Use this checklist to verify that your WordPress backup setup is actually protecting your site — not just technically running.
Setup
- ☐ Automated backups are configured and running on a schedule
- ☐ Both the database and files are included in each backup
- ☐ Backups are stored off-site, separate from the hosting server
- ☐ Cache files, logs, and temporary files are excluded
- ☐ Backup frequency matches the site’s activity level (minimum: daily)
Monitoring
- ☐ Failure alerts are configured and go to someone who will act on them
- ☐ The most recent backup completed successfully
- ☐ Storage destination has sufficient space and is accessible
- ☐ Backup logs have been reviewed recently
Retention
- ☐ Multiple restore points exist (minimum: 7 days of daily backups)
- ☐ Retention policy is defined and enforced — old backups are being cleaned up automatically
Recovery
- ☐ A restore has been tested at least once in the last 6 months
- ☐ The restore process is documented — someone knows how to do it under pressure
- ☐ Recovery time is acceptable for the business — you know how long a full restore takes
How many boxes are unchecked?
If more than one or two items are unchecked, your backup setup has gaps that need addressing. The most critical ones are off-site storage, daily frequency, failure alerts, and a tested restore.
Need help getting your backup setup to this standard? Our WordPress maintenance service covers all of this. A website checkup will tell you exactly where your current setup stands. More in the backups knowledge base.