diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1b58770d..c7bf261a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,10 @@ CHANGELOG
 To-be-released
 --------------
 
+Breaking changes:
+
+* On-disk backups are now retained for a minimum of 3 days instead of 14. Beyond that the user is responsible for making off-site copies.
+
 Control panel:
 
 * The control panel has a new page for installing SSL certificates.
diff --git a/management/backup.py b/management/backup.py
index 47259c3b..2d0ae3fd 100755
--- a/management/backup.py
+++ b/management/backup.py
@@ -16,7 +16,7 @@ from utils import exclusive_process, load_environment, shell
 
 # destroy backups when the most recent increment in the chain
 # that depends on it is this many days old.
-keep_backups_for_days = 14
+keep_backups_for_days = 3
 
 def backup_status(env):
 	# What is the current status of backups?