in the house.
- Check the upload quality setting and decide deliberately rather than leaving the default.
- Run a full export now, before you need one. Unpack it and open a handful of files from different years to confirm they are full size and the dates are intact.
- Copy the export to a second drive and put that drive somewhere other than your home.
- Put two reminders in the calendar: the export, once a year, and the cull, once a year, in the same week.
- Print something. A photo book of one year, or twenty prints in a box, survives every format change and every company decision that follows.
Printing is not sentiment. Prints are the only copy here that needs no account, no software and no electricity, and they are the copy your family will actually find.
Two loose ends finish the job. Decide who should reach the library if you cannot, since most providers offer a legacy or trusted contact setting that only works when arranged in advance, as covered in what happens to your accounts after you die. And when a phone leaves your hands, confirm the export is current, then wipe the device properly, because a phone sold with the library still signed in hands over the whole collection with it.
Common questions
How do I get my photos out of iCloud or Google Photos?
Use the account level data export tool rather than selecting photos in the app, since app downloads are slow and cap out on large selections. The export arrives as a set of archive files that you must download in full before unpacking. Set aside an evening and a drive with plenty of free space, and check a sample of files from several different years once it finishes.
Is it safe to delete photos from my phone after they back up?
Only if the service is a true backup rather than a sync. In a synced library, deleting on the phone deletes everywhere, and the item sits in a recently deleted folder for a limited window before it goes for good. The safe method is to use the built in tool that removes local copies while keeping the cloud versions, or to delete only after an export is on a separate drive.
How many copies of my photos do I actually need?
Three, in two different places. The live library you use every day, an export on a drive at home, and one more copy kept somewhere else, either a second drive you rotate or a separate storage service. The point of the third copy is that it covers events which take out your house and your account respectively, and those are the two things a single cloud library cannot survive.
What is the best way to organize twenty thousand photos?
By date, and then let search do the rest. Folders by year and month need no software to read and survive every migration, while modern photo apps already find people, places and objects for you without any tagging. Spend the time you would have spent on albums marking a small number of favorites each year instead, because that list is what you will print and what your family will look at.
Do I lose quality uploading photos to a cloud service?
It depends on the tier you chose at setup. Original quality keeps the exact file and uses more of your allowance. The cheaper tier re-encodes the image and usually limits its dimensions, which is invisible on a phone screen and visible when you crop or print. Whichever you pick applies from that point on, so keep the originals until you are sure.