How to Back Up a WordPress Site: 5 Backup Methods to Protect Your Site

Key highlights

• Learn five practical ways to back up a WordPress site, including hosting backups, plugins and manual methods.
• Understand what a complete WordPress backup should include before you create one.
• Compare cloud and local storage options for keeping additional backup copies.
• Know when to create a fresh backup and how to check that your backup is complete and accessible.

When was the last time you backed up your WordPress site?

If you’re not sure, now is a good time to check. A plugin update can fail, a file can be deleted by mistake or a security issue can affect your website without much warning. A recent backup gives you a copy of your site data to work with if something goes wrong.

The good news is, learning how to back up a WordPress site doesn’t have to be complicated. You can use your hosting provider, install a backup plugin or create a backup manually. You can also keep additional copies in cloud or local storage.

In this guide, we’ll walk you through five practical WordPress website backup methods and help you choose an approach based on how much control, automation and storage flexibility you need.

Quick answer:

The easiest ways to back up WordPress are through your hosting provider or a backup plugin, while manual backups give you more direct control. A complete backup should include both your website files and database, with at least one copy stored separately from your live site.

What is a website backup?

A website backup is a saved copy of the data that makes your WordPress site work.

A complete WordPress backup typically includes three important components:

• Website files: Your themes, plugins, media uploads and other WordPress files
• Database: Your posts, pages, comments, user information and site settings
• Configuration files: Important files such as wp-config.php and .htaccess

Your WordPress files and database work together. Saving only one of them may leave you without everything you need if your site needs to be recovered later.

You may also come across partial or content-only backups. For example, WordPress lets you export posts, pages, comments and other content as an XML file through Tools > Export. This can be useful for moving content, but it is not a complete WordPress website backup because it does not include your full website files and database.

Before relying on a backup, make sure you understand what it actually contains.

Quick start guide: Choose your WordPress website backup method

Not sure which backup approach fits your website? Here’s a quick comparison of the five methods covered in this guide.

Method	Best for	Main advantage	Keep in mind
Hosting provider backups	Website owners looking for a simple backup option	Managed from your hosting account	Features vary by hosting provider
WordPress backup plugins	Users who want more control and automation	Flexible schedules and storage options	Features vary by plugin
Manual backup	Users who want direct control	You control the files and database copies	Requires more technical work
Cloud storage	Keeping an off-site backup copy	Backup stays separate from your hosting server	Usually works with a plugin or backup service
Local backup	Offline storage and development workflows	Direct control over your backup files	Should not be your only backup location

You do not necessarily need to choose only one approach. For example, you can use your hosting provider’s backup tools while keeping another copy in cloud or local storage.

How to back up a WordPress site

There are several ways to back up a WordPress site. The right option depends on your hosting setup, how much control you want and how comfortable you are managing website files and databases.

At a basic level, you can:

1. Use backup tools provided by your hosting provider.
2. Use a WordPress backup plugin.
3. Create file and database backups manually.
4. Keep an additional backup copy in cloud storage.
5. Keep an offline or local backup copy.

Let’s look at each method.

Method 1: Back up WordPress using your hosting provider

One of the simplest ways to back up a WordPress site is through your hosting provider.

Many hosts provide built-in backup tools that let you create, access or download copies of your website without installing another WordPress plugin.

The exact features, backup frequency and retention period depend on your hosting provider and plan. Start by checking the backup options available inside your hosting account.

If your WordPress site is hosted with us, you can follow these steps directly from your Bluehost Portal.

How to access WordPress backups on Bluehost

You can check the backup options available for your site directly from the Bluehost Portal.

To access them:

• Log in to your Bluehost Portal.
• Select Websites from the left-hand menu.
• Find the website you want to manage and click Manage Site.
• Select the Backups tab from the top navigation.

The Backups tab shows the backup solutions currently available for that website.

Depending on the backup service associated with your account, you may see Basic Weekly Backup and other backup options.

Where Basic Weekly Backup is available, it automatically creates a weekly cloud-based backup of your website data. The Backups area also provides separate controls for website file and database backups.

How to download an available Bluehost backup

If you want to keep a copy outside your hosting account:

• Go to Websites > Manage Site > Backups.

• Open File Backups or Database Backups.

• Choose an available backup date.
• Select the download option.

• Follow the prompts to save the backup.

Backup availability can vary depending on the service associated with your website, so use the Backups tab to confirm what is currently enabled for your account.

Hosting-provider backups are convenient because they are managed alongside your website. If you want more control over schedules, storage destinations or backup configuration, a WordPress plugin may be a better fit.

Method 2: Back up WordPress with plugins

WordPress backup plugins can simplify the backup process while giving you more control over what gets backed up and where the copy is stored.

Depending on the plugin, you may be able to:

• Back up your website files and database
• Schedule recurring backups
• Send copies to remote storage
• Keep multiple backup versions
• Receive notifications when a backup completes or fails

Popular options include UpdraftPlus, BackWPup, Jetpack Backup and Duplicator.

Plugin	Useful for
UpdraftPlus	Scheduled backups and multiple remote storage options
BackWPup	Separate backup jobs for files and databases
Jetpack Backup	Cloud-based WordPress backups
Duplicator	Website backup packages and migration workflows

The exact setup varies by plugin, but the general process is similar:

• Go to Plugins > Add New Plugin in your WordPress dashboard.

• Install and activate your chosen backup plugin.
• Open the plugin’s backup settings.
• Choose what you want to include.
• Select a storage destination if supported.
• Run your first backup.
• Confirm that the backup completes successfully.

You generally do not need multiple backup plugins performing the same job. Choose one based on your site size, storage requirements and the level of automation you need.

If you want to compare individual tools in more detail, see our guide to the best WordPress backup plugins.

If you prefer to manage the files and database yourself, you can also create a backup manually.

Method 3: Back up WordPress manually

Manual WordPress backups give you direct control over the copies you create.

They can be useful before major website changes or when you want a backup you can download and manage independently.

For a complete manual backup, save both your WordPress files and database.

1. Back up your WordPress website files

You can download your WordPress files using the File Manager available through your hosting provider or an FTP/SFTP client.

The exact interface varies by host, but the general process is similar:

• Open the File Manager for your website.
• Navigate to the directory containing your WordPress installation.
• Make sure hidden files such as .htaccess are visible.
• Select your WordPress files and folders.
• Compress them into a ZIP archive if your File Manager supports it.
• Download the archive to a secure location.

Your backup should include your site-specific files, such as:

• wp-content
• Themes
• Plugins
• Uploads and media
• wp-config.php
• .htaccess and other relevant configuration files

You can also use FTP or SFTP to download your WordPress files directly to your computer.

2. Back up your WordPress database

Your WordPress database is stored separately from your website files. This means downloading your WordPress directory alone does not create a complete backup.

Most hosting providers give you access to phpMyAdmin or another database-management tool.

To create a database backup with phpMyAdmin:

• Open phpMyAdmin from your hosting account.
• Select the database used by your WordPress site.
• Click Export.
• Choose the export method. The default Quick option is usually suitable for a standard backup.
• Select SQL as the format.
• Click Go to download the database.

The database will usually download as an .sql file.

Keep the database export together with the website files created around the same time. This gives you a more consistent backup set.

3. Export WordPress content

WordPress also includes a built-in content export tool.

Go to:

WordPress Dashboard > Tools > Export

Select All content to download an XML file containing content such as posts, pages and comments.

This can be useful when moving content between WordPress installations, but it is not a complete website backup. It does not replace a full copy of your website files and database.

Method 4: Store an additional WordPress backup in cloud storage

Cloud storage gives you a way to keep an additional backup copy outside your live hosting environment. Your hosting tool, backup plugin or manual process creates the backup, while cloud storage gives you another place to keep it.

Common cloud storage destinations include:

Cloud storage	Useful for
Google Drive	General cloud storage and easy access
Dropbox	File access and collaborative workflows
Amazon S3	Larger or more technical backup setups
Microsoft OneDrive	Businesses already using Microsoft services

Cloud storage itself does not usually create the WordPress backup. Instead, your backup plugin, hosting service or manual workflow creates the backup and then sends or uploads it to the cloud destination.

A typical cloud backup process looks like this:

• Choose a cloud storage provider.
• Use a backup plugin or service that supports your chosen destination.
• Connect your storage account.
• Choose what to include in the backup.
• Run the backup.
• Confirm that the files appear in the correct cloud location.

Organize your backups by website and date so you can identify the right copy later.

You should also check periodically that new backups are still reaching the destination. A connected cloud account does not help if your backup process stopped syncing.

Cloud storage keeps a copy accessible online. You may also want an offline copy that you control directly.

Method 5: Keep an offline or local WordPress backup copy

A local backup stores a copy of your WordPress data on hardware or a system that you control.

This can be useful for developers, agencies or website owners who want an offline copy of important site data.

Common local storage options include:

• External hard drives for storing larger website archives
• Network attached storage for teams or multiple websites
• Local development environments for testing website changes
• USB drives for an additional copy of smaller backup files

To keep a local WordPress backup:

• Download your website files and database backup.
• Place them in a clearly labeled folder.
• Include the website name and backup date in the folder name.
• Copy the folder to your chosen storage device.
• Check occasionally that the files are still accessible.

Local backups give you direct control and do not depend on your hosting account or an internet connection.

However, they should not be your only backup. Hardware can fail, devices can be lost and files can become corrupted. For important websites, keeping copies in more than one location reduces the risk of losing your only usable backup.

A practical backup setup for most WordPress sites is to maintain a regular primary backup, keep another copy outside your hosting environment and periodically confirm that a backup can be restored. This reduces your dependence on any single backup location or process.

How often should you back up your WordPress site?

How often you should back up WordPress depends on how frequently your website changes.

An online store receiving new orders every day has different backup needs from a portfolio that changes only a few times a year.

Instead of following the same schedule for every site, ask yourself:

How much new data would you be comfortable losing if you had to rely on your latest backup?

That gives you a practical starting point for deciding how frequently your website should be backed up. You should also create a fresh backup before making changes that could be difficult to reverse, including:

• WordPress core updates
• Plugin installations or major plugin updates
• Theme changes or redesigns
• Website migrations
• Database changes or cleanup
• Security remediation
• Large content or product updates

If you want backups to run without creating them manually each time, see our guide to automatic WordPress backups for detailed guidance on frequency, scheduling and retention.

How to check your WordPress backup

A backup is only useful if it contains the data you expect and you can access it when you need it.

Before relying on a backup, run through these checks.

1. Confirm your website files are included

Check that your backup contains the site-specific files you need, including:

• wp-content
• Themes
• Plugins
• Uploads and media
• Relevant configuration files

2. Confirm your database is included

If you created the backup manually, make sure you also have a database export. A ZIP archive of your WordPress files does not automatically include your live MySQL database.

3. Check the backup date

Know when your backup was created. An older backup may still work, but it could be missing newer pages, posts, orders, form submissions or other site changes.

4. Make sure you can access the files

If you downloaded a backup, check that the archive opens and that your database file is accessible. Give manual backups clear names that identify the website and backup date.

5. Periodically test your backup

A backup can look complete but still fail when you need it. Periodically test a recent backup in a safe staging or test environment to confirm that the files and database can be restored successfully.

6. Keep another copy where appropriate

Avoid keeping your only backup inside the same environment as your live website. An additional cloud or local copy gives you another way to access your site data if your primary backup location becomes unavailable.

If you already have a backup and need to use it to recover your site, see our separate guide on how to restore WordPress from a backup.

Why might a WordPress backup fail?

Backups do not always complete successfully. If your backup fails, one of these common issues may be responsible.

1. Insufficient storage

Large media libraries and databases can create sizeable backup files.

What to do: Check the available space in your hosting account or storage destination. Remove unnecessary backup copies if you need additional space.

2. Backup timeout or resource limits

Large backup jobs can take longer to process and may run into hosting or application limits.

What to do: Try backing up your files and database separately or run the backup during a lower-activity period.

3. Backup plugin errors or conflicts

A backup plugin may fail because of an outdated version, configuration problem or plugin conflict.

What to do: Check the backup tool’s error logs or status, update the plugin and review its documentation.

4. Remote storage connection problems

Cloud backups can fail when the connection between your backup tool and storage provider expires or loses authorization.

What to do: Reconnect the storage account and run another backup to confirm the connection is working.

If the backup continues to fail, review your backup tool’s logs or contact your hosting provider or backup service for help identifying the issue.

WordPress website backup best practices

A reliable WordPress backup strategy does not need to be complicated. Focus on a few consistent habits:

• Back up both your website files and database.
• Create a fresh backup before major website changes.
• Keep at least one backup away from your live site where appropriate.
• Label manual backups with the website name and date.
• Check that automated backups are still completing successfully.
• Protect downloaded database and configuration files from unauthorized access.
• Keep more than one recent backup if your website changes frequently.
• Periodically test that a recent backup can be restored successfully.

The most important thing is knowing that a recent and complete backup exists before you actually need one.

Final thoughts

A backup is most valuable when it is ready before you need it. Make checking your latest backup part of your regular site maintenance, especially before updates, redesigns, migrations or other major changes. Confirm that both your files and database are covered and keep at least one copy somewhere you can access independently.

If you want to simplify that process, Bluehost WordPress Hosting brings your website management and available backup tools together in one place, so you can spend less time managing the technical setup and more time working on your site.

Ready to make WordPress site management simpler? Explore Bluehost WordPress Hosting.

FAQs