{"id":13335,"date":"2018-11-15T19:06:42","date_gmt":"2018-11-15T19:06:42","guid":{"rendered":"https:\/\/www.cleverfiles.com\/help\/?p=13335"},"modified":"2025-12-15T17:42:03","modified_gmt":"2025-12-15T17:42:03","slug":"the-best-way-to-use-apfs-snapshots","status":"publish","type":"post","link":"https:\/\/www.cleverfiles.com\/help\/apfs-snapshots.html","title":{"rendered":"APFS Snapshots on Mac: How They Work + Recovery With Disk Drill"},"content":{"rendered":"

APFS snapshots are one of the most important \u201cquiet\u201d features in modern macOS. They help Time Machine recover earlier versions of files, make macOS updates safer, and can even give recovery tools a point\u2011in\u2011time view of your data.<\/p>\n

This guide explains what APFS snapshots are, how they work under the hood, how to view\/manage them, and how to restore or recover files using built\u2011in macOS tools and Disk Drill.<\/p>\n

<\/span>Advantages of APFS<\/b><\/span><\/h2>\n

Apple introduced the Apple File System (APFS) at their developers\u2019 conference in 2016<\/a>. It replaced the aging HFS+ file system which had been used since 1998. It became the default file system for iOS 10.3 in March of 2017. Starting with High Sierra, macOS 10.13, it replaced HFS+ on Macs<\/a>.<\/p>\n

There are a number of features that make APFS a superior file system<\/a> to its predecessors. Among them are:<\/p>\n

    \n
  1. Snapshots<\/b> \u2014 Create point-in-time and read-only instance of the file system.<\/li>\n
  2. Clones<\/b> \u2014 This feature allows efficient file copying that eliminates the need for additional storage space.<\/li>\n
  3. Encryption<\/b> \u2014 Full disk and file encryption are supported in APFS.<\/li>\n
  4. Crash protection<\/b> \u2014 Protects from system crashes by avoiding metadata corruption.<\/li>\n
  5. Increased maximum number of files<\/b> \u2014 You can now have up to 9 quintillion files resident on a volume.<\/li>\n<\/ol>\n

    We are going to focus on APFS snapshots and show you how an understanding of them can help you manage your computer.<\/p>\n

    <\/span>What is an APFS Snapshot?<\/b><\/span><\/h2>\n

    A feature of APFS that is particularly useful is the ability to create point-in-time snapshots of your file system. One of the most beneficial uses of snapshots is to produce backup points that would enable you to restore your machine to the state it was in at the time of the snapshot.<\/p>\n

    An APFS snapshot is a read\u2011only, point\u2011in\u2011time representation of an APFS volume. Think of it as freezing the volume\u2019s state at an exact moment\u2014without duplicating the entire drive like a traditional clone.<\/p>\n

    A snapshot can be instrumental in allowing you to recover from a malware attack or inadvertent system corruption. It gives you the ability to travel back in time to a moment when your system was running perfectly.<\/div>\n

    Snapshots are powered by APFS\u2019s copy\u2011on\u2011write (CoW) design<\/b>:<\/p>\n

      \n
    • Existing blocks are not overwritten in place.<\/li>\n
    • When data changes, APFS writes new blocks and updates metadata to point to them.<\/li>\n
    • A snapshot \u201cpins\u201d older metadata + block references so the system can still see the volume exactly as it was.<\/li>\n<\/ul>\n

      This is why snapshots can be created quickly and usually start small, but can grow as more data changes after the snapshot is taken.<\/p>\n

      <\/span>macOS Updates and Automatic Snapshots<\/b><\/span><\/h2>\n
      \r\n