Hard drives don't die dramatically. No smoke, no last words. Most of the time they don't even die: they just let a few bits slip, somewhere in the middle of a shoot from 2008, and keep smiling at you from the desk. The file still opens. The thumbnail still looks fine. Then one day the photograph has a black band across the bottom, and nobody can say when it happened.

That's the problem with backups. Three copies of everything feels like safety. It isn't, unless you know the three copies are identical, and that the one you'd restore from is the healthy one. A corrupted file, faithfully backed up, is just corruption with redundancy.

So this autumn we did the unglamorous thing.

Every file, fingerprinted

We now hold a SHA-256 fingerprint for every file in our archive: every raw, every edited image, every clip, going back to 1995. A fingerprint is a 64-character string computed from a file's exact content. Change a single bit anywhere and the string changes completely. No fingerprint, no alibi.

The numbers: more than 1.6 million files in our master archive, sealed folder by folder, year by year. Then every backup drive, read from the first byte to the last and matched against the masters. Some drives took ten hours. For a few days our studio sounded like a server farm and looked like a hostage situation, with twelve to fifteen drives spinning at once and cables everywhere.

Off-the-shelf apps did half of what we needed, or had stopped being maintained, which in software is also a form of death. So we built our own: Hash Vigil, a small Mac app that does one thing obsessively. It remembers what every file should be, and tells us when reality disagrees. It runs locally, on our own machines.

What we found

Good news first: the overwhelming majority of the archive is intact, on more than one drive, byte for byte. Hundreds of thousands of files, silent and healthy.

Then the interesting part. A couple of raws from 2007 and 2008 that open perfectly well but are missing their last rows of image data, a strip of black where a photograph should end. A folder of rescued images that existed on a single backup drive and nowhere else. A dock that dropped a drive halfway through a ten-hour read and announced, with total confidence, that everything was fine. It has been retired. We don't hold funerals for hardware.

None of this would have shown up by opening files and looking at them. That's the whole point. Damage is quiet, and the only way to hear it is to check.

Why this matters to you

If we photographed your wedding, your company, your children or your products, those files live with us. Clients come back years later: a lost album, a reprint for an anniversary, a portrait for a funeral. That last one happens more often than you'd think, and it's the one request we never want to answer with "sorry." When that day comes, we want to hand over the file exactly as it left the camera, not a version that has been quietly decaying in the dark.

From now on, every new shoot is fingerprinted when it enters the archive, and every backup is checked against those fingerprints on a schedule, not on faith.

It's not glamorous. Nobody will ever compliment a checksum. But memories are only permanent if someone keeps checking that they're still there.

We do.