AI Memory & Personal Archive
Digital Memory Preservation: A Realistic Plan
Files rot, formats break, drives die, and clouds close. A practical plan for keeping personal digital memory alive across decades.
The oldest digital photo I can still open is from August 2003. It is a JPEG from a Sony Cyber-shot, 1600 by 1200, of a friend’s apartment in Krakow. Twenty-three years later, on a 2026 MacBook, it opens in under a second. Nothing about it is impressive except that it works. The reason it works is the format.
Most photos I took in 2003 are gone. Not because the format failed. Because the drives died, and the CDs grew bronze rot, and one external USB enclosure simply stopped being recognized by any computer ever again. The photos that survived were the ones I bothered to copy forward.
That is what digital memory preservation actually is. Not a vault. A relay race.
Formats that age well
A short list, and a boring one. JPEG. PNG. Plain text in UTF-8. PDF/A for documents you want a court to accept in 2050. WAV and FLAC for audio. The H.264 codec inside an MP4 container is on its way to being safely old; H.265 (HEVC) is not yet.
The pattern is open standards with billions of decoder installations in the wild. If the format has shipped in every web browser for fifteen years, it will ship in browsers fifteen years from now. Anything decoded by a single vendor’s software is one acquisition away from going dark.
For photos specifically: keep a JPEG copy of anything that matters, even if you also keep a RAW or HEIC original. JPEG is the cockroach of image formats. That is a compliment.
Formats that age badly
The bad list is longer and more depressing. Proprietary RAW formats from defunct camera companies. The original Photoshop PSD from 1998 that newer Photoshops open with warnings. iPhoto’s database, which Apple stopped maintaining around 2015 and which had to be migrated, badly, into Photos. Lightroom catalogs separated from their referenced files. Any video shot in a phone manufacturer’s “memories” feature that wraps clips in an app-specific container.
Anything tied to a single app belongs in this list. The app does not have to die for the format to fail you. It just has to lose the team that maintained the importer.
Apple’s Live Photos are a small modern example. Each one is a JPEG and a short MOV bundled by metadata. Copy them to a non-Apple system and they often split into two unrelated files. The photo survives. The “live” part does not.
Media that ages well
There are three honest options for keeping files alive at home.
Spinning hard drives, refreshed roughly every five years and powered on at least annually. The bearings dislike sitting still. Pull the drive out of the drawer, plug it in, copy a folder off and back, verify, put it away. That single ritual is the difference between a working backup and a coaster.
Solid-state drives, with the same yearly read pass. SSDs lose charge in their flash cells over time when unpowered; manufacturers quote a year of safe shelf life at room temperature, and we treat that as a ceiling, not a floor. SSDs are not archival media. They are convenient cache.
M-DISC for the genuinely cold copy. M-DISC is a write-once optical disc that uses an inorganic layer instead of the organic dye that killed regular CD-Rs. Verbatim still ships them in 2026. They are slow, capped at 100 GB on Blu-ray sized media, and require a compatible burner. For the 50 GB of family photos you would actually weep over, they are the closest thing consumer hardware has to permanent.
Nothing here mentions cloud. We will get there.
The human layer
A perfect backup that no living person can unlock is not a backup. It is a sealed tomb.
Someone needs to know where the drives are. Someone needs the password to the encrypted volume. Someone needs to know which email address is the recovery email on the iCloud account and which phone receives the SMS code.
This is estate planning, and most people do none of it. Apple has Legacy Contact, which lets a person you nominate request access to your iCloud after you die, with a court order or death certificate. Google has Inactive Account Manager, which auto-shares specified data after a chosen period of inactivity. Both are good. Neither replaces a paper letter, kept with your will, written in plain language: where the photos are, how to get in, who else can help.
Write the letter. Put the password manager’s master password on it. Tell your executor it exists. If that sentence made you wince, you understand the problem.
The cloud’s role
The cloud is a backup. Not a primary.
iCloud, Google Photos, OneDrive, Backblaze B2 — all useful, none sufficient. Use them as the off-site copy in the 3-2-1 rule, encrypted where the service supports it. Treat any vendor’s claim of “forever” as marketing. Companies fail. The Narrative cloud failed in 2016 and took with it every photo whose owner had not bothered to plug their Clip into a laptop and run the export. We have a longer write-up of that in The Narrative Clip Cloud Shutdown. The pattern repeats.
Pay for the cloud. Trust it less than the salesperson wants you to.
Local backup checklist
A photo archive that lives only on a vendor's cloud is a photo archive waiting to disappear. Use the 3-2-1 rule: three copies, two media, one off-site.
- Copy 1: the original on your camera or phone (keep until backups are verified).
- Copy 2: an external SSD or hard drive plugged directly into your computer.
- Copy 3: an off-site copy — encrypted cloud, a NAS at a family member's house, or a drive in a desk drawer at work.
- Filenames keep the camera-generated timestamp (e.g.
2026-05-11_073412.jpg) so dates survive re-uploads. - One year from today, open a random folder and verify the files still open.
- Write the password for the encrypted copy on paper and store it where the executor of your estate can find it. People skip this. People also lose decades of photos.
For a longer walkthrough see how to back up lifelogging photos and local-first photo storage.
A pragmatic plan
Once a year, on a date you remember (a birthday works), do this.
Plug in every drive in your backup rotation. Verify it mounts. Open a random folder and view a handful of files. Replace any drive that is older than five years or throwing SMART warnings. Export a fresh copy from whichever cloud holds your phone photos, and confirm the export opens. Update the paper letter if anything moved.
That is it. An hour, maybe two. The annual ritual is the entire system. Without it, every other choice on this page is a thought experiment.
The photos you have in 2056 will be the ones you carried forward in 2026, 2036, and 2046. Nothing preserves itself. Memory is maintenance.
Frequently asked questions
How long do digital photos last?
The file format can last decades, but the storage medium will not. A JPEG written in 2003 still opens in 2026. The CD-R it was burned to probably does not. Plan for the photos to outlive every drive they have ever lived on; the work is moving them forward, not preserving any single disk.
What's the best long-term photo format?
JPEG and PNG. Both are open, both are decoded by every operating system, and both have decoded reliably for over twenty years. HEIC and AVIF are more efficient, but their long-term support is not yet proven. If you shoot HEIC on an iPhone, keep a JPEG export of the photos that matter.
Should I print my photos?
A few of them, yes. Archival pigment prints stored in a dark, cool, dry place outlast every consumer storage medium we have. They are also the only copy that survives a forgotten password. You do not need to print your whole library. Print the fifty pictures you would actually grieve.
What happens to my photos when I die?
It depends entirely on whether someone else can get into your accounts and decrypt your drives. Apple has Legacy Contact. Google has Inactive Account Manager. Both are useful, both are limited. The reliable answer is a written letter, kept with your will, listing where the photos live and how to unlock them.
How often should I verify backups?
Once a year, minimum. Open a random folder, try to view ten files, run a checksum if you are the kind of person who runs checksums. Replace any drive that throws a SMART warning. The annual verification is the entire discipline; everything else is just hardware.