The error message was only four words, but they hit like a sledgehammer: “This site can’t be reached.”
I stared at my laptop screen, waiting for my website to load. Maybe the server was down. Maybe they were doing maintenance. Maybe if I refreshed one more time…
But deep down, I already knew. My hosting company had vanished overnight. Two years of carefully crafted content, custom design work, and thousands of hours of writing had evaporated into digital dust. No warning. No goodbye email. No chance to grab my files.
Just gone.
The only thing standing between me and complete catastrophe was a folder buried on my desktop labeled “Blog Posts,” random drafts and copies I’d saved out of habit. That accidental backup became my lifeline. After decades working with computers, I’d made the classic mistake: assuming someone else was handling the critical stuff. That Tuesday morning taught me the most expensive lesson in digital ownership: your website is only as secure as your last backup.
Why Aren’t Your Hosting Company’s Backups Enough?
Most hosting companies include automatic backup services. Daily or weekly snapshots stored on separate servers for 30-90 days. Professional management, enterprise-grade infrastructure, often one-click restoration. For day-to-day protection against small problems, they work fine.
But host backups have one critical weakness: they’re only as reliable as your hosting company. (See what happened when a cloud region was bombed) When my host vanished overnight, those backups disappeared too. A hacker who compromises your server can corrupt the backups stored on the same infrastructure. A billing dispute or company failure wipes everything at once. I don’t like the way hosts sell these backups. A checkmark next to “daily backups” on a pricing page lets owners stop thinking about the problem, and when the host fails, the owner loses years of work while the host just closes its doors. Host backups are your first line of defense. They should never be your only line. I had a dedicated server once, around 15 years ago, and it cost me something like $500 a month. The hosting company went belly up without telling anybody. One day it was just gone.
Watch: How to Backup Your WordPress Website in 5 Min, Create a Pro Website
What Is the 3-2-1 Backup Rule?
The minimum backup setup for any business that runs through a website.
Data recovery professionals follow the 3-2-1 backup rule, and website owners should too. Three copies of critical data (your live site plus two backups). Two different storage types (host backups plus cloud storage). One off-site location (cloud storage or external drives stored elsewhere). I treat the 3-2-1 rule as the minimum for anyone whose business runs through a website. Two copies sitting with the same hosting company count as one copy to me, because they go down together. For a WordPress site, this translates to automatic daily backups through your hosting provider, weekly backups via a WordPress plugin stored in cloud services like Google Drive or Dropbox, and monthly manual downloads kept on your computer.
Which WordPress backup plugins should you use?
A WordPress backup plugin puts a copy of your site in your hands instead of your host’s. On any site I cared about, I’d set one up before I touched a theme or wrote a post. The plugin builds complete copies on a schedule and sends them to more than one storage location.
UpdraftPlus is the most popular with over 3 million installations. BackWPup and Duplicator are solid alternatives with simpler interfaces. Most offer free versions for basic needs and premium features for advanced scheduling and multi-location storage.
I relied on UpdraftPlus for years. It seemed reliable despite being slow and complex. But when crisis struck, a critical restore failed completely. That failure taught me a painful truth: plugin backups can be unreliable exactly when you need them most. The fix is simple. Test your restoration process regularly before you desperately need it.
These days my website backups go straight to Backblaze. I had UpdraftPlus sending them to OneDrive, and OneDrive is slow too, and I don’t want to be tied to Microsoft. Updraft supports Backblaze, so that part was easy. I also had Claude write me my own backup utility that puts a second copy there. Updraft talks to the server for every single file and takes upwards of an hour. Mine doesn’t, and a full-site backup finishes in about five minutes.
Cloud Storage and Manual Backups
Cloud services like Google Drive, Dropbox, and Amazon S3 provide off-site protection that survives hosting company failures. Many backup plugins upload copies automatically to these services. Even if your hosting provider disappears tomorrow, your backup remains accessible. For ultimate control, manual backups involve downloading your website files and database directly from your hosting account through the file manager and phpMyAdmin. Time-consuming, but you know exactly what’s saved and where. I keep hundreds of my videos and audio files on Cloudflare, and storing all of them cost me under a dollar last month.
| Backup type | What it gives you | Weak point |
|---|---|---|
| Hosting company backups | Daily or weekly snapshots, often with one-click restore | Vanish with the host, and a hacker on the server can corrupt them |
| Backup plugin (UpdraftPlus, BackWPup, Duplicator) | Scheduled full copies sent to more than one location | A restore can fail exactly when you need it |
| Cloud storage (Google Drive, Dropbox, Amazon S3, Backblaze) | An off-site copy that survives a host failure | Some services are slow; OneDrive was slow for me |
| Manual download (file manager and phpMyAdmin) | You know exactly what is saved and where | Time-consuming and needs more technical knowledge |
Security: Preventing the Disaster in the First Place
Backups help you recover. Security measures prevent the problem. Plugins like Wordfence (protecting over 5 million sites) and Sucuri provide firewall protection, malware scanning, and intrusion detection. Wordfence is complete, though its features can overwhelm beginners. Default settings provide excellent protection without deep technical knowledge.
If your hosting provider offers staging environments, use them. A staging site is a complete copy of your website where you can test plugin updates, theme changes, and WordPress upgrades safely. If something breaks on the staging site, your live site stays untouched.
My own backup utility taught me that one. It was a nightmare to test. I set up a fake website to run it against, and a bug in my software overwrote my live site instead, so I had to restore from backup. Claude, who wrote the code, apologized.
How often should you back up a website?
The best backup system fails if you don’t maintain it. Set monthly reminders to verify backup logs and confirm files are being created. Test a restoration quarterly. Review your entire strategy annually.
I learned what an untested backup costs when I ran computer operations at a national retailer.
A consultant asked to replace a disk throwing weird errors. It was mirrored, so I said go ahead. Pulling it triggered a firmware bug, the SQL database corrupted, the DR site was down and the backups were bad. We were down 72 hours, almost to the minute, and lost an hour of data that took months to recover. I’ll never again trust a backup I haven’t watched restore.
Document your recovery process before crisis strikes. Know where you store backups, how to access them, and what restoration steps you need. Write it down. Future you’ll be grateful when panic sets in.
I’ll never again trust a backup I haven’t watched restore.
The experience taught me that website security extends far beyond just backups. You need a complete protection strategy. Personal blog or business site, the principles of digital safety remain the same. The same goes for the software that holds your business records. When I cancelled QuickBooks in 2024, I learned the transactions don’t stay with you. QuickBooks Online leaves your data read-only for a year after you cancel, and then it’s gone. Fortunately I’d downloaded a worksheet with all of them first, because I’m not totally stupid. Only occasionally. I use Stripe exclusively now, and I export before I cancel anything.
How Much Does a WordPress Backup Cost?
Backup solutions range from free hosting provider services to premium options at $10-$20 monthly. My hosting company failure cost three days of frantic rebuilding, several hundred dollars in emergency hosting costs, and immeasurable stress. A $5 monthly backup plugin would have prevented everything.
For content creators and business owners, protecting your digital assets is just as important as protecting your intellectual property. Your website represents years of work, and losing it can devastate your online presence and credibility.
My take
An untested backup is a guess. I learned that at a national retailer when a disk swap corrupted the database, the DR site was down and the backups were bad, and we were down 72 hours. Keep three copies, put one somewhere other than your host, and test a restore every quarter. Export your data before you cancel any service. A $5 plugin costs less than one bad night.
Start Today
Contact your hosting provider about their backup services. If you’re on WordPress, install a backup plugin and configure automated weekly backups stored in cloud storage. Then test it. Create a backup, verify you can access the files, and understand the restoration process.
If you’re not comfortable with the technical details, hire a WordPress professional to set up a complete backup strategy. It takes a few hours. It makes me angry when a business owner pours years of writing into a site and trusts every copy of it to one hosting company, because the owner pays for that when the host goes under or gets hacked, and the host moves on.
Professional WordPress services for backup setup and site protection →
Frequently Asked Questions
The book on this: Family Cybersecurity is 231 pages on protecting what a household can’t afford to lose, including why backup is the step people skip until the morning they cannot.
- How to Implement the 3-2-1 Backup Rule for Cloud Data, U.S. Chamber of Commerce (CO)
- UpdraftPlus: WP Backup & Migration Plugin, WordPress.org
- What happens to my data after cancelling my QuickBooks subscription?, Intuit QuickBooks
- Wordfence Security: Firewall, Malware Scan, and Login Security, WordPress.org
