Ultimately the website owner is responsible for backups, even if a host, developer or care plan performs them. Hosting backups are a useful extra but are not always complete, off-site, or easy to restore. The safe setup is automatic off-site backups you can access, a written agreement on who checks them, and a restore tested at least once. Ask: “If the site disappeared today, how would we get it back?”
- You own the risk, so own the backup plan.
- Host backups help but should not be the only copy.
- Off-site means stored away from your hosting.
- Test a restore; untested backups are guesses.
- Agree in writing who does what.
Who usually does what?
| Party | Often provides | Limits |
|---|---|---|
| Host | Server backups, sometimes daily | Retention, restore fees, same server |
| Developer during build | Backups before changes | Ends at handover unless agreed |
| Care plan | Scheduled off-site backups, restores | Only while the plan is active |
| Owner | Final responsibility, access to copies | Needs a plan and logins |
Malware removal, blacklist cleanup, updates and a hardened setup with backups and a firewall. Free first check of your site.
What does a good backup setup look like?
- Daily automatic backups for active sites (weekly for rarely changed sites).
- Stored off-site, such as cloud storage you own.
- Files and database both included.
- Retention of at least 30 days.
- A test restore to staging at least once a year.
What happens when it is unclear?
Picture an owner whose site is hacked. The host’s backups contain the infection from three weeks ago; the developer assumed the host was backing up; nobody has a clean copy from before. Weeks of rebuild follow. One clear line in an agreement would have avoided it. See how to back up WordPress and what to do when your website is down.
Planning a website?
I design and build WordPress and Elementor websites for small businesses, from $899 for a complete site, with training at handover so you can edit it yourself. Get a price in two minutes with the website cost calculator, or book a free call to talk it through.
Frequently asked questions
Does my hosting company back up my website?
Many do, but retention, completeness and restore options vary. Do not rely on it alone.
Who is responsible for website backups?
The owner carries the risk, so should ensure a clear plan, even if others perform backups.
What is an off-site backup?
A copy stored away from your hosting server, such as in your own cloud storage.
How often should I test restoring a backup?
At least once a year, to staging.
Sources
Malware removal, blacklist cleanup, updates and a hardened setup with backups and a firewall. Free first check of your site.
More WordPress guides
Rather have an expert run your WordPress site?
Tanvir H is a Bangladesh-based WordPress and Elementor web designer with 7+ years of experience, 650+ projects and a 4.9 client rating. New websites, redesigns, fixes, speed, security and SEO, handled by one expert who explains everything in plain English and works with clients worldwide.
