Why no backup can restore a Mac’s startup disk

What the seal is

Modern macOS splits your startup disk into two volumes. One holds the operating system and is read-only. The other holds everything else: your home folder, your applications that did not ship with the Mac, your settings.

The system volume is a Signed System Volume. Apple computes a cryptographic hash tree over its entire contents and signs the root of it. At every boot, macOS checks that signature. If a single byte anywhere on that volume differs from what Apple signed, it does not boot.

That is a security feature and a good one: it means no piece of software, however privileged, can quietly modify the operating system. It also means a copy of that volume made by anything other than Apple is unbootable by construction, because reproducing the signature requires Apple's private key.

What this changes about backups

Older advice about "cloning your startup disk" comes from a world that no longer exists. Tools that used to make a bootable duplicate now either copy only the data volume, or use Apple's own replication mechanism to install a fresh copy of macOS alongside it, which is a different operation with different limits.

Time Machine included. Its restore does not write a system volume back either. What it does is install macOS from Apple, then put your data on top, which is what Migration Assistant is doing during setup.

So the honest framing for every backup tool is the same: back up what is yours. The operating system is not yours to back up, and it is a free download that has never needed backing up.

What a recovery looks like in practice

1. Get macOS onto the machine. Hold the power button on an Apple silicon Mac to reach Recovery, or use another Mac to put a fresh install on the drive. Recovery downloads macOS from Apple over the network.
2. Create a user account. The same short name as before saves you a permissions detour later, though it is not essential.
3. Put your files back. From Time Machine, this is Migration Assistant during setup, which also carries your applications and settings. From any other backup, this is a restore into your home folder.
4. Reinstall applications. App Store apps redownload. Others come from wherever you got them, which is why a list of what you had installed is worth keeping in the backup.

Total time on a modern connection is usually an hour or two, most of it waiting for the macOS download.

What to make sure is actually in your backup

• Your home folder, including the hidden files. Application settings live in ~/Library, and a backup that skips hidden files quietly leaves them behind.
• Anything outside your home folder you put there yourself, such as a /Volumes mount or a folder at the root of the disk.
• A list of your applications. ls /Applications > ~/Documents/apps.txt costs nothing and saves an afternoon.
• Your passwords, somewhere other than the Mac. The login keychain travels with the home folder, but it unlocks with your account password, so a recovery that starts with a forgotten password starts badly.

Common questions

Can I still clone my drive so it boots?

Not of the sealed system volume. Some tools can produce a drive that boots by installing macOS onto it and copying your data alongside, but that is an install plus a copy, not a byte-for-byte duplicate, and it has to be redone after each macOS update.

Then why do people still say "clone your drive"?

Because it was excellent advice for about fifteen years and habits outlive their reasons. Before macOS 11 the system volume was ordinary writable storage and a block copy of it booted fine.

Does this mean Time Machine is no better than any other backup?

Time Machine has one clear advantage: Migration Assistant offers to restore from it during the first-run setup, which makes the recovery a single guided step. What it does not do, and cannot, is restore the operating system from your disk. That comes from Apple.

What if Apple stops offering my macOS version?

Recovery installs the version the Mac shipped with or a later one, so a machine is never left without an operating system. If you specifically need an older release, keep the installer itself in your backup: it is an ordinary application bundle.

How does Copy Shelter handle this?

The same way it has to, and it says so up front. Copy Shelter restores everything that was yours onto a macOS you installed from Apple, and the app walks you through that sequence before you ever need it.

Next: how to restore a Mac from a backup, start to finish.

Related guides

• How to check a backup is actually readable
• Time Machine says it cannot verify your backups
• Your backup stopped running, and nothing said so
• How to back up a Mac to an external drive
• Backing up a Mac with rsync