How to back up a WordPress site (and actually test the backup)
The backup plugin you choose matters less than where the backup lives and whether you've tried restoring from it.
What a real backup includes
A complete WordPress backup is files (themes, plugins, uploads, wp-config) plus the database. Missing either makes the backup useless.
Many hosts back up nightly to the same server. That helps with accidental file deletion but does nothing if the server itself is compromised or wiped.
Where the backup should live
Follow the 3-2-1 rule: three copies, two different media, one offsite. In practice: your host's backup, a plugin-driven backup to S3 or Google Drive, and an occasional local download.
If your backup lives only on your host, a billing dispute, malware, or account suspension takes both the site and the recovery option with it.
The step everyone skips
Once a quarter, restore a backup to a staging site and confirm it actually works. Most untested backups have at least one problem — missing tables, corrupted uploads, plugin license conflicts — that only surface during a real restore.
An untested backup is just hope in a tar file.
Questions readers ask about this topic
How often should I back up WordPress?
Which backup plugin is best?
Does WordPress back itself up?
Where to go next on Hostilo
One email a month. Hosting deals, new reviews, no fluff.
The WordPress performance checklist that actually works
Twelve changes that move real Core Web Vitals numbers, ranked by impact, not popularity.
How to speed up WordPress: the only checklist you need
Ten changes that actually move the needle on WordPress speed — ranked by impact, not by what plugin authors want you to install.