Backup Strategies for Wedding Photographers
If there is one service that wedding photographers should virtually never have to use, it's data recovery. These are the companies that specialize in recovering files from a malfunctioning storage device, sometimes utilizing specialized software and techniques, or in extreme cases also going so far as to disassemble the hardware and replace the controller board or other defective parts (which can get quite expensive). In addition to the cost, success rates vary wildly, with often only a partial recovery is possible, or no recovery at all.
I cringe whenever I see a wedding photographer post on social media groups asking for recommendations for data recovery services. It's usually because they simply hadn't gotten around to making backups, thought they had backed up but hadn't, or that they mistakenly reformatted and reused a memory card a few days after the event but forgot to copy the images to their computer first, all very easily avoidable mistakes.
Dual Card Slots
I strongly recommend shooting with cameras that have dual card slots. This is a non-negotiable feature for any camera I use for documenting weddings or any other similarly crucial event.
With Canon and Nikon having introduced full-frame mirrorless camera bodies in 2018 that, to the shock of many professional photographers, only had one card slot, a lot of heated debate has flared up over this issue, with the wedding photography community sharply divided into two camps. One side believes that dual card slots are completely unnecessary, because they've personally never had an instance of lost images, and also citing the fact that before digital, film cameras had no such backup ability. The other side considers the lack of dual card slots in a camera to be an absolute deal-killer for professional event photography. I fall firmly into the latter category. Just because I've personally never been in a serious car crash, I still always wear my seatbelt and I appreciate that all modern vehicles have multiple airbags as well as other important safety features.
I did once (many years ago) have an instance where one of my CompactFlash memory cards in a Nikon D3s malfunctioned, corrupting the directory structure, and I was easily able to pull the files from the secondary card. It's possible that recovery software or a recovery service could have salvaged most or all of the images from the malfunctioning card, but I'm glad I didn't need to rely on that option.
But in addition to memory card malfunction, another (possibly even more common) culprit of image loss is simple human error or other human-caused circumstances. Probably the most frequent scenarios are when the cards are misplaced at the end of the wedding, with the most heartbreaking (and cringeworthy) story I've heard being when a photographer set their card wallet on top of the car as they were packing up in the venue's parking lot at the end of the night, and drove away without realizing it. The card wallet fell off the top of the car onto the pavement, and by the time they, in a desperate attempt to locate the missing cards by retracing their steps, returned the next morning, the cards had been run over multiple times by other vehicles and were physically destroyed beyond any hope of recovery.
Another example of easily avoidable image loss that we hear about on the news every now and then is when a photographer leaves their bag in their car, and this gear (along with the memory cards) is stolen, resulting in the couple's irreplaceable photographs being lost forever.
Though memory cards should be handled with the utmost care, and not be left in the car or given the opportunity to be misplaced, we are all human and are capable of making mistakes. Shooting to dual cards offers significant protection in these scenarios.
Consider the prospect of what to do with your used memory cards at the end of the night. Surely you use some sort of case or wallet for safely and securely storing and carrying your cards, but it's widely acknowledged that any handling of the cards on-location increases the chances that they'll be misplaced. After all, it's much harder to misplace a card when you don't touch it at all, and when it has a big camera wrapped around it! But there's also a distinct possibility that you and your camera gear could be separated (for instance, if you are robbed while walking back to your car) which would mean the cards would be gone too, which swings the decision back in favor of removing the cards from the cameras and keeping them on your person.
The perfect solution is to do BOTH, which is easy and painless thanks to dual card slots. When I'm finished photographing a wedding, the cards are immediately separated, with one set coming out and being placed in a card wallet (which stays in my front pocket and is tethered to a belt loop), while the other set remains in the cameras.
A perfect illustration of how dual card slots, along with proper handling, could have provided a substantial measure of insulation against human error came in mid-2019, when a Texas photographer shooting a destination wedding in Colorado somehow misplaced her card wallet containing all the photographs from the event she had captured that weekend. She didn't realize it was missing until she was at the airport, ready to board the plane to head home, and because that day's sightseeing and travel prep had included several stops across a wide area, the search area was huge. Apparently she was using single card slot cameras (or had a dual card slot camera but was only shooting to single cards, as some photographers inexplicably do). Although the story went viral, with multiple people volunteering to scour the areas she had visited in the hopes of finding the misplaced card wallet, it remained lost.
Again, mistakes or misfortune happen to anyone, no matter how much care is taken. And although this photographer may have been careless, it's not particularly shocking that a small card wallet could be misplaced. However, it's a harsh and unavoidable truth that had this event been captured to dual memory cards, with one set of cards remaining in the cameras afterward, and the other set remaining secured on her person, it's extremely unlikely that both sets would have been lost simultaneously.
Memory Card Handling Procedures
Make it an unbreakable habit that once you are back home you ALWAYS download the images from the cards right away. Yes, you are exhausted from a long day of shooting, and you just want to go to bed, but I have heard numerous stories of photographers plopping their cards on the desk intending to download the images later in the week, but then inadvertently erasing and reusing cards a few days later while forgetting copying off the previous job's images (and as a side note, memory cards are not that expensive... buy enough of them so that you don't ever feel pressured to reuse them immediately).
Putting off the process of downloading your images for even just a day or two drastically increases the chances of a mishap like this occurring (dual card slots offer an additional layer of protection against this kind of mishandling, though you should not rely on this). It should also be noted that, the longer you delay the downloading of your cards, the longer you go with insufficient backups (especially the essential off-site backup... what happens if your home or studio burns down or is burglarized?).
This doesn't have to be painful or inconvenient. Just make the computer one of your first stops as soon as you get home. If you have multiple card readers, it takes just a minute to set up all of your cards to be downloading simultaneously while you go take a shower and get ready for bed. Come back to the computer afterward and it will be done... run your backups, then go to sleep!
One other practice I employ is to retain one set of cards until after the wedding is fully edited. Years ago, memory cards were quite expensive, but these days they are very reasonably priced, and it's cheap insurance to have enough cards on hand to enable you to stash away the second set of cards until you are certain they are no longer needed. I shoot RAW to both cards, and I specifically retain the second set of cards (not the ones that were originally copied to the computer), just in case there are instances of corrupt images on the first set that went unnoticed initially. Retaining that same set of cards would offer limited benefit in that scenario.
To be fair, the protection from data loss that having dual card slots gives you is by no means absolute, as it's still possible for an upstream glitch within the camera to affect an image before it's written, leading to a corrupt file on both cards. There have been several reports of Canon bodies exhibiting this problem. I suppose it's also hypothetically possible for a severe camera malfunction to damage the data that had previously been written to both cards, and there's an extremely remote possibility that both cards could be defective or otherwise somehow suffer data loss simultaneously.
But I have a firm and absolute belief that the benefits dual card slot camera bodies give to photographers who capture priceless and unrepeatable events like weddings are far too valuable to disregard.
Backing Up Your Images
Admittedly, I perhaps go a little overboard with my backups, but hard drives are not prohibitively expensive, and I want to do everything possible to avoid ever having to tell a couple that their wedding photographs have been lost. I'm Mac-based, and use ChronoSync to execute my backups. This app does a great job performing incremental backups, which means only new or modified files have to be copied.
I have various drives that I perform automatic and manual general backups to, with separate drives specifically for my wedding and portrait RAW files:
- External 3TB hard drive – this drive remains always connected to my computer, which enables me to quickly run a backup whenever I feel the need, and is backed up to automatically each night as well. But you should not rely exclusively on backup drives that remain constantly connected, as the same lightning strike or other catastrophic power surge (or malware) that could wipe out your main storage drive would also likely take out this drive at the same time.
- Portable 1TB hard drives (2) – these two drives are kept physically separated, and I alternate them every few days. They remain disconnected from the computer unless I'm running a backup, and only one is ever connected to the computer at any given time. One of these stays inside, the other remains in my car.
- BackBlaze– this is a cloud backup service that enables me to ensure I have a secure, off-site (and geographically-remote) backup of my wedding and portrait images and other important files.
- 128GB USB Flash Drive – because a cloud backup of a big wedding can take a day or so to complete, I also keep a copy of my most recent wedding images on this flash drive, which I carry around with me if I have to leave the house before the cloud backup has finished.
Everyone has their own comfort level. But while one local backup in addition to a cloud backup is probably sufficient, it's prudent to be extra cautious, since these images are so absolutely priceless to our clients.
And I do, of course, also make general backups of my computer's other files, though I use other drives for these backups.
It's crucial to have an off-site backup. For those of us who do not operate out of a separate office/studio space, this can be difficult. I partially fulfill this need with the above mentioned pair of portable hard drives (with one of them remaining in my car at all times, swapping between the two as needed) and flash drive. But a cloud backup gives an extra layer of security, with a truly geographically-distant backup.
That being said, I would not feel comfortable relying solely on a cloud backup service as your only backup. A full restore of a large failed hard drive could take days or weeks to download (an alternative is to have the backup service ship you a hard drive loaded with your files). And although rare, I've heard stories of data center mishaps where backed-up files are somehow rendered completely or partially unrecoverable. So, use other multiple / redundant backup drives, and consider cloud backup to be your last resort in the case of a catastrophic failure.
After being with CrashPlan for over seven years, I'm transitioning my online cloud backups to BackBlaze. Admittedly, it's a bit painful to start from scratch and upload all my data again, but it's something I've been considering for a year or two now, and a few recent changes both at CrashPlan and at BackBlaze prompted me to make the move.
First, some words about CrashPlan. It's reasonably priced ($10/month for unlimited backup), and it's headline feature is indefinite deleted file retention. Why is this important? Consider the possibility that you inadvertently delete a file or a folder of files from your hard drive, but you don't realize the mistake right away. With most online backup services, deleted files are permanently removed from the backup server after 30 - 60 days. So if you don't happen to notice the missing files until a 3-4 months later, you are out of luck, they are gone and cannot be recovered (unless you have a local backup, which you should). CrashPlan, on the other hand, will retain deleted files indefinitely. It can also be configured to retain multiple versions of files that have been modified over time.
It's a similar story with how external hard drives are treated. BackBlaze and Carbonite both require that unmounted external hard drives periodically be reconnected and left mounted for a period of time so that the backup client app can see that these drives and the files they contain are still present. If this is not done, the backup of those files will be permanently deleted from the server.
CrashPlan has no such restrictions or requirements. This is important for photographers who like to move older jobs to external drives that are typically not kept mounted.
At this point you're probably wondering why I'm no longer using CrashPlan if it's so great. The biggest downside is its poor backup upload speed, which I've never really been happy with. The upstream bandwidth of my cable internet connection is 10Mbit/s, but CrashPlan would typically only utilize about 1/4-1/3 of that, despite the settings being configured for maximum performance. The reason has been traced down to CrashPlan's thorough data deduplication feature, which analyzes blocks of data before they are sent to see if they already exist on the server (such as would be the case if a file had just been renamed, or had been modified). This enables the app to only send the modified portion of the file rather than having to upload the entire file again, which is very useful for files that are simply moved or renamed, or perhaps have small changes added to them.
But this feature comes with a price, as the process of comparing blocks of data on your hard drive with data stored on their servers drastically slows down the process of uploading files. This is a worthwhile tradeoff for normal everyday use, as data deduplication really is a useful feature, but when you're uploading a big batch of newly captured RAW files, these are not going to benefit, and the time spent scrutinizing these files is wasted. In the past, CrashPlan included a setting where you could disable data deduplication for situations such as this. However, an app update a few years ago removed this setting. There was still a way to change it, via manually editing an XML settings file, and although this was cumbersome, this was an acceptable workaround when I had a large group of files that needed to be uploaded.
So what happened?
Well, two things. First, in October 2019, BackBlaze announced extended file retention and versioning. For an additional $2/month, deleted and modified files are retained for a year, and if you would like to retain files indefinitely, the cost is $2/month plus $0.005 per gigabyte of retained files (in other words, files that have been deleted or changed on your hard drive over a year ago, but retained in the backup). Though BackBlaze's indefinite retention option could potentially be significantly more expensive than CrashPlan, one year of retention is an acceptable amount of time, and ends up being a little cheaper than CrashPlan ($84/year vs. $120/year), though price is not a significant factor, as both of these services are very affordable for what they provide.
The second shoe to drop was CrashPlan removing the ability to change settings via the XML file. Being able to temporarily disable data deduplication with this method was the only way I could upload large batches of data in a reasonable amount of time, so it was really a deal-killer when they made this change, first removing users' ability to simply disable deduplication in the app's settings, then eliminating the XML file.
So, my files are now being backed up to BackBlaze, and it gloriously utilizes the full upstream bandwidth of my internet connection (though you do also have the option of throttling uploads if you don't want it to use your full bandwidth).
Now, that's not to say that there won't be some aspects of CrashPlan that I won't miss. If you use a Network Attached Storage (NAS) device, CrashPlan will (surprisingly) back up the data stored on it. Other online backup services either will not allow a networked drive to be backed up, or require a more expensive monthly plan to do so. This limitation is somewhat understandable though, as the ability to backup network volumes opens the door for abuse, where a user could be backing up an entire household or office of computers, all funneled through one machine with a single cloud backup account.
CrashPlan has a more robust data deduplication feature compared to BackBlaze. As mentioned before, with CrashPlan, when files change, only the portions that have been modified have to be uploaded to the server, not the entire files again. Similarly, if a file is renamed or moved, just that reference is changed, and the whole file does not need to be re-uploaded. This is beneficial if your workflow results in you renaming or moving your RAW files at some point after they have been initially backed up, and/or if you embed XMP metadata in your DNG files after your editing work is complete. Rather than these many gigabytes worth of files having to be uploaded again over the course of the next day or so just because the names changed, the backup completes in just a few minutes, because the app only has to upload the information that has changed. But again, this comes at a price, being much slower uploads of new data.
BackBlaze also has data deduplication, but it is not quite as thorough as CrashPlan. While it works fine for files that are removed and/or renamed, it's more likely to have to re-upload large files that have been modified.
CrashPlan is also quite a bit more configurable in allowing you to designate how often various drives (or even just specific folders) are backed up, what takes priority, how many old versions to retain, etc. BackBlaze's settings are simpler (which may be a good thing for many people).
Still, I'm happy with the switch, as the tradeoffs were worth it for me. BackBlaze is also less resource-hungry than CrashPlan, which is important now that my primary computer is a laptop.
Interested in trying BackBlaze? Sign up with this link and we'll both get one month of service for free!
RAID is Not a Backup!
I cringe when I hear someone say, "I've got a RAID system, so I don't need to worry about backups." A RAID is a group of drives (usually housed together in a multi-bay enclosure), configured to work together in one of several different ways.
One way a RAID can be configured is for maximum performance (with the data striped across multiple drives). The speed of this type of RAID makes it attractive to high-end video editing, but if any of those drives fails, ALL the data in the entire array is lost. Most (hopefully all) of these users understand this.
What's more of a gray area for some photographers is when they have a RAID set up with some form of redundancy, where the array can withstand the failure of one (or sometimes multiple) drives without losing any data, and this can sometimes be misinterpreted as taking the place of a backup. This is most certainly not the case, as a RAID offers no protection against file corruption, or inadvertent deletion. Additionally, a catastrophic event such as a lightning strike or power surge would likely take out all the drives simultaneously.
So why would anyone bother with a RAID? Depending on the configuration, it can be useful for those who absolutely need the best possible performance, or those enterprises that cannot afford even a few hours of disruption and down-time that a normal failed hard drive would cause.
But for the rest of us, I believe RAID is not helpful enough to outweigh the potential cons, though to be fair, my thinking on this is skewed by the fact that I used to utilize a NAS (network attached storage) RAID set up for redundancy, and a failed power supply in the enclosure corrupted the data on all the drives, leaving me no other option but to reformat the array. Fortunately, I had backups, but it was a huge hassle to get the NAS back operational again. Because of that, I rely on a simpler setup of individual hard drives and SSDs now for storage.
Another thing that makes RAID less crucial now is the available size of individual hard drives now. Some users like (or need) to have one large bucket of storage space, and back in the days of 500GB - 1TB drives being the largest available, it was nice to be able to combine four to six (or more) of these in a RAID enclosure, and have them combined into a single large volume. But today, with 8-12TB hard commonly available, this is no longer as important of a factor as it once was.
Verify Your Backups
You should also periodically verify that your backups are indeed taking place as expected.
Several years ago there was an incident here in New Orleans where a courthouse server crashed, resulting in the loss of decades worth of real estate transactions and documents. When IT staff attempted to recover the data from their backup system, they discovered that, unbeknownst to them, it had ceased functioning properly about a year prior, and contained very little useful data. They were eventually able to recover most of the data through other means, but it's a frightening example of what can happen when you simply assume that everything is working.
Similarly, during production of the Pixar movie Toy Story 2, an animator, while performing routine housekeeping tasks on the studio's server, mistakenly deleted about 90% of the film's 3D modeling asset files, and the backup system was subsequently found to have failed at some point in the past, leaving the project in peril. Fortunately, an employee who had been working from home happened to have copies of most of the lost files on her own computer.
The lesson of these stories is, in addition to verifying that your backups are working, to maintain multiple backup methods and devices as an extra measure of safety.