A tested backup turns a compromise from a crisis into an inconvenience. It is the most valuable single security investment you can make.
WHAT A USABLE BACKUP LOOKS LIKE
Contains both files and the database Stored somewhere other than the server it came from Recent enough that losing everything since is acceptable Retained long enough to predate a slow-burning infection Actually tested by restoring it at least once
WHY OFF-SERVER MATTERS
A backup stored only on the same account is lost in the same event that loses the site, and ransomware and attackers delete backups they can reach. Send copies to Google Drive, Dropbox or your own computer.
WHY RETENTION MATTERS
SEO spam infections often go unnoticed for weeks. If you keep only three days of backups, every one of them may already be infected. Keep at least one monthly copy.
HOW TO TAKE THEM
cPanel > Backup for a full account archive, JetBackup for server-side restore points within your plan's retention, or a plugin such as UpdraftPlus sending to remote storage on a schedule.
TESTING
Restore to a staging subdomain occasionally. An untested backup is an assumption.
