A real backup.
WHAT A BACKUP MUST INCLUDE
Files Databases Email, if it matters
Files alone are not a backup of a database-driven site.
WHERE IT MUST BE STORED
Off the server.
A backup on the same account is lost in the same event.
HOW TO TAKE ONE
cPanel full account backup includes everything.
Generate it, download it, then delete it from the server.
THAT LAST STEP
Leaving a full backup in your account means anyone finding it has your entire site and database.
HOW OFTEN
Depends on how much you can afford to lose.
Weekly for an active site. Before any significant change, always.
HOW MANY TO KEEP
Several, from different dates.
A single backup taken after a problem started is useless.
TESTING RESTORATION
Occasionally, restore something and confirm it works.
An untested backup is a hope.
