How to back up a website: Simple methods for beginners

Key takeaways:  

• You can back up a website manually through FTP or your hosting panel, or set automatic backups through your web hosting provider or plugin.
• A website backup keeps your files, database, and settings recoverable if your site gets hacked, breaks or goes offline.
• The 3-2-1 backup rule means keeping three copies of your data across two storage types, with one backup stored offsite.

A website backup is like an insurance policy for your website or online store. Your domain name brings visitors to your site, and a backup keeps your website’s files safe if something goes wrong. It creates a copy of your site’s content, images, and code so you can restore your website if there’s a problem.

This guide explains how to back up a website using simple, practical methods, even if you’re new to managing a site. But first, it helps to understand why backups matter in the first place.

Protect website data to build trust

While backups protect your site’s files, an SSL certificate protects the data moving between your visitors and your site.

Encrypt sensitive information, boost customer confidence, and keep your site secure.

Get your SSL now

Why you need to back up your website  

Things can go wrong with any website. A hacked account, a data breach, a broken update, or even a simple mistake can cause files or data to disappear. When you back up your website, you keep a copy of your files and database so you can restore your site quickly instead of rebuilding everything from scratch.

Here are some common situations where a website backup can save you a lot of trouble:

• Website hacking
• Websites could break after an update
• Accidental file deletions
• Website updates

Website hacking

It’s a scary thought, but cybercriminals are getting better. Hackers might try to steal data, deface your site, or use it to spread malware. Protecting your site is always best but if all else fails, a backup is your best way to recover quickly if you fall victim to an attack. Without one, you could be looking at rebuilding your entire website from scratch, which is a costly and time-consuming nightmare.

Websites could break after an update

Website updates are necessary to maintain a secure and smooth website, but plugin conflicts, theme problems, and coding updates can cause errors that can break your site. Instead of panicking, you can use a recent backup to restore your website to its pre-update state and get back online quickly.

Accidental file deletions

Even with the best intentions, it’s possible to accidentally delete the wrong file—maybe just with a click of the wrong button, or you might think you have deleted the test file. Whatever the reason, losing critical website files can cause so much trouble. A backup lets you quickly recover those lost files, saving you from a potential crisis.

Website updates

A backup lets you quickly revert to your previous website version in case you don’t like the new design. It allows you to experiment with changes without the risk of permanently losing your old site—it’s like having an “undo” button for your website.

Two ways to back up your site  

There are two main ways to back up your site. You can back up a website manually by copying files and databases yourself or use a service or plugin that handles the backup process automatically. Both options create a website backup so you can restore your site if something goes wrong.

Manual backups: A hands-on approach

Manual website backups mean you’re personally copying all your website’s elements, like your images, code, and content, and saving them somewhere safe. It’s a direct, no-middleman way to protect your data from unexpected issues or loss, and it gives you full control over what gets backed up, when, and where it’s stored.

And that’s the real advantage here. With manual backups, your important data is always within reach whenever you need it, without having to rely on a third-party service to do it for you.

Third-party backup services: Automating security

Technology makes a lot of things easier, and website backups are no different. Third-party backup services take the backup process off your plate entirely by handling it automatically. Here’s what they typically do:

• Automation: They continuously monitor your website for changes and automatically back up new content and modifications. This hands-free approach keeps your backups current without manual work.
• Scheduled backups: They set up regular backup schedules according to your website’s update frequency. This stores a current backup of your website so you can restore it if needed.
• Efficient storage: They store your backups on secure remote servers, minimizing the risk of data loss due to local hardware failures.
• Easy restoration: Should the need arise, you can easily restore your website to its previous state with just a few clicks, saving you time and stress.

How to manually back up your website 

Manual backups are one way to protect your site when you want full control over the process. If you’re learning how to back up a website, you can copy files and databases from your hosting server and store them in a safe backup destination. The process can take a few minutes for smaller sites, and it helps you keep a copy of your site on a regular basis.

Here are the common ways to create a manual website backup:

• Back up manually using hosting panel (cPanel, Plesk, etc.)
• Manually set up backup plugins (for WordPress)
• Manually back up using FTP clients

Backup manually using hosting panel (cPanel, Plesk, etc.) 

Backing up your site with cPanel is easy. You can set it up to back up automatically, but it doesn’t keep your data for long, and you might lose important files when you need them most. To make sure you have what you need, it’s best to back up your site manually.

Here’s are the generic steps, noting that the actual process may vary depending on your hosting provider:

1. Access your hosting control panel: Log in to your hosting account. This is usually done through a web browser using a URL provided by your hosting company (e.g., cpanel.yourdomain.com or a similar address). You’ll need your username and password.
2. Locate the backup manager/files section: Once logged in, look for a section related to backups, files, or file management. This might be called “Backups,” “File Manager,” “Files,” or something similar. The name and location can vary.
3. Choose your backup method (full or partial): A full backup backs up everything—all your website files, databases, emails, settings, etc. It’s the most comprehensive option. A partial backup lets you choose specific files of your website to back up (e.g., only the website files or only the database). This is useful if you don’t need to back up everything or if you have limited storage space.
4. Initiate the backup process: Once you’ve chosen your backup method, there will usually be a button or link to start the backup process. Click it.
5. Choose a backup destination*: You can choose a local download. This means you download the backup files directly to your computer. This is generally recommended for smaller websites. Or you can use remote storage.
6. Wait for the backup to complete: Depending on the size of your website and the speed of your hosting server, the backup process can take some time. Be patient, and don’t interrupt it.
7. Download the backup (if applicable): Once the backup is complete, download it to your computer. Store it safely, preferably on an external drive or in cloud storage.

*Note: Some hosting providers even allow you to store backups on a separate server or cloud storage service (like Dropbox, Google Drive, or Amazon S3). This provides an extra layer of security. Or you can use your hosting server, where the backup is be stored on your hosting server itself. While convenient, this is less ideal because if your entire server crashes, your backup goes down with it.

It’s always a good idea to verify your backup. This might involve restoring it to a test environment or checking the file sizes to confirm the files downloaded correctly. Typically, you can find the backup options under Files or Backup in cPanel. Within that section, you can find either Full Backup, Partial Backup, or Backup Wizard as the available options. The wizard usually walks you through the steps.

If you’re unsure about any of these steps, it’s always best to consult your web hosting provider’s documentation or contact their support team. They can provide specific instructions for your hosting environment.  

Manually set up backup plugins (for WordPress)

WordPress websites are typically backed up using a plugin. While these plugins work similarly to third-party backup services, they need to be manually set up to back up your site. Here’s how to set yours up:

1. Choose and install a WordPress backup plugin: In your WordPress dashboard, go to Plugins, then Add New. Use the search bar for a reputable backup plugin (read reviews and compare features) and see if there is a free version available. Click Install Now and then Activate.
2. Access the plugin settings: After activating the plugin, you’ll usually find its settings page under Settings or a new menu item in your WordPress dashboard.
3. Configure the backup plugin: This is where you’ll customize how your backups are performed. Common settings include:
   1. Schedule backup: How often do you want to back up your WordPress site (e.g., daily, weekly, monthly)?
   2. Backup destination: Where you want to store your backups (e.g., your hosting server, cloud storage like Dropbox, Google Drive, Amazon S3, or FTP). Cloud storage is highly recommended.
   3. What to back up: Choose whether to back up everything (files and database) or specific parts (e.g., only the database or certain files).
   4. File exclusion (optional): Specify any files or folders you want to exclude from the backup (e.g., large media files that don’t change often).
   5. Database backup options: Some plugins offer options for optimizing the database before backup.
4. Run a backup: Most plugins have a button or option to run a backup immediately. This is useful for creating an initial backup after configuring the settings.
5. Configure automated backups (optional): If you want your backups to run automatically, make sure you’ve set up the backup schedule in the plugin’s settings.
6. Monitor backups: Monitor your backups to confirm they are running successfully. Many plugins provide logs or notifications that show the status of your backups.
7. Test restores (optional): It’s a good idea to test restoring your backups in a staging or test environment to make sure they work correctly. This gives you confidence that you can restore your website if needed.

Manually back up using FTP clients 

For advanced users, FTP is one of the most hands-on ways to back up your website. It’s especially useful if you want to save a copy before making any major changes to your site. You can export your files and store them wherever you want, with no added costs, but it does require manual effort.  

Here’s how to back up your site using FTP:

1. Connect to your server via FTP: Use an FTP client (like FileZilla, Cyberduck, or Transmit) and enter your hosting account’s FTP credentials (hostname, username, password, and port).
2. Back up your website files:  Once connected, navigate to your website’s root directory (usually public_html or similar) in the remote server view within your FTP client. Download all the files and folders within this directory to your computer. This process might take a while, depending on the size of your website.
3. Export your WordPress database (via phpMyAdmin):  You’ll still export the database through phpMyAdmin, which is usually accessible through your hosting control panel (cPanel, Plesk, etc.). Find the phpMyAdmin icon or link. Select your WordPress database. Go to the “Export” tab. Choose the “Quick” or “Custom” export method (Custom lets you choose specific tables if needed). Select “SQL” format. Click “Go” to download the database export file (usually a .sql file). You do not use FTP to download the database; you use phpMyAdmin’s export function.  
4. Back up your .htaccess file via FTP (optional): If the .htaccess file is visible in your FTP client (you might need to enable “show hidden files” in your FTP client’s settings), download it to your computer.
5. Store your backups securely:  Keep your downloaded files (from FTP) and the .sql database export file (from phpMyAdmin) safe, ideally on an external drive or cloud storage.
6. Verify your backups (optional): Verifying your backups is highly recommended. Set up a test WordPress installation and restore your backup to see if everything works as expected.

Creating a website backup using FTP downloads all the files using the FTP client. The database export is still handled through phpMyAdmin, not directly through FTP. The .htaccess file, if present, is also handled via FTP.

How to back up your website using Network Solutions’ Xcitium Backup

Our Xcitium Backup integration helps automate the backup process for your website files and databases. Once your site is connected, you can schedule recurring backups so you do not have to create each copy manually.

Here’s how to set it up:

1. Sign in to your Network Solutions account and select Security from the left navigation menu.
2. Go to Website Backups, find the website you want to protect, and select Manage.
3. Under Manage Xcitium, select Manage again to open the Xcitium Backup dashboard.
4. Open Select Site and choose the domain you want to back up. Then select Backup to begin the setup. Your website must already be added to Xcitium Backup before you can complete this step.
5. Select Backup Settings and enter your website connection details, including your URL, FTP or SFTP credentials, hostname, and root directory.
6. Select Test Connection. If the connection is successful, Xcitium should be able to access the files required for your backups. Websites that use a CMS such as WordPress, Joomla, or Drupal should also have their databases added to the backup.
7. Set your preferred backup schedule. Xcitium lets website owners automate recurring backups and choose when they run. You can also configure notifications for failed backups.

Once your schedule is active, Xcitium can handle recurring backups automatically. It is still worth reviewing your backup settings periodically, especially after major website changes, to make sure the files and databases you need are included.

Note: Process is current at time of writing but may vary slightly following UI updates. Please refer to our help article for up-to-date steps.

Why choose Xcitium Backup?

A website backup is only useful if it is recent, accessible, and easy to restore when something goes wrong. Xcitium Backup helps cover those basics by combining automated backups, separate backup storage, on-demand backup options, and flexible restoration options. It can protect both website files and databases, giving site owners a more complete recovery point if data is deleted, corrupted, or changed unexpectedly.

Here are some of the key features available with Xcitium Backup:

• Automated backups
• Separate backup storage
• On-demand backups
• Flexible restorations
• Multiple website coverage
• Backup monitoring and notifications

Automated backups

Xcitium lets you automatically back up your website on a recurring schedule rather than relying on manual backups. You can set your backup schedule to run daily, weekly, or monthly and choose when each backup starts.

The right frequency depends on how often your site changes. An eCommerce store that receives new orders every day may benefit from more frequent backups than a small informational website that changes only occasionally.

Separate backup storage

Keeping every backup on the same server as your live website creates a single point of failure. Xcitium stores backup data separately from your live website, helping provide an additional recovery option if your hosting environment experiences an error or other disruption.

Storing backups separately from your live website also helps reduce the risk of losing both your website and its backups during the same incident.

On-demand backups

Scheduled backups provide regular protection, but there are times when waiting for the next scheduled backup is not ideal. Xcitium also supports on-demand backups, allowing you to create a fresh backup when needed.

This can be useful before updating your website, changing plugins or themes, editing important files, or making other major changes. If something goes wrong, you have a recent version available for recovery.

Flexible restorations

A recovery does not always require rolling back your entire website. Xcitium lets you restore all website files, select specific files or folders, or restore the website database.

That flexibility can save time when a problem affects only one part of your site. For example, you can recover selected files without replacing unrelated files that are still working correctly.

Multiple website coverage

If you manage more than one website, Xcitium allows you to manage multiple websites from a centralized backup dashboard and assign them to the appropriate backup licenses. This gives businesses with several websites a central place to manage backup coverage instead of treating each site as a completely separate process.

Backup monitoring and notifications

Creating backups is only part of maintaining a reliable backup strategy. You also need to know whether they completed successfully. Xcitium provides backup history and status information, while its notification settings can be configured to send alerts for backup activity or failures.

Checking this information periodically can help you identify failed backups before you need a recovery copy.

How often should you back up your website?  

You should back up your website as often as your site changes. For most sites on web hosting, daily backups work best, while smaller or rarely updated sites may only need weekly or monthly backups. If you run a busy WordPress site or add new content often, more frequent backups help protect your work and keep your data safe.

Think of a backup as your website’s latest picture if anything happens; you can go back to that picture instead of losing all the new things you’ve added.

Here’s a general guideline:

• Daily backups: If your website is dynamic and frequently updated, such as an eCommerce site with new products added daily or a news site with constant articles, consider daily backups. If you’re unsure whether your site updates often, understanding the difference between a static vs dynamic website can help you decide how frequently you should back up your content.
• Weekly backups: For websites that have regular updates but not daily, like a blog or portfolio site, a weekly backup might be sufficient. This strikes a balance between backup protection and not overwhelming your backup process.
• Monthly backups: If your website’s content changes infrequently, such as a small business website with static information, a monthly backup should suffice. However, it’s a must to back up your website to avoid data loss.
• Before significant updates: Before making major updates or changes to your website, it’s good practice to perform a backup. This provides a restore point in case something goes wrong during the update.

What are the best practices for website backups? 

The best practices for website backups focus on protecting your site’s content, keeping multiple copies of your data, and testing your backups regularly. Many site owners follow the 3-2-1 rule, which stores backups in different locations such as cloud storage and an external hard drive.

Here are some best practices that help keep your website backups reliable:

• Implement a 3-2-1 backup strategy.
• Schedule regular backups.
• Regularly test your backup restorations.
• Secure backup files and access credentials.
• Stay updated with evolving backup technologies.

Implement a 3-2-1 backup strategy

A time-tested strategy, the 3-2-1 backup principle provides a robust foundation for data protection: 

• 3 copies: Keep three copies of your website data: the original and two backups. This gives you redundancy and lowers the risk of losing your website data.
• 2 different media: Store your backups on two different types of storage media, such as external hard drives and cloud servers. This guards against data loss due to a single technology failure.
• 1 offsite backup: Secure one copy of your backup offsite–away from your physical location. This shields your data from local disasters like fires, floods, or theft.

Schedule regular backups

Maintain a regular backup schedule so you always have a recent version of your website ready if something goes wrong. Automate the process if possible. The backup plugin or service handles the work for you. This reduces human error and keeps your backups consistent.

Regularly test your backup restorations

Backing up your website is only half the battle. Regularly testing the restoration process is equally important. Run practice restores to confirm your backup files work and can bring your website back online if needed.

This proactive approach helps you catch any issues before they become critical, giving you the confidence that your backups are reliable and effective.

Secure backup files and access credentials

While backups protect against data loss, they can also become vulnerable if not properly secured. Encrypt your backup files to prevent unauthorized access and only allow those with the appropriate decryption keys.

Be sure to safeguard access credentials to your backup storage locations. Use strong, unique passwords and consider multi-factor authentication for an extra layer of protection.

Stay updated with evolving backup technologies

The digital landscape is ever-changing, and backup technologies evolve to meet new challenges. Keep a watchful eye on emerging backup solutions and methodologies that enhance your data protection. Don’t forget to regularly update your backup software and tools to benefit from the latest security patches and features.

Frequently asked questions

Start backing up your website today

Knowing how to back up a website helps protect your files, database, and settings from unexpected problems. Before your next update or design change, create a website backup so you always have a safe copy of your site.

If you want a simpler option, automated tools like Xcitium can handle your web backups for you.

For extra peace of mind, check out our related cWatch (website protection) and SSL certificates.