Are you backing up your WordPress website regularly to a secure location?

If not — stop what you’re doing, put everything else on hold, and read on to discover why, how, and where to backup your WordPress site.

Website backups are the #1 item that I recommend to all WordPress website owners. Let’s start with why…

Why Backup Your WordPress site?

There are many reasons why you may need a backup of your website. A new plugin or theme update may “break” your site. A malicious attack may corrupt files. Your web host may suffer a server problem and lose data.

If your content is lost or corrupted, a backup is the single best way to quickly restore your site to normal functionality. Many web owners overlook backups until something goes wrong. In that case, it’s too late — and a costly mistake.

Without backups available, restoring a website is oftentimes a lengthy and expensive process.


I recently worked with a nonprofit who started their otherwise-normal week with a nightmare scenario: an abrasive, jarring message suddenly was appearing across the top of every page.

Turns out the site had been hacked at random, and the hackers had inserted a malicious piece of code throughout the entire database. Anytime a visitor went to the site, they were greeted with the hacked message — front and center.

Not exactly a professional image to inspire trust in the nonprofit’s mission.


Another time, a client updated their page builder plugin only to discover that the update was incompatible with their theme. The result? Their whole site was now displaying illegible page code.

In both of these cases, rapid fixes were possible thanks to backups. When the web owners notified me, I quickly restored their affected websites from backups that were less than 24 hours old — meaning they didn’t lose any content, and suffered only minimal downtime.

But these were lucky instances. If the web owners hadn’t opted to backup their sites, who knows how expensive and time-consuming the fixes would have been…if fixes were possible at all.

Tip: Always backup your site, and double check your backups before updates of any kind.

How Often to Backup

The frequency of backups depends on your specific website. For websites that update infrequently (such as a restaurant website with only seasonal menu changes) a weekly or monthly backup may be sufficient.

For websites with daily updates (including those with active message boards or frequent posts) daily or even multiple daily backups may be more appropriate.

No matter how frequently you backup your site, always aim to have at least three backups of your site saved. This allows for redundancies in case one of the backups is corrupted.

Tip: Backup your site at least monthly (preferably more often), and save at least three backups at all times.

What Content to Backup

A WordPress backup includes two parts: the files and the database.

Think of your website as a library. The files are like the books, containing the actual content of the site. The database is the library itself, storing the files.

You need to backup both the files and the database. Without both, you cannot restore your website, so it’s worth double- and triple-checking that files and databases are backed up.

All of my monthly WordPress security plans include review and troubleshooting of backups, to ensure that both databases and files are backed up. Learn more here.

Tip: Backup both your database and your files.

Where to Store Backups

Many people overlook an all-important question — where exactly will you store your backups?

Web Hosts

Some web hosts include backup options. If this service is available, the web host will likely manage the backup storage; talk to your specific hosting provider for details.

Local Storage

Another option is to save backups on your computer or external hard drive. If you opt for this route, remember that these backups are only as secure as the hardware itself. If your computer crashes or your hard drive is stolen, these backups could be lost or compromised.

For that reason, it’s good to save backups to multiple locations — such as in the cloud.

Cloud Storage

One of the most popular options is to save backups to the cloud through services such as Dropbox or Amazon S3. Again, these backups are only as secure as the platform itself. It’s worth checking that your stored items are safe from public access and have extra copies just in case.

Tip: Wherever you save your files, make sure they are secure and accessible in case you need to restore your website from a backup.

How to Backup WordPress

There are several options to create WordPress backups.

Web Hosts

If your web host offers a backup option, you may be able to set automatic backups of your website. Many web hosts (such as Bluehost) can setup recurring automatic backups, so you don’t have to worry about whether your website is securely backed up.

Manual Backups

You can also manually backup your files by creating copies of all files and exporting your database. Be warned, however — this can be a time-consuming process and it does require a relatively high level of technical detail. Are you comfortable using FTP, cPanel, and phpMyAdmin?

If so, manual backups may be a great option for you.

If not, continue on for plugin solutions.


Plugins are another option to backup your website. Plugins range from free to paid choices, with different tiers of services and customization available.  UpdraftPlus and BackupBuddy are two of the most popular backup plugins, with options to backup your database and files to external storage options.

There it is — WordPress backups in 10 minutes.

I hope this clarified the why, how and where of backing up your WordPress site. Regardless of the method you choose and where you save the backups, remember these key takeaways:

  1. Always, always, always backup your site
  2. Double check backups before updates of any kind
  3. Backup at least monthly, and preferably more often
  4. Save at least three backups at all times
  5. Backup both your database and your files
  6. Make sure backups are secure and accessible

Questions or concerns? Schedule a free call with me to discuss bulking up your WordPress security.