Websites break. A bad update, a stolen password or a deleted folder can wipe out years of work in minutes. A backup is your safety net.
In WordPress, a backup is a complete copy of your site's files and database, stored somewhere safe so you can restore everything when something goes wrong.
What to include in a WordPress backup
A full backup has two parts, and you need both:
- Files: mainly the wp-content folder with your themes, plugins and uploads, plus wp-config.php and .htaccess.
- Database: your posts, pages, comments, users and settings.
Keep in mind that Tools → Export is not a full backup. It only saves your content in an XML file, without your theme, plugins, settings or the actual media files.
Ways to back up WordPress
Here are the three common methods:
- Hosting backups: plenty of hosts take automatic daily backups. Check how long they keep each copy.
- Backup plugins: they save copies on a schedule and can send them to cloud storage.
- Manual backups: download your files by FTP and export the database from phpMyAdmin.
Our list of the best backup plugins for WordPress will help you choose a plugin. You can also learn how to back up the database in WordPress on its own.
How often should you back up?
It depends on how often your site changes. A busy blog or online store needs daily backups, while a small site that rarely changes can manage with weekly ones. Also, take a fresh backup before you update WordPress or switch themes.
Think of it like insurance. You may never need it, but you will be glad you had it on a bad day.
A backup stored only on the same server is not safe. If the server fails or gets hacked, you lose the site and the backup together, so keep at least one copy somewhere else.
Finally, a backup you have never tested is only a guess. Try restoring it on a staging site now and then.
To sum up, a good backup covers both files and the database and lives away from your server. If you have any questions, ask us in the comment box below.