Your family photos are not backed up. They live in an account — and accounts lapse.

The photos on your phone mostly live in one place that only feels like several. They sit on the handset, and they are mirrored to a cloud library — iCloud, Google Photos, Amazon Photos — that turns up on every device you own. It looks like safety. It is really one library with several windows onto it.

Sync and backup do different jobs, and that difference is the whole story. Sync keeps copies matching each other: delete a photo on the phone and the deletion travels to every device and up to the cloud. A backup is a separate copy that does not follow along when something goes wrong. Security agencies still point people at the same old rule for exactly this reason. CISA sums it up as three copies of your files, on two kinds of storage, with one kept somewhere else.

A cloud photo library on its own is one copy that many screens can see. Handy, until the account behind it goes. Then every window goes dark at once.

An account can lapse. Google's policy is that a personal account left unused for two years may be deleted, and its contents go with it, Google Photos included. Warnings go to the account and to a recovery address first, but those notices land in an inbox nobody is opening any more. Which is precisely the situation the account is in danger in.

An account can also lock. When someone dies, the library keeps existing, but nobody can legitimately sign in. A password shared round in advance tends to trip the provider's fraud checks and freeze the account rather than open it. Paid storage is another quiet trapdoor: once the card on file expires the plan lapses, the library drifts over its free limit, and deletion follows on the provider's own schedule.

None of this is dramatic. A payment that stopped. A login that never happened. A death no service was ever told about. The archive was not destroyed in any of these. It simply became unreachable, and stayed that way.

Say you did it properly and kept a real second copy on an external drive. Better. But a drive in a desk drawer that only you know about, unlocked by a password only you remember, is not much use to a family trying to work out what you left behind. The copy survived. The knowledge of it did not.

This is the gap most people miss. Making decades of photos survive is two problems wearing one coat. The first is technical: more than one copy, in more than one place. The second is human: somebody has to know the archive exists, know where it is, and be able to get into it at the moment you cannot walk them through it.

A backup nobody can find is, from the family's side of things, the same as no backup at all.

Apply that three-copies idea to family photos and it stops being abstract. Your phone plus its cloud library is really one logical copy, not two, because one mirrors the other. So add a genuinely separate one: an external drive you copy to a few times a year, or a second cloud service that is not syncing from the first. The test is blunt. If you deleted a picture by accident today, is there a copy somewhere that never got the memo?

Keep one of those copies physically elsewhere: a drive at a relative's house, or a different provider entirely. Fire, theft and a wrong tap do not reach across a distance. And check now and then that a backup actually opens. An external drive that spins up to nothing is a common and miserable discovery, usually made on the day it was finally needed.

The copies are half the job. The other half is a short record of what exists and how to get to it. Which service holds the main library. Where the backup drive lives and how it is unlocked. Whether the storage plan is paid, and on which card, so it does not lapse the moment that card is cancelled.

Switch on the provider's own handover where there is one, such as Apple's Legacy Contact or Google's Inactive Account Manager, and write down that you have done it, because a nominee who does not know they were named cannot act. Then tell at least one person outside your household that the record exists and how to reach it.

That last part is what a service like LifeWyn is for: holding the inventory, the access notes and your instructions in an encrypted vault, and releasing them to the people you named once it is verified they should have them. The photos stay where they are. What you are really preserving is the way back in.