Sweepfor Mac

Mac maintenance

Does Mac Have System Restore Points? (And What to Do Instead)

macOS doesn't have Windows-style System Restore. Here's what it has instead — APFS snapshots, Time Machine, and macOS Recovery — and when to use each.

8 min read

You’re coming from Windows and looking for “System Restore” on your Mac. You found Time Machine, but that’s not quite the same thing. So does macOS have system restore points, or doesn’t it?

The short answer: macOS has something better and worse. Better in that the underlying technology (APFS snapshots) is more reliable than Windows’ Volume Shadow Copy. Worse in that there’s no single “create a restore point now” button before you do something risky.

Here’s the actual landscape.

What Windows users mean by “system restore”

In Windows, System Restore creates point-in-time snapshots of the Registry, drivers, and system files. If a Windows Update or driver install breaks something, you can roll back to the previous restore point in 15 minutes.

It doesn’t restore user files, just system state. It runs automatically before major changes. You can also create one manually before doing something you’re unsure about.

macOS has nothing exactly equivalent. Apple’s approach is different. The pieces:

  • APFS snapshots — the underlying technology, used by Time Machine and macOS Updates
  • Time Machine — Apple’s user-facing backup, includes hourly snapshots
  • macOS Recovery — for reinstalling the OS itself
  • System Integrity Protection (SIP) — protects system files from being modified at all

Each plays a different role in the recovery story. Used together, they cover everything System Restore does and more.

APFS snapshots: the closest equivalent

Apple File System (APFS) supports snapshots natively. A snapshot is a point-in-time view of the entire file system that takes essentially no space initially and grows only as files change.

macOS uses snapshots in three contexts:

  1. Local Time Machine snapshots — automatic, hourly, kept for 24 hours
  2. macOS Update snapshots — created before major updates so you can roll back
  3. Manual snapshots — you can create them with tmutil snapshot

The macOS Update snapshot is the closest analog to Windows System Restore. When macOS installs a major update, it creates a snapshot of the system state. If the update goes badly, you can roll back to the snapshot via Recovery.

To list current snapshots:

tmutil listlocalsnapshots /

You’ll see something like:

com.apple.TimeMachine.2026-04-28-093000.local
com.apple.TimeMachine.2026-04-27-203000.local

Each is a recoverable point in time.

Creating a manual snapshot before risky changes

Want a “System Restore-style” snapshot before installing something that might break things? tmutil lets you create one:

tmutil snapshot

This creates an APFS snapshot of your current state. It takes a fraction of a second and uses no space until files start changing.

To verify:

tmutil listlocalsnapshots /

Your new snapshot appears in the list. You can leave it for 24 hours (Time Machine will eventually clean it up) or use it as a recovery point.

Caveat: these are “local snapshots” — they live on your boot drive. If the boot drive itself dies, the snapshots die with it. They’re not a backup. They’re a quick rollback point for short-term safety.

Reclaim local snapshot spaceSweep finds APFS local snapshots Time Machine left behind. Get Sweep free →

Restoring from a snapshot

If something went wrong and you want to roll back to a snapshot, the process depends on what broke.

For user files: open Time Machine from the menu bar (with no destination connected) and browse the local snapshots. Pick a snapshot, find the file or folder, click Restore.

For broader rollbacks (system state, app installations), the snapshot can be the source of a full restore via Recovery:

  1. Restart and hold the power button (Apple Silicon) or Cmd+R (Intel)
  2. From Recovery, choose Restore From Time Machine Backup
  3. Pick the local snapshot from the list

This rolls back the entire boot volume to the snapshot’s state. It’s destructive — anything that’s changed since the snapshot is gone.

Don’t use this casually. It’s the nuclear option, useful when an update or install broke the OS so badly you can’t boot normally.

What macOS Updates do automatically

When you install a macOS update — minor or major — macOS creates a snapshot first. This is what enables the “Roll back to previous version” option you see if a major update fails.

These snapshots have names like com.apple.os.update.[uuid]. They’re separate from regular Time Machine snapshots and last longer (until the update is confirmed stable, typically a few weeks).

You don’t have to do anything to enable this. It’s automatic. If a system update breaks something, you can usually boot to Recovery and roll back without losing data.

The exception: clean installs. If you erase the boot drive and install macOS fresh, there’s no previous state to snapshot.

Time Machine vs. snapshots: when to use which

Both use APFS snapshots, but their roles differ:

APFS local snapshots (no Time Machine drive needed):

  • Use when: you want a quick rollback point for the next 24 hours
  • Created by: tmutil snapshot, automatic hourly Time Machine triggers, macOS Updates
  • Stored on: your boot drive
  • Lifetime: 24 hours typically, longer for OS update snapshots
  • Risk: lost if boot drive fails

Time Machine backups (external drive required):

  • Use when: you want long-term version history
  • Created by: Time Machine on its hourly schedule
  • Stored on: the backup drive you’ve designated
  • Lifetime: as long as the drive has space, with thinning of older backups
  • Risk: lost only if the backup drive itself fails

A complete strategy uses both. Local snapshots for “I broke something 5 minutes ago” recovery. Time Machine for “I need a file from 3 months ago” recovery.

Tip: Local snapshots take up disk space as the underlying files change. If your boot drive fills up, macOS auto-thins them. You can also force this manually with `tmutil thinlocalsnapshots / 50000000000 4`.

What macOS Recovery handles

macOS Recovery is a small partition that boots independently of the main OS. It’s where you go when the main macOS won’t boot.

To enter Recovery:

  • Apple Silicon: hold the power button at boot, then click Options → Continue
  • Intel: restart while holding Cmd+R

From Recovery, you can:

  • Run Disk Utility (check or repair the disk)
  • Reinstall macOS
  • Restore from Time Machine backup
  • Get help online (opens a Safari instance)
  • Set startup disk
  • Erase the Mac (Apple Silicon only)

Recovery is your “last resort” tool. If the OS itself is broken and snapshots can’t fix it, Recovery is how you reinstall or restore. It’s not for routine use.

A separate flavor — Internet Recovery (Intel) or fallback recoveryOS (Apple Silicon) — works even if the local Recovery partition is damaged. It downloads recovery tools from Apple’s servers. Slower (limited by your internet) but always available.

What about checkpoints for individual apps?

Some apps have their own version history independent of macOS:

  • Pages, Numbers, KeynoteFile → Revert To → Browse All Versions
  • TextEdit — same File → Revert To
  • Pixelmator Pro, Affinity — built-in version history
  • Microsoft Office — autosave history if using OneDrive
  • Notes, Mail — Recently Deleted folders for 30 days

These are document-level, not system-level. They handle “I broke this file” but not “I broke macOS.”

For dev work, version control (Git) is your equivalent of system restore points for code. Commit before risky changes, branch for experiments, revert when needed.

Why macOS doesn’t really need System Restore

The Windows System Restore concept was designed for an OS where the Registry could get corrupted, drivers could conflict, and system files could be modified by software. macOS handles those problems differently:

  • System files are signed and read-only thanks to System Integrity Protection (SIP). Apps can’t modify system files even with admin permissions.
  • The system volume is sealed on macOS Big Sur and later. The boot system is essentially immutable; user changes happen on a separate volume.
  • Drivers are heavily restricted. Kernel extensions require special permission and are gradually being phased out for User Space drivers (DriverKit).

Most things that broke Windows installations don’t apply to macOS. The cases where macOS does break tend to be:

  • Failed firmware updates
  • Hardware failures (SSD dying)
  • Severe disk corruption
  • User error in Terminal with sudo

For all of those, snapshots and Time Machine are your tools. There’s no class of problem where you’d use System Restore on Windows and not have a macOS equivalent here.

Skip the manual huntSweep clears the system caches, logs, and old installers a backup can’t reach. Download Sweep free →

A practical recovery setup

For someone wanting “Windows System Restore-equivalent” coverage on Mac:

  1. Time Machine running to an external drive, hourly snapshots active
  2. Local APFS snapshots enabled (default — Time Machine creates them automatically)
  3. A second backup destination — second Time Machine drive or cloud backup
  4. Manual snapshots before risky changestmutil snapshot before installing beta software, system updates, or anything you’re not sure about
  5. A Recovery USB or familiarity with Internet Recovery — for boot-time issues

That stack handles every recovery scenario:

  • “I deleted a file 5 minutes ago” → local snapshot
  • “I deleted a file last month” → Time Machine
  • “I broke my system with bad software” → boot to Recovery, restore from snapshot
  • “My boot drive died” → boot from Recovery, restore from Time Machine to a new drive
  • “My backup drive died” → second backup destination

Set this up once, test it once, and you’re better protected than 95% of Mac users.

What snapshots and backups don’t manage

Snapshots and Time Machine archive whatever’s on your Mac. They don’t clean it up. A 500 GB Mac that’s actually 200 GB of work plus 300 GB of cache, leftover installers, and old simulator data — all 500 GB ends up in snapshots and backups.

Sweep handles the cleanup that snapshots don’t:

  • System and user caches that regenerate constantly
  • Old .dmg and .pkg installers in Downloads
  • App leftovers from drag-to-Trash uninstalls
  • Localizations for languages you don’t speak
  • Old iOS device backups
  • APFS snapshots past their 24-hour usefulness

It doesn’t replace Time Machine or snapshots. They’re the safety net. Sweep keeps the boot drive lean so the safety net isn’t tracking 60 GB of files you wouldn’t ever want restored.

When to use each tool

A quick reference for which tool to reach for:

ProblemTool
Need a file from 5 minutes agoLocal APFS snapshot via Time Machine browse
Need a file from yesterdayTime Machine backup
Need a file from 3 months agoTime Machine backup
Broke macOS with a system updateRecovery → restore from snapshot
Mac won’t boot at allRecovery → reinstall macOS, restore from Time Machine
Boot drive failed completelyReplace drive, boot from Recovery, restore from Time Machine
Deleted file from iCloud DriveiCloud Drive’s Recently Deleted (30 days)
Want a checkpoint before installing weird softwaretmutil snapshot

The tools overlap, which is fine. Redundancy is the point.

You’re better off than you thought

Coming from Windows, the lack of “System Restore” feels concerning. In practice, macOS’s combination of APFS snapshots, Time Machine, and Recovery covers every Windows System Restore scenario more reliably.

The catch is that you have to actually set Time Machine up. macOS makes this easy — plug in a drive, click “Use as Backup Disk,” done — but the percentage of Mac users running Time Machine is still surprisingly low.

If you’ve been on Mac for a year without Time Machine, today is the day. Buy a 2 TB external SSD ($170-200), connect it, enable Time Machine, and forget about it. The recovery features you came looking for are all there waiting — once you’ve given them a destination.

← Back to all guides