Losing a WordPress site is painful. A failed plugin update, a hacked admin page, or one wrong click in the file manager can wipe out years of content, customer data, and SEO rankings. The good news: backups are cheap, fast to set up, and take less than 20 minutes to configure properly.
This guide walks you through three practical ways to back up a WordPress site, from the built-in tools in your hosting control panel to the most trusted backup plugins. By the end, you will have a working backup routine, know where to store backup files safely, and understand how to restore your site if something goes wrong.
WordPress powers over 43% of all websites online, which also makes it the most common target for automated attacks. Even if your site is small, bots will scan it for vulnerable plugins, weak passwords, and outdated themes. A backup is the one safety net that works regardless of what goes wrong.
Here are the five situations where a backup saves you:
There is no single best backup method, the right choice depends on your technical comfort level, how often your site changes, and whether you already have managed hosting. Here are the three approaches that actually work in practice.
If you run a business site and do not want to think about backups at all, managed WordPress hosting is the cleanest option. Your hosting provider handles daily automated backups, stores them on separate infrastructure, and gives you one-click restore buttons directly from the dashboard.
AEserver Managed WordPress Hosting in Dubai includes automatic daily backups with 30-day retention stored in a UAE datacenter, which is useful for businesses that need to keep data within the country for compliance purposes.
If you use a standard shared or VPS hosting plan with cPanel, your hosting provider already includes a full backup tool. This method backs up everything on your account, the WordPress files, all databases, email accounts, and DNS settings, in a single compressed archive.
This is the most complete type of backup because it captures your entire hosting environment, not just WordPress. The downside is that the backup file is larger and restoring it usually requires contacting support or uploading the archive manually.
Backup plugins are installed directly in WordPress and run on a schedule you control. They back up your files and database, compress them, and automatically upload the archive to cloud storage like Google Drive, Dropbox, or Amazon S3.
This is the most flexible method and the one most site owners end up using. Plugins let you schedule backups by day, week, or month, choose exactly what to include, and restore a site with a few clicks even if the dashboard is broken.
cPanel is included with most AEserver hosting plans. The built-in backup tool creates a full copy of your account in minutes and lets you download the archive directly to your computer.
Open your AEserver client area at https://my.aeserver.com/login and sign in with your account email and password. Go to the Services section, click on your hosting package, and then click the Login to cPanel button. A new tab opens with your cPanel dashboard.
Alternatively, you can log in to cPanel directly by visiting your hosting domain with :2083 appended, for example https://yourdomain.ae:2083.
Inside the cPanel dashboard, scroll down to the Files section. You will see two options: Backup and Backup Wizard. The Backup tool gives you more control, so click that one.
On the Backup page, find the section titled Full Backup and click the Download a Full Account Backup button. On the next screen, choose Home Directory as the backup destination, enter your email address so the system can notify you when the backup is ready, and click Generate Backup.
The backup file is a .tar.gz archive containing all your files, databases, and email accounts. Depending on your site size, this takes anywhere from a few minutes to an hour.
Once the backup finishes, you will receive an email notification. Return to the Backup page, and you will see your .tar.gz file listed under Backups Available for Download. Click the file name to download it to your computer.
Save the file with a clear name that includes the date, for example mysite-backup-YYYY-MM-DD.tar.gz, and store it in a safe location. Do not leave it on your hosting server as your only copy.
Scroll down on the same Backup page to the Partial Backups section. Here you can download just your Home Directory (all WordPress files) or a specific MySQL Database. These smaller backups are faster to create and you can restore them yourself without contacting support.
Click Home Directory to download your WordPress files, and click the database name under MySQL Databases to download a .sql file of your content. Together, these two files are enough to fully restore a WordPress site.
UpdraftPlus is the most installed WordPress backup plugin with over 3 million active installations. Its free version handles scheduled backups, one-click restore, and uploads to Google Drive, Dropbox, Amazon S3, and other cloud services out of the box. For most small and medium business sites, the free version is more than enough.
Log in to your WordPress admin area at https://yourdomain.ae/wp-admin. In the left sidebar, go to Plugins > Add New Plugin. In the search box in the top right, type UpdraftPlus and press Enter.
Find the plugin published by UpdraftPlus.Com, DavidAnderson, click Install Now, and once the installation finishes, click Activate.
After activation, go to Settings > UpdraftPlus Backups in the WordPress admin sidebar. You will see the main UpdraftPlus dashboard with several tabs: Backup / Restore, Migrate / Clone, Settings, Advanced Tools, and Premium / Extensions.
Click the Settings tab. At the top, you will see two dropdowns: Files backup schedule and Database backup schedule. For most business sites, a sensible configuration is:
For a busy WooCommerce store, change the database schedule to Every 4 hours or Every 12 hours, so you never lose more than a few hours of orders.
Still on the Settings tab, scroll down to Choose your remote storage. UpdraftPlus supports Google Drive, Dropbox, Microsoft OneDrive, Amazon S3, FTP, and many others in the free version. Click the icon of your preferred service, the easiest option for most users is Google Drive.
A set of instructions appears below the icons. Save your settings by clicking the Save Changes button at the bottom. UpdraftPlus will then prompt you to click a link to authorize access to your Google account. Follow the link, sign in to Google, approve the permissions, and click Complete setup.
Go back to the Backup / Restore tab and click the large blue Backup Now button. A dialog opens with three checkboxes, leave all three checked so both your files and database are backed up, and make sure Send this backup to remote storage is ticked.
Click Backup Now to start. The backup takes a few minutes depending on site size. When it finishes, you will see the backup listed under Existing Backups with a timestamp and a row of buttons: Restore, View Log, and Delete.
If UpdraftPlus is not the right fit, there are other strong options depending on your site type and budget. Here is a side-by-side comparison of the most reliable backup plugins available, with current pricing and what each one does best.
| Plugin | Free Version | Starting Price | Best For |
|---|---|---|---|
| UpdraftPlus | Yes, full cloud storage | $70/year (2 sites) | Most WordPress sites, free cloud storage included |
| BlogVault | No, paid only | $89/year (1 site) | Agencies, WooCommerce, off-site processing |
| Jetpack VaultPress Backup | No, paid only | $119/year (1 site) | Real-time backups, high-traffic WooCommerce stores |
| Solid Backups (formerly BackupBuddy) | No, paid only | $99/year (1 site) | Simple interface with included Stash Live storage |
| Duplicator | Yes, basic backups | $69/year (1 site) | Site migrations combined with backups |
| WPvivid | Yes, with cloud uploads | $49/year (2 sites) | Budget-friendly, includes staging |
| BackWPup | Yes, technical setup | $69/year | Developers who want granular control |
The location you choose for backup storage matters almost as much as the backup itself. A backup file sitting on the same server as your website is vulnerable to the same attacks and hardware failures that would take down the original site.
The golden rule is the 3-2-1 backup strategy, which means keeping 3 copies of your data, on 2 different types of media, with at least 1 copy stored off-site. Here are the practical options:
| Storage Option | Pros | Cons |
|---|---|---|
| Google Drive | Free 15 GB, easy integration with most plugins | Shared with personal files, limits on large sites |
| Dropbox | Reliable, good sync, simple file access | Only 2 GB free, paid plans start at $9.99/month |
| Amazon S3 | Extremely durable, pay only for what you use, scalable | Technical setup, charges for storage and data transfer |
| Microsoft OneDrive | Included with Microsoft 365 plans, 1 TB standard | Requires Microsoft account, slower than Google Drive in some regions |
| AEserver Acronis Backup | Professional backup service, data stored in UAE, enterprise-grade encryption | Paid service, better suited for business sites |
| External hard drive | Full control, one-time cost, works offline | No automation, easy to forget, vulnerable to physical damage |
Backup frequency depends on how often your site changes and how much data you can afford to lose. The rule of thumb: decide the maximum amount of content loss you could tolerate, and back up more often than that.
| Site Type | Recommended Frequency |
|---|---|
| Static brochure site, no updates | Monthly full backup |
| Small business site with occasional updates | Weekly files, daily database |
| Active blog, multiple posts per week | Daily full backup |
| WooCommerce store, membership site | Real-time or every 4-6 hours |
| News or high-traffic publisher | Real-time with continuous capture |
On top of scheduled backups, always run a manual backup before any of these events:
A backup you have never tested is not a backup, it is just a hope. The first time you try to restore should not be in the middle of an emergency. Test your restore process at least once after you set up backups, ideally on a staging or local copy of your site.
This is the simplest restore path. In your WordPress admin, go to Settings > UpdraftPlus Backups and open the Backup / Restore tab. Scroll down to Existing Backups, find the backup date you want to restore, and click the Restore button in that row.
A popup opens with checkboxes for what you want to restore, typically Plugins, Themes, Uploads, Others, and Database. Check all of them for a full restore, or only the ones you need. Click Next, confirm, and wait for the process to finish. UpdraftPlus will show a success message when done.
This process is more manual. You need to upload the backup archive to your server, restore the database through phpMyAdmin, and unpack the files in the correct location.
In cPanel, open File Manager, navigate to your home directory, and click Upload. Select the .tar.gz or .zip archive from your computer. Once uploaded, right-click the file and choose Extract.
Go back to cPanel and open phpMyAdmin. Select your WordPress database from the left sidebar, click the Import tab, choose the .sql file from your backup, and click Go. The database content will be replaced with your backup.
In File Manager, copy the extracted WordPress files to your public_html folder, overwriting existing files if needed. Double-check that wp-config.php has the correct database credentials that match your current hosting setup.
These are the mistakes I see site owners make most often, based on support tickets and real recovery cases. Any one of them can turn a backup into a useless file when you need it most.
Here is the minimum setup that actually protects a business WordPress site. If you do these five things, you are ahead of 90% of site owners:
WordPress backups take less than an hour to set up properly and save you from almost every disaster a website can face. If you host with AEserver, Managed WordPress Hosting and Acronis Backup cover the hosting side, and a plugin like UpdraftPlus adds the second layer. Set it up once, verify it works, and you will stop worrying about losing your site.