Three Copies Of Important Data
The first copy is the live website. The second and third are backups. Keeping only one backup leaves little protection if that copy is incomplete or corrupted.
Two Different Storage Types
Do not keep every copy in the same hosting account or on the same device. Use different systems, such as server backup storage plus a local or cloud copy.
One Copy Off Site
An off-site copy protects against server failure, account deletion, physical damage, and certain security incidents.
Back Up Files And Databases
A complete website backup usually needs both. Files contain code and media, while databases contain content and settings.
Choose A Frequency Based On Change
A store taking orders every day needs more frequent backups than a static brochure site. The right question is how much recent work you can afford to lose.
Test Restoration
Backups should be opened and restored periodically. A file existing is not proof that it is complete or usable.
Protect Backup Credentials
Use separate credentials and multi-factor authentication for backup storage when possible. If an attacker controls both the website and the backup account, recovery becomes harder.