How to Manually Back Up a WordPress Site (Files + Database)

1/15/2026 · 3 min read

#wordpress#backup#security#tutorial

Manual backups are the safest way to keep full control of your WordPress site. This guide walks you through backing up files and database without relying on plugins.

What a complete backup includes

You need both:

  • Files: WordPress core, themes, plugins, and uploads (especially /wp-content/)
  • Database: posts, pages, settings, users, and plugin data

If you only back up files, you'll lose content and settings. If you only back up the database, you'll lose themes, plugins, and media.

Before you start

Have these ready:

  • SFTP/FTP or hosting file manager access
  • Database access (phpMyAdmin or similar)
  • A local folder with enough free space

If your site is large, plan 30-60 minutes for downloads.

Step 1: Back up your WordPress files

Option A: SFTP/FTP (most reliable)

  1. Connect to your server with SFTP/FTP.
  2. Navigate to your WordPress root (often public_html).
  3. Download the entire WordPress directory to your computer.

Option B: cPanel File Manager (faster for large sites)

  1. Open File Manager in your hosting panel.
  2. Select the WordPress root folder.
  3. Compress it into a .zip file.
  4. Download the .zip to your computer.

Tip: Ensure /wp-content/uploads/ is included. This folder contains all media files.

Step 2: Export your WordPress database

Using phpMyAdmin

  1. Open phpMyAdmin in your hosting panel.
  2. Select your WordPress database.
  3. Click Export.
  4. Choose Quick and SQL.
  5. Click Go to download the .sql file.

Using WP-CLI (if available)

Run:

wp db export wordpress-backup.sql

Step 3: Verify the backup

Do a quick sanity check:

  • [ ] The files download completed without errors.
  • [ ] The .sql file opens and starts with -- comments and CREATE TABLE lines.
  • [ ] File size looks reasonable for your site.

If possible, test a restore on a staging site. A backup is only useful if it restores cleanly.

Step 4: Store backups safely

Follow a simple 3-2-1 approach:

  • Keep 3 copies of your backup.
  • Store them on 2 different types of storage.
  • Keep 1 copy off-site (cloud storage or external drive).

Use clear file names like:

site-backup-2026-01-15-files.zip
site-backup-2026-01-15-db.sql

Step 5: (Optional) Quick restore outline

If you ever need to restore:

  1. Upload the files to the server.
  2. Create a new database and import the .sql file.
  3. Update wp-config.php with the new database credentials.
  4. If the domain changed, run a search and replace for the old URL.

Common mistakes to avoid

  • Backing up only /wp-content/uploads/
  • Forgetting the database export
  • Storing backups on the same server
  • Never testing a restore

How often should you back up?

  • Active sites (daily updates): weekly file backup, daily database backup
  • Mostly static sites: monthly full backup
  • Before big changes: always take a full backup

Conclusion

Manual backups take a bit longer than plugins, but you get full control and a reliable safety net. If you follow the steps above, you will always have a clean, restorable copy of your WordPress site.

Category: WordPress