What a WordPress backup actually is, and why it saves your business
A WordPress backup is a complete saved copy of your website, both the files and the database, that you can restore if the live site breaks, gets hacked, or an update goes wrong. If you run a business website and you can’t answer the question “where is my most recent WordPress backup and have I ever restored it?”, you don’t really have one yet. That gap is the single most common reason a small business loses a site for days instead of minutes, and it’s the first thing our team checks when someone calls us in a panic.
A backup you’ve never restored is a guess, not a safety net.
MyWebs Agency
Why does a small business actually need a WordPress backup?
Because the day you need one, nothing else will do. Sites go down for boring reasons far more often than dramatic ones: a plugin update clashes with your theme, a host migration drops the database, someone edits the wrong file, or a vulnerable plugin gets exploited like the Burst Statistics flaw that exposed 200,000 sites. The numbers back this up. According to the ACSC Annual Cyber Threat Report 2024–25, Australia’s cyber authority received over 84,700 cybercrime reports last financial year, roughly one every six minutes, and the average self-reported cost per report for a small business rose 14% to $56,600. A current WordPress backup is what turns one of those incidents from a closure into an inconvenience.
- Files: your theme, plugins, images and uploads in the wp-content folder.
- Database: your pages, posts, products, orders, users and settings.
- Both, together: a files-only or database-only copy can’t rebuild a working site on its own.
- Off the server: a copy stored somewhere other than your hosting account.
- Pick a WordPress backup plugin and turn on automatic backups.
- Send the backups to remote storage, not just the same server.
- Set a schedule that matches how often your site changes.
- Restore one to a test site and confirm it actually works.
The best WordPress backup is the one that runs on its own, lands somewhere off your server, and that you’ve proven you can restore.
MyWebs Agency
The 7 steps to back up your WordPress site properly
Here’s the WordPress backup routine we set up for client sites on a care plan. It works for a simple brochure site and scales up to a busy WooCommerce store. Follow the seven steps in order and you’ll have a backup you can trust, not just one that exists.
Steps 1 to 3: plugin, schedule, storage
1. Choose a WordPress backup plugin. For most small sites we use UpdraftPlus, the most-installed backup plugin on WordPress.org with more than 3 million active installs. Solid alternatives are BackWPup and the host-level backups built into good hosting. 2. Match the schedule to your site. A brochure site that changes monthly is fine on weekly backups. A blog that posts often suits daily. 3. Store copies off the server in Google Drive, Dropbox or Amazon S3, so a server failure can’t take your site and its backups at the same time.
How often should a WooCommerce store back up?
4. Run real-time or hourly backups if you take orders. This one catches people out. A daily WordPress backup is fine for content, but if you sell online, a once-a-day copy can lose a full day of orders and customer records when something breaks at 4pm. For a WooCommerce store we set incremental or real-time backups so every order is captured, and we keep the database backed up more often than the files. If your store is also slow or creaking under load, that’s usually a sign the hosting and backup setup need looking at together, not separately.
Steps 5 to 7: retention, off-site, and the test restore
5. Keep more than one version. Hold at least the last 7 to 30 backups, because if a site is hacked you may need a copy from before the breach, not last night’s already-infected one. 6. Follow the 3-2-1 rule: three copies, on two types of storage, with one off-site. 7. Test your restore. This is the step almost everyone skips, and it’s the only one that proves the rest worked. Restore your latest WordPress backup onto a staging site once a quarter and click through it. A backup you’ve never restored is just a hopeful zip file.
Always back up before you update
Before you update WordPress core, a theme or any plugin, take a fresh manual backup first. Most failed-update disasters we get called about could have been a five-minute rollback if there’d been a clean copy from moments before. The ACSC’s small business advice says the same thing in plain terms: back up regularly, and keep a copy you can recover from. Updating without a backup is the website equivalent of changing a tyre on the motorway.
Free plugin vs host backups vs a managed care plan
All three can work. The difference is who’s responsible when a restore is needed at 9pm on a Saturday. Here’s how they compare for a typical Australian small business.
| Option | Typical cost | Off-site copy | Who restores it |
|---|---|---|---|
| Free backup plugin (UpdraftPlus, BackWPup) | $0, your time to set up and check | Only if you connect remote storage | You |
| Host-level backups | Often included or a few dollars/month | Usually on the same provider | You, via the control panel |
| Managed care plan | Roughly $50 to $200/month in Australia | Yes, off-site and monitored | Your provider |
If you’d rather not think about any of this, that’s exactly what a care plan is for. Our team handles WordPress development and ongoing care, including monitored off-site backups, updates done safely, and a tested restore process. And when something has already gone wrong, our emergency WordPress support can roll a site back from a clean backup fast.
Frequently asked questions
What is the best WordPress backup plugin?
For most small businesses, UpdraftPlus is the safest default. It’s free for the core features, has over 3 million active installs, and sends backups straight to Google Drive, Dropbox or S3. BackWPup and Solid Backups (formerly BackupBuddy) are good alternatives, and many quality hosts include their own backups too.
How often should I back up my WordPress site?
Match it to how often the site changes. Weekly is enough for a brochure site, daily suits an active blog, and an online store should back up hourly or in real time so you don’t lose orders. Always take a fresh manual backup before any update.
Are host backups enough on their own?
They’re a good start, but not if they’re stored only on the same server as your site. If that server fails or the account is suspended, you can lose the site and the backups together. Keep at least one copy off-site as well.
How do I restore a WordPress backup?
With UpdraftPlus, go to Settings, UpdraftPlus Backups, choose the backup you want and click Restore. For a hacked or badly broken site, restore onto a staging copy first so you can confirm it’s clean before it goes live. If you’re not confident doing it under pressure, that’s the moment to call someone in.
Where are WordPress backups stored?
Wherever you point them. A backup plugin can keep copies on your server, but the safer setup sends them to remote storage like Google Drive, Dropbox, Amazon S3 or a separate backup server, so one failure can’t wipe out both your site and its backups.
Not sure whether your WordPress backup would actually restore if you needed it? We’ll check it for you. Book a free website audit and our Sydney team will tell you exactly where your backups stand and what it would take to recover your site in a hurry.