Your WordPress site could disappear tomorrow. Server failure, hacking, accidental deletion, a bad plugin update - there are countless ways to lose everything you've built. The only protection is a reliable backup strategy.
This guide covers everything you need to know about WordPress backups: what to back up, how often, where to store backups, and how to restore your site when disaster strikes.
The Harsh Reality
60% of small businesses that lose their data shut down within 6 months. Your backups are your insurance policy - don't skip them.
What You Need to Backup
A complete WordPress backup has two main components: files and database. Miss either one, and your backup is incomplete.
Database
All your posts, pages, comments, users, settings, and plugin data. This is the heart of your site.
wp-content Folder
Themes, plugins, and uploads (all your images and media files). Your customizations live here.
wp-config.php
Database credentials, security keys, and WordPress settings. Critical for site operation.
.htaccess
URL rewrites, security rules, and performance settings. Controls how your server handles requests.
What About WordPress Core Files?
The core WordPress files (wp-admin, wp-includes) can be re-downloaded from wordpress.org, so they're technically not essential to back up. However, including them makes restoration faster and ensures you have the exact version you were running.
MojoShine backs up everything automatically. Your database, all files, and configuration are included in every backup. No setup required.
How Often Should You Backup?
Backup frequency depends on how often your content changes and how much data you can afford to lose. Ask yourself: "If I had to restore from yesterday's backup, how much work would I lose?"
| Site Type | Update Frequency | Recommended Backup |
|---|---|---|
| Personal blog | Weekly posts | Weekly |
| Business website | Monthly updates | Weekly |
| Active blog/news | Daily posts | Daily |
| E-commerce store | Constant orders | Daily or Hourly |
| Membership site | User activity | Daily |
| High-traffic e-commerce | During sales/peaks | Hourly |
The 3-2-1 Backup Rule
Industry best practice follows the 3-2-1 rule:
- 3 copies of your data (original + 2 backups)
- 2 different storage types (e.g., server + cloud storage)
- 1 copy off-site (different physical location)
This protects against single points of failure. If your server crashes and burns, your cloud backup survives. If your cloud provider has an outage, you have a local copy.
Where to Store Backups
Never Store Backups Only on Your Server
If your server fails, gets hacked, or your host suspends your account, you lose both your site AND your backups. Always use off-site storage.
Off-Site Storage Options
- Amazon S3: Industry standard, highly reliable, pay-per-use pricing. Best for businesses.
- Google Cloud Storage: Similar to S3, integrates well with Google Workspace.
- Dropbox: Easy to use, good free tier, familiar interface.
- Google Drive: Free storage with Google account, easy access.
- Local Computer: Download backups to your computer or external drive as an additional copy.
How Long to Keep Backups
Retention policy depends on your storage budget and recovery needs:
- Daily backups: Keep for 7-14 days
- Weekly backups: Keep for 4-8 weeks
- Monthly backups: Keep for 6-12 months
Longer retention helps if you discover a problem weeks after it occurred (like malware that's been silently present).
WordPress Backup Methods
Option 1: Managed Hosting (Easiest)
Quality managed WordPress hosts handle backups automatically. This is the hands-off approach - backups happen without any action from you.
MojoShine provides:
- Automatic daily backups (Pro plan) or hourly backups (Business plan)
- Off-site storage included
- One-click restore from your dashboard
- 30-day retention
- No configuration required
Option 2: Backup Plugins
If your host doesn't provide backups, use a backup plugin. Popular options include:
- UpdraftPlus: Most popular free option, supports multiple cloud destinations
- BlogVault: Excellent incremental backups, includes staging
- BackWPup: Flexible scheduling, multiple backup jobs
- Duplicator: Great for migrations, also does backups
Option 3: Manual Backups
For complete control, you can backup manually using:
- phpMyAdmin: Export your database to SQL file
- FTP/SFTP: Download your wp-content folder
- cPanel: Use the backup wizard if available
- WP-CLI: Command-line database export with
wp db export
Manual backups work but are easy to forget. Automated backups are more reliable.
How to Restore from Backup
When disaster strikes, here's how to get your site back online:
Assess the Damage
Determine what went wrong. Hacked site? Broken plugin? Deleted content? This helps you choose the right backup to restore.
Choose Your Backup
Select the most recent backup from before the problem occurred. For hacks, you may need to go back further to ensure the malware isn't in your backup.
Restore Files
Upload your backup files to the server via FTP/SFTP, or use your backup plugin's restore feature. Replace existing files.
Restore Database
Import your database backup using phpMyAdmin, command line (mysql -u user -p database < backup.sql), or your backup plugin.
Verify and Test
Check your site thoroughly. Test key pages, forms, checkout (if e-commerce), and user login. Make sure everything works.
With MojoShine: Restoration is one click. Select the backup you want from your dashboard, click restore, and we handle everything else. Your site is typically back online in minutes.
Testing Your Backups
A backup you've never tested is a backup that might not work. Periodically verify your backups are actually restorable:
- Restore to a staging environment (not your live site)
- Verify the database imported without errors
- Check that all pages load correctly
- Confirm media files are present
- Test any critical functionality (forms, checkout, etc.)
Test your backup restore process at least quarterly. The worst time to discover your backups don't work is when you desperately need them.
Backup Best Practices
Before Major Changes
Always create a manual backup before:
- Updating WordPress core
- Updating themes or plugins
- Installing new plugins
- Making significant content changes
- Changing themes
- Running database optimization
Secure Your Backups
Backups contain sensitive data (user information, potentially passwords). Protect them:
- Use encrypted storage (S3 with encryption, encrypted cloud storage)
- Don't store backups in publicly accessible directories
- Use strong passwords for backup archive encryption
- Limit who has access to backups
Document Your Process
Write down your backup and restore procedures. Include:
- Where backups are stored
- Login credentials for backup storage
- Step-by-step restore instructions
- Contact information for your host's support
When disaster strikes, you might be stressed and rushed. Clear documentation helps you act quickly and correctly.
Stop Worrying About Backups
MojoShine handles backups automatically. Daily or hourly backups, off-site storage, one-click restore.
Start Your Free TrialFrequently Asked Questions
How often should I backup my WordPress site?
Backup frequency depends on how often your content changes. For blogs updated weekly, weekly backups are sufficient. For e-commerce sites or sites with daily content updates, daily backups are recommended. For high-traffic e-commerce during sales, consider hourly backups. MojoShine provides daily backups on Pro plans and hourly backups on Business plans.
What files do I need to backup in WordPress?
A complete WordPress backup includes: 1) The database (posts, pages, comments, settings), 2) wp-content folder (themes, plugins, uploads/media), 3) wp-config.php (database credentials and settings), and 4) .htaccess file (URL rewrites and security rules). The WordPress core files can be re-downloaded, but backing them up makes restoration faster.
Where should I store WordPress backups?
Never store backups only on your web server - if the server fails, you lose both your site and backups. Use off-site storage like Amazon S3, Google Cloud Storage, Dropbox, or your local computer. The 3-2-1 rule recommends 3 copies of data, on 2 different media types, with 1 copy off-site.
How do I restore a WordPress site from backup?
To restore WordPress: 1) Upload backup files to your server via FTP/SFTP or file manager, 2) Import the database backup using phpMyAdmin or command line, 3) Update wp-config.php with correct database credentials if needed, 4) Check that file permissions are correct. Most backup plugins and managed hosts include one-click restore features that automate this process.