BackupYourSite is a WordPress backup plugin that backs up your files and database on a
schedule, stores the archives on your own server, and restores them again from the WordPress
admin in one click. An optional cloud destination adds a verified offsite copy when you want
one — everything else works with no account at all.

It is built for cheap, limited hosting. The backup runs in small steps rather than one long
request, so a short PHP time limit or a small memory limit slows it down instead of breaking
it. If a step is killed, the next one carries on from where it stopped.

Core backup features

Daily, weekly or manual scheduled backups of files and database.
A real database dump written by PHP — no mysqldump, no shell access needed.
Archives split into size-limited zip volumes so nothing has to be handled in one piece.
Incremental backups measured against the last full backup, so restoring never needs more
than two backups.
Every backup is verified before it counts: the archives are integrity-checked, the
database dump must end with its completion marker, and every file the plugin promised to
archive must actually be in the archive. A backup that does not pass is marked incomplete,
and old backups are never deleted after a run that was not clean.
One-click restore of files, database, or both — with a snapshot of the current site taken
first.
One retention setting: delete backups older than N days. The most recent working backup is
never deleted, and nothing is ever deleted after a backup that did not finish cleanly.
Failure emails if a scheduled backup does not complete.

Optional: offsite cloud backup

Backups kept on the same server share that server’s fate. If you want an offsite copy, you
can connect a BackupYourSite account on the Account screen and add “Cloud” as a destination.
This is entirely optional — every feature above works without an account, and the plugin
makes no connection to our service until you paste a connection code yourself.

Your wp-config.php is never included in an archive that is uploaded to a cloud destination,
so your WordPress authentication keys, salts and database credentials stay on your own server.
See “External Services” and the FAQ below for exactly what is sent and when.

What it does not do

It cannot restore a site that no longer runs. This plugin lives inside WordPress; if
WordPress cannot start — a white screen, a fatal error, a database connection error, a
suspended account — the plugin cannot start either. For that case, download the archive
from the Backups screen and restore it through your hosting control panel.
Backups stored on this server share this server’s fate. They protect you from mistakes,
bad updates and corruption. They do not protect you from losing the server.
Multisite is not supported yet.

Who this is for

Anyone who wants scheduled WordPress backups and a real one-click restore without shell
access or a mysqldump-capable host: small business sites, agencies managing client sites on
budget hosting, and anyone planning to migrate a WordPress site and wanting a verified,
restorable copy of it first.

External Services

This plugin works completely on its own and makes no outbound connection by default. No
account is required, and nothing leaves your server unless you deliberately connect one.

Requests to your own site (always, no account needed)

A short request back to this site’s own admin-ajax.php to continue a running backup.
A request to this site’s own backup folder to test whether the web server would let a
stranger download your backups.

Both of these stay on your own server and are not an external service.

BackupYourSite cloud storage (optional, off until you connect it)

If — and only if — you create a BackupYourSite account and paste a connection code into the
plugin’s Account screen, the plugin talks to the BackupYourSite backup service at
https://app.backupyoursite.com, operated by BackupYourSite.

What is sent, and when:

When you press Connect: the connection code you pasted, this site’s home URL, this
site’s name, and the plugin version. The service returns a token scoped to this site only.
When a backup runs with “Cloud” selected as a destination: the backup archives
themselves are uploaded in parts. Those archives contain your site files and a full copy of
your database, which includes user accounts, email addresses, orders, comments and any other
personal data your site stores. A SHA-256 checksum and the archive file names and sizes are
sent with each part. wp-config.php and the other site configuration files listed in the
FAQ below are deliberately left out of any archive that goes to a cloud destination, so your
WordPress authentication keys and salts are never uploaded.
When you open the Account screen or press Refresh: a request asking for your plan name
and storage quota. The service records this as a liveness ping.
When you restore from a cloud backup: a request for a time-limited download URL, then
the download of the archive volumes.
When you delete a cloud backup or disconnect the site: the backup set identifier, or a
disconnect request for this site’s token.

Nothing is sent before you connect. No usage statistics, telemetry or analytics are ever
sent, connected or not. Your account password is never asked for and never stored.

Service terms: https://backupyoursite.com/terms/
Privacy policy: https://backupyoursite.com/privacy/