How to make a WordPress backup (and why you should)

Reading Time: 15 minutes

Ever found yourself wondering how much trouble it would be if you lost all the content on your WordPress website? 

The idea alone is enough to cause a mild panic. Thankfully, creating regular backups doesn’t have to be an overwhelming or technical nightmare. 

Whether it’s your sprawling blog post collection, your bustling ecommerce store, or a portfolio brimming with your best work, securing your site by taking regular WordPress backups is a key step toward building digital resilience. 

In this guide, we’ll explore a handful of straightforward methods and tools that make backing up WordPress easy. 

Let’s begin.

Why you need a WordPress backup

Let’s say you installed WordPress and completed the setup process. Then, you built a fantastic WordPress site, packed with content and totally customized. It suits your brand, has a proper security setup, and it’s resonating with your visitors. That’s all there is to it, right?

Not quite. 

Even the most robust websites with top security can be breached. And moments like that are when a WordPress backup solution offers the peace of mind you need.

Think about it: data loss can be devastating. Whether due to hackers or just simple human error, losing site information could stall your business. You need a WordPress backup to:

Help with recovery in case of a hack

Hackers are only getting smarter and their methods more sophisticated. WordPress sites are a consistent potential target. Then there’s hardware failure — a server could crash due to a myriad of technical reasons beyond your control.

Correct human errors

Let’s not forget about the human element. Mistakes happen. Maybe it’s a faulty update or a coding mixup. These things can bring down your site in a matter of seconds. And in those moments, having a recent backup can be a blessing.

Assist with updates and migrations

But WordPress backups do more than just protect against disasters. They’re also invaluable during updates or migrations. 

Planning to move your site to a new hosting provider? A backup ensures you can set up shop somewhere else without losing a single byte of data. 

Upgrading WordPress or adding new features? A backup gives you a fallback plan if the new changes don’t play nicely with your theme, other plugins, or WordPress core.

Your role as a site owner is to ensure that if something goes wrong, you have the means to bring everything back to normal with minimal fuss. Just as you wouldn’t drive without insurance, you shouldn’t manage a website without regular backups. 

They’re a safety net and a critical part of your website management strategy.

What does a WordPress backup include?

Backing up your WordPress site involves more than just saving a copy of your blog posts and images. Rather, it’s about preserving the entire ecosystem that makes your website function smoothly. 

Though you can opt for different types of backups (which we’ll discuss in a moment), WordPress backups typically contain several essential components:

• The database: The database is the hub of your WordPress site. It stores all your dynamic content — posts, pages, comments, and user data — along with the settings that dictate how your site works. Because every site change affects the database, frequent backups are necessary to capture these ongoing changes.
• Core files: These are the fundamental files that run your WordPress installation, including all the default scripts and primary features that WordPress provides. These files are essential for WordPress to operate and are updated whenever you update WordPress itself.
• Themes and plugins: These files determine the look and functionality of your site. Backing them up ensures you don’t lose your site’s custom appearance or any extra features you’ve added via plugins. 
• Media files: This includes all the images, videos, and documents you’ve uploaded to your site. Stored typically in the wp-content folder, these files are vital for ensuring your site looks as you intended. Broken images can reduce the usefulness of your content and make it look out-of-date and unkempt.
• Configuration files: Key configuration files like wp-config.php, which contains your database connection settings, and .htaccess, which helps manage permalinks and redirects, are necessary for site operation. These files are often overlooked but are vital for maintaining the structural and operational integrity of your site.

Not all backups are the same, though. The scope and comprehensiveness of your backup can vary significantly based on the tool or method you use. Some tools might only back up your database by default, requiring additional settings to include media files and plugins. 

Others might offer full-site backups, capturing everything from your core files to your smallest changes in a plugin’s settings. So, knowing the differences available to you and which are best in given situations is a must. 

Types of WordPress backups

Understanding the different types of backups available for WordPress can help you choose the best strategy to protect your site. 

Here’s an overview of the primary backup types and how they cater to different needs. You might need all of these backup types at some point and some of these types are not mutually exclusive. For example, you can have incremental backups that are scheduled or real-time backups that are stored off-site. 

1. Manual backups

Manual backups give you full control over the backup process. This method involves downloading your website’s files using FTP tools like FileZilla, as pictured below, and exporting your database through phpMyAdmin. 

While this approach allows you to choose exactly what gets backed up and when, it requires a good understanding of your website’s architecture to ensure no necessities are overlooked.

Sometimes, “manual” backups describe a type of backup you’d perform with a plugin as well. This involves using the plugin to create a backup outside of automated or scheduled backups. 

Pros

• You have complete control over what is backed up and when
• There’s no reliance on third-party services

Cons

• They can be time-consuming
• They’re prone to human error
• They require technical knowledge

Ideal for

This option is best for those who are already fluent in technology and require specific backup configurations not offered by automated solutions. 

2. Scheduled backups

Scheduled backups are sometimes referred to as automatic backups and can be set to run at regular intervals using plugins like UpdraftPlus or Solid Backups. 

These tools can back up your data monthly, weekly, daily, or even hourly, and have the files sent in a .zip to your email address or saved to your local hard drive.

For instance, Kinsta hosting offers hourly backups that help site owners preserve their data more frequently than what’s typically provided. You can see how people can enable this feature in Kinsta’s documentation, as shown below: 

This “set-it-and-forget-it” approach makes it easier to maintain regular backups without ongoing manual intervention.

Pros

• They automate the backup process
• They reduce the need for constant monitoring
• Backups are regularly updated based on the set schedule

Cons

• There is potential for overwriting useful data if not configured correctly
• They rely on third-party services that might have downtime or data limits

Ideal for

Anyone who has a website that’s updated regularly and needs frequent, reliable backups without manual oversight.

3. Offsite backups

Offsite backups involve storing your backup data in a different location from your primary hosting environment. This method is recommended for most and offers protection against data loss due to local server or data center failures. 

Most backup plugins support automatic transfer to offsite cloud services like Google Drive, Dropbox, or Amazon S3, the latter of which is pictured here:

This adds an additional layer of security by diversifying storage locations. But it does open you up to potential security issues should the cloud storage be breached. 

Pros

• They protect against local data loss
• Data is accessible from any location

Cons

• There are potential privacy and security concerns depending on the cloud provider

Ideal for

Anyone who would like to protect their data with multiple backups (and who doesn’t want to rely on local copies alone).

4. Real-time backups

Real-time backups aren’t necessary for every website, but they’re absolutely essential for those who cannot afford to lose a single change or update. Ecommerce sites or membership platforms, in particular, can’t afford to miss orders or lose member data.

Jetpack VaultPress Backup, whose feature page is shown in the image below, is one popular real-time backup plugin that also stores copies off site. And it includes additional security features, along with the ability to restore a site from anywhere with internet access — even if it’s completely down. 

Pros

• They ensure that every change is backed up immediately
• They minimize data loss between backups

Cons

• They can be resource-intensive
• They can potentially affect website performance
• They’re typically more expensive than other backup solutions

Ideal for

High-traffic websites or those handling sensitive transactions where every piece of data is critical.

5. Incremental backups

Incremental backups save only the changes made since the last backup. So instead of creating a complete copy of your entire site each time, you only back up what’s different. This approach reduces the load on your server and minimizes storage requirements. This makes it an efficient option for large websites.

Pros

• They focus on efficient use of resources
• They lead to faster backups
• There are reduced storage needs

Cons

• There is dependency on the initial full backup being robust and uncorrupted
• Restoring from incremental backups can be less intuitive

Ideal for

Large sites with lots of data where full backups are too time-consuming and resource-heavy.

Each of these backup types offers different advantages, and the best choice depends on your site and what you need. How frequently do you change your site’s content? What server resources are you working with? How hands-on would you like to be with the backup process? 

And while we’ve discussed the primary types of backups you need to be aware of, this isn’t an exhaustive list. For example, there are differential backups (which are less efficient than incremental backups but slightly more stable), media or theme-only backups, and many more. 

The majority of users, however, will want to select from a combination of the backup types we just described. 

How to back up a site manually

Manual backups of a WordPress site involve a detailed, hands-on approach, giving you full control over every aspect of the process. Here’s how to ensure you comprehensively capture both your site’s files and database:

Step 1: Back up your files via FTP

If you opt to create a manual backup, you’ll need to use FTP to access your site’s files. This requires careful attention to ensure no file is left behind. 

Set up your FTP client 

Download and install an FTP client like FileZilla. Enter your hosting details, including your hostname, username, password, and port (if not the default) to connect to your server. You can also use your hosting provider’s File Manager for this task, as shown below: 

Locate WordPress files

Typically, your WordPress files are stored in the public_html directory. However, if you installed WordPress in a subdirectory, navigate there instead.

Download files

Go to the root directory of your WordPress site. 

Select all files and folders (make sure to include hidden files like .htaccess).

Right-click and select Download to transfer files to your local computer. Or click the Download button at the top of the File Manager, as shown here: 

Organize these into a folder labeled with the backup file date for easy retrieval.

Step 2: Export your database via phpMyAdmin

It’s not enough to just back up the files associated with your website. You have to back up the database, too. This is where your site’s dynamic content, including posts, comments, and user data, is stored. You can use a plugin to do this, but if you want to complete the process manually, follow these steps:

Access phpMyAdmin and select your database

Log into your hosting control panel and go to phpMyAdmin. Your WordPress site’s database will be listed on the left. Click on it to view its tables, as shown in the image below: 

Export the database

Go to the Export tab. Select Custom, which opens more options. Choose all tables to include in the backup and set the format to SQL, as you can see in this image: 

In the output section, select Save output to a file. Choose the compression level based on your preference or leave it uncompressed for easier immediate access. Here, we’ve selected zipped:

Once you’re done making changes, click the Export button at the bottom of the page. 

The export process will create a .sql file, downloaded to your local machine. Store this file securely with your site files.

Step 3: Organize and store your backup files

Keep your database and site files together, preferably in a directory named with the backup date and the domain name for clarity. And you’ll likely want to store your backup on multiple devices or cloud services to ensure redundancy. 

External hard drives, USB drives, and cloud storage solutions like Google Drive or Dropbox are recommended for this. 

The top seven WordPress backup plugin options

Most people opt for using plugins to manage their WordPress backups. So, choosing the right one matters a lot. Here’s a quick look at what we’re covering: 

Plugin	Free option	Premium starting price	Key features
UpdraftPlus	Yes	$70/year	Comprehensive backups, multisite support
Jetpack VaultPress Backup	No	$4.95/month	Real-time backups, quick restoration
Solid Backups	No	$99/year	Flexible schedules, includes cloud storage
Duplicator	Yes	$99/year	Backup, migration, zero downtime
BlogVault	No	$199/year	Incremental backups, multisite, staging
WPvivid	Yes	$49/year	Backup, migration, staging
BackWPup	Yes	$69/year	Multi-destination backups, WP-CLI integration

And here’s a detailed rundown of each of these top-rated WordPress backup plugins: 

1. UpdraftPlus

The UpdraftPlus WordPress backup plugin simplifies the process of backing up and restoring your WordPress site with a user-friendly interface. It’s described as “The World’s Most Trusted WordPress Backup and Migration Plugin” on its website, as shown below: 

It supports direct backups to several cloud storage services like Dropbox, Google Drive, and Amazon S3. The plugin’s free version has enough features for many people, offering scheduled backups, database encryption, and more.

Pros

• There’s a lot of flexibility with backup scheduling
• There are extensive cloud storage options
• A free version is available

Cons

• Advanced reporting and database search are locked behind a paywall
• Large site backups can be slow

Pricing

Free for basic use. Premium plans start at $70 per year, providing additional features like advanced reporting, multisite support, and priority support.

2. Jetpack VaultPress Backup

Originally launched as VaultPress and now integrated with Jetpack, this plugin offers real-time backup solutions. It’s available on its own, or in conjunction with the Jetpack suite, as illustrated on its website:

It ensures that every change is immediately saved. It also features easy restoration and migration tools, so it’s a comprehensive choice for casual bloggers and business owners alike.

Pros

• Automated real-time backups ensure there’s no content loss
• Jetpack VaultPress Backup Integrates with other Jetpack features like security and performance tools

Cons

• It has a higher cost, especially for multiple sites

Pricing

Plans start at $4.95 per month, billed yearly with basic real-time backups. Comprehensive plans, which include additional security and performance features, are more expensive.

3. Solid Backups

Solid Backups offers a complete WordPress backup solution that includes scheduled backups, off-site storage options, and site migration tools. And you can quickly see the cost differentiation per website by using a slider on the homepage: 

It can handle large sites and includes comprehensive scheduling options. You can also use it to rollback database changes, and it has a convenient one-click restore option.

Pros

• It includes site migration and duplication tools
• It has powerful scheduling options

Cons

• There’s no free version available
• It can be more complex to set up compared to other plugins

Pricing

Starting at $99 per year, with tiered pricing based on how many sites you own.

4. Duplicator

Duplicator is another solid option and useful for migrating and cloning sites and backing them up. The plugin’s homepage shows the tool’s primary features right up front: 

Developers, who frequently need to move sites between different servers or domains, can really benefit here. It also includes features like one-click restore, and has a migration wizard.

Pros

• It offers powerful migration and cloning capabilities
• The free version handles basic backups really well
• The premium version supports scheduled backups and cloud storage

Cons

• The interface can be daunting for beginners

Pricing

Free for basic use, with Pro versions starting at $99 per year, offering scheduled backups, email notifications, and cloud storage integrations.

5. BlogVault

BlogVault differentiates itself by being a Backup-as-a-Service provider rather than just a plugin. This means it operates on its own servers, reducing the load on your WordPress hosting. You can see the plugin website describes itself as backups for “business critical websites” below:

It offers incremental backups, easy migrations, and the ability to handle large sites. It also supports cloud storage and has a one-click restore option. 

Pros

• It offloads backup processing to its own servers, reducing load on your site
• It’s effective for large websites
• It includes staging and easy migration

Cons

• It has a higher cost
• The interface is complex 
• Some prefer on-site backup solutions for better control

Pricing

Starts at $199 per year for one site, with higher-tier plans covering additional sites and more frequent backups.

6. WPvivid

WPvivid is another versatile backup plugin that provides both backups and site migrations. It supports automatic and manual backups, and you can store them locally or on multiple cloud storage options. These features are concisely illustrated on the plugin’s website, as pictured: 

The plugin also provides a one-click site migration feature.

Pros

• There’s an easy setup process with a user-friendly interface
• There’s a comprehensive free version available
• It supports website cloning and migration

Cons

• The free version has limited cloud storage integrations
• The restoration process is slightly more complex than “one click”

Pricing

A free version is available. WPvivid Backup Pro starts from $49 per year, offering additional features like more cloud storage options, incremental backups, and advanced migration tools.

7. BackWPup

BackWPup is still another reliable plugin that helps you schedule automatic backups in a way that makes sense for your site. You can see the plugin’s homepage below:

It supports saving backups to an external service like Dropbox and S3, or through FTP. The plugin can back up entire WordPress installations, including /wp-content and push them to an external service, like Dropbox.

Pros

• There are extensive backup options, including database, files, and XML
• It integrates with multiple cloud storage services
• The free version covers basic backup needs effectively

Cons

• The user interface is less intuitive compared to competitors
• Restoring from backups is less straightforward

Pricing

The plugin is free for basic use, with a Pro version that provides additional features like more sophisticated scheduling options, more cloud storage solutions, and premium support, starting at $69 per year.

Other essential tools for WordPress sites

To run a WordPress site effectively, you need more than just a good backup plugin to keep your site in working order. You need other tools on deck to enhance the core functionality and security of WordPress and to add more features. 

Here’s an overview of essential WordPress plugins across multiple categories you’ll want to explore:

Security tools

Security plugins are essential for protecting WordPress sites from potential threats like hacking, malware, and other vulnerabilities. You may only need to select one, but just make sure it’s a good one. Here are a few popular options in this category:

• Wordfence Security: This tool offers a firewall and malware scanner designed specifically for WordPress. It helps block malicious traffic and scans for vulnerabilities​.
• Sucuri: This provides a security suite for WordPress that includes malware scanning, security activity auditing, and security hardening​, as pictured on its website below:

• Solid Security: This was created by the same people who make Solid Backups. It focuses on preventing issues before they arise by strengthening user credentials, locking out suspicious activity, and enhancing user tracking​.

These tools help safeguard your site by actively monitoring and blocking potential security threats before they can have a negative impact.

Performance tools

Optimizing your WordPress site’s performance is another area you need to pay attention to. This involves things like improving user experience and SEO and using tools that typically focus on caching and speed optimization. Here are a few popular options in this category:

• W3 Total Cache: This enhances site performance through caching, minification, content delivery network (CDN support), and more
• WP Rocket: This is a premium caching plugin that also offers image lazy loading, GZIP compression, and database optimization to speed up your WordPress site​
• Autoptimize: This tool optimizes your site’s scripts and styles, compresses images, and caches your site, which can improve your site’s load time​​

Ecommerce tools 

If you have an ecommerce site, you’ll need to look at shopping cart plugins that can help enhance user experience, increase conversion rates, and ensure your online store operates smoothly under any traffic conditions. Here are two top plugins designed to optimize and streamline various aspects of an online store:

• WooCommerce. The most popular WordPress ecommerce plugin, WooCommerce transforms your website into a fully-functional online store. It includes features like product listings, a shopping cart, checkout processes, and more. It offers a huge extension library that adds functionality to your store, as pictured below: 

• Easy Digital Downloads. Specifically designed for selling digital products on WordPress, Easy Digital Download provides a complete system for offering digital content like ebooks, software, music, or any downloadable product. It’s simpler and more lightweight than WooCommerce, if your focus is solely on digital sales.

With a solid shopping cart in place, you can sell more confidently and focus more attention on getting the word out about your business. 

Marketing tools

Tools that automate and streamline processes aren’t just for site management. You also need the right technology to boost your advertising and marketing efforts to reach more people, connect with more partners, and close more sales. 

Omnisend is the preferred marketing automation choice for entrepreneurs who want to make a bigger impact in less time. Omnisend specializes in email and SMS marketing automation for ecommerce sites. It offers features like pre-built automation workflows, targeted campaigns based on user behavior, and the ability to create shoppable emails​. 

It’s the best way to send email and SMS that “really sell,” as illustrated on the site’s homepage: 

Here are a few notable features: 

• Gamified email subscriber captures like the Wheel of Fortune
• The ability to segment your audience based on their shopping behavior to customize marketing messages
• Automation that ensures messages are sent at optimal times to maximize engagement and conversion rates
• Full integration with WordPress that makes it easy to sync customer data and use advanced segmentation and personalization features

Making use of the full range of tools available for WordPress — alongside a quality backup option — means your site can perform at its best, 24/7. 

Use WordPress backups and protect your website 

Regularly backing up your WordPress site means you can quickly recover and restore your site without losing content, updates, or customer data. Whether you manage a high-traffic ecommerce store needing real-time backups or a small blog where weekly backups suffice, the key is automation. 

As you continue to grow your WordPress site, you can’t scale your operations without tools that allow you to accomplish more in less time. Automated backups ensure you don’t miss an important step in securing your work. Once they’re set up, they work quietly for you in the background, day and night. 

The same goes for marketing. The best marketing employee works all day, every day, and always sends the right email to the right customer at the right time. 

But until this marketing employee exists, you have Omnisend. This automation software reaches your audience with timely, conversion-inspiring messages 24/7. It integrates well with WordPress so your site can consistently perform at its best. 

Intrigued? You can get started for free.