Why I Don’t Not Use WordPress Backup Plugins

TLDR: My Approach in Practice

  • No WordPress backup plugins installed.
  • Host-level backups running automatically in cPanel.
  • Manual backups downloaded periodically for peace of mind.

I don’t rely on WordPress plugins for site backups at all – because my hosting provider on the server level already provides backing up files, databases, emails, and other stuff by default. With JetBackup 5 running automatically in cPanel in my case, my sites are protected without extra clutter.

Having backups already setup via cPanel, here are several reasons I avoid WordPress backup plugins. They all come down to performance, security, and simplicity.

Performance & Bloat

Backup plugins add unnecessary weight to WordPress. They can schedule resource-heavy tasks that slow down performance. Since my host already handles backups at the server level, adding a plugin would be unnecessary.

Storage Clutter

Plugins typically store backups inside the hosting account, filling disk space with duplicate files, since they are already included in the host-level backups. By skipping plugins, I avoid messy storage.

Security Risks

Every plugin increases the attack surface of a WordPress site. Backup plugins require elevated permissions to access files and databases, making them potential targets. With the cPanel backups already running, I don’t need to expose my site to that risk.

Manual Backups for Extra Safety

Even with host-level backups, I like to keep my own copies, by downloading them onto my computer. At least the site’s files and database:

  • Website root files: I download the entire site directory. On Linux-based servers, usually public_html folder.
  • Database: I export the database via phpMyAdmin.
    This way, I always have a local copy stored safely on my computer.
Posted in

Leave a Reply

Your email address will not be published. Required fields are marked *