{"id":2932,"date":"2025-12-05T15:11:02","date_gmt":"2025-12-05T12:11:02","guid":{"rendered":"https:\/\/www.dchost.com\/blog\/full-cpanel-backup-and-restore-guide-files-databases-and-emails\/"},"modified":"2026-11-04T09:25:10","modified_gmt":"2026-11-04T06:25:10","slug":"cpanel-backup-restore-files-databases-email","status":"publish","type":"post","link":"https:\/\/www.dchost.com\/blog\/en\/cpanel-backup-restore-files-databases-email\/","title":{"rendered":"cPanel Backup and Restore: Files, Databases and Email"},"content":{"rendered":"<div class=\"dchost-blog-content-wrapper\"><div id=\"toc_container\" role=\"navigation\" aria-label=\"Table of Contents\" data-nosnippet class=\"toc_transparent no_bullets toc_numbered toc_title_center\"><p class=\"toc_title\">\u0130\u00e7indekiler<\/p><ul class=\"toc_list\"><li><a href=\"#Why_cPanel_Backups_Matter_More_Than_You_Think\"><span class=\"toc_number toc_depth_1\">1.<\/span> Why cPanel Backups Matter More Than You Think<\/a><\/li><li><a href=\"#What_a_Full_cPanel_Backup_Actually_Contains\"><span class=\"toc_number toc_depth_1\">2.<\/span> What a Full cPanel Backup Actually Contains<\/a><\/li><li><a href=\"#Backup_Types_in_cPanel_Full_vs_Partial\"><span class=\"toc_number toc_depth_1\">3.<\/span> Backup Types in cPanel: Full vs Partial<\/a><ul><li><a href=\"#Full_Account_Backup\"><span class=\"toc_number toc_depth_2\">3.1.<\/span> Full Account Backup<\/a><\/li><li><a href=\"#Home_Directory_Backup\"><span class=\"toc_number toc_depth_2\">3.2.<\/span> Home Directory Backup<\/a><\/li><li><a href=\"#Database_Backups\"><span class=\"toc_number toc_depth_2\">3.3.<\/span> Database Backups<\/a><\/li><li><a href=\"#Email_Forwarders_and_Filters\"><span class=\"toc_number toc_depth_2\">3.4.<\/span> Email Forwarders and Filters<\/a><\/li><\/ul><\/li><li><a href=\"#Preparing_Your_Account_for_Safe_Backups\"><span class=\"toc_number toc_depth_1\">4.<\/span> Preparing Your Account for Safe Backups<\/a><ul><li><a href=\"#Check_Disk_Usage_and_Quotas\"><span class=\"toc_number toc_depth_2\">4.1.<\/span> Check Disk Usage and Quotas<\/a><\/li><li><a href=\"#Remove_Old_Local_Backups_and_Temporary_Files\"><span class=\"toc_number toc_depth_2\">4.2.<\/span> Remove Old Local Backups and Temporary Files<\/a><\/li><li><a href=\"#Review_SSL_and_DNS_Before_Major_Changes\"><span class=\"toc_number toc_depth_2\">4.3.<\/span> Review SSL and DNS Before Major Changes<\/a><\/li><\/ul><\/li><li><a href=\"#Step-by-Step_Creating_a_Full_cPanel_Backup\"><span class=\"toc_number toc_depth_1\">5.<\/span> Step-by-Step: Creating a Full cPanel Backup<\/a><ul><li><a href=\"#1_Log_In_and_Open_the_Backup_Tool\"><span class=\"toc_number toc_depth_2\">5.1.<\/span> 1. Log In and Open the Backup Tool<\/a><\/li><li><a href=\"#2_Generate_a_Full_Backup\"><span class=\"toc_number toc_depth_2\">5.2.<\/span> 2. Generate a Full Backup<\/a><\/li><li><a href=\"#3_Choose_Backup_Destination\"><span class=\"toc_number toc_depth_2\">5.3.<\/span> 3. Choose Backup Destination<\/a><\/li><li><a href=\"#4_Enter_Email_Notification_Recommended\"><span class=\"toc_number toc_depth_2\">5.4.<\/span> 4. Enter Email Notification (Recommended)<\/a><\/li><li><a href=\"#5_Start_the_Backup_and_Wait\"><span class=\"toc_number toc_depth_2\">5.5.<\/span> 5. Start the Backup and Wait<\/a><\/li><li><a href=\"#6_Download_and_Store_Offsite\"><span class=\"toc_number toc_depth_2\">5.6.<\/span> 6. Download and Store Offsite<\/a><\/li><\/ul><\/li><li><a href=\"#Backing_Up_Files_Databases_and_Emails_Individually\"><span class=\"toc_number toc_depth_1\">6.<\/span> Backing Up Files, Databases and Emails Individually<\/a><ul><li><a href=\"#Home_Directory_Backup_Including_Website_Files\"><span class=\"toc_number toc_depth_2\">6.1.<\/span> Home Directory Backup (Including Website Files)<\/a><\/li><li><a href=\"#Database_Backups_via_cPanel\"><span class=\"toc_number toc_depth_2\">6.2.<\/span> Database Backups via cPanel<\/a><\/li><li><a href=\"#Email_Data_Backups\"><span class=\"toc_number toc_depth_2\">6.3.<\/span> Email Data Backups<\/a><ul><li><a href=\"#1_Forwarders_and_Filters\"><span class=\"toc_number toc_depth_3\">6.3.1.<\/span> 1. Forwarders and Filters<\/a><\/li><li><a href=\"#2_Server-Side_Mailboxes\"><span class=\"toc_number toc_depth_3\">6.3.2.<\/span> 2. Server-Side Mailboxes<\/a><\/li><li><a href=\"#3_Client-Side_Copies_Outlook_Thunderbird_Apple_Mail\"><span class=\"toc_number toc_depth_3\">6.3.3.<\/span> 3. Client-Side Copies (Outlook, Thunderbird, Apple Mail)<\/a><\/li><\/ul><\/li><\/ul><\/li><li><a href=\"#Automating_Backups_with_Cron_Jobs_and_Offsite_Storage\"><span class=\"toc_number toc_depth_1\">7.<\/span> Automating Backups with Cron Jobs and Offsite Storage<\/a><ul><li><a href=\"#cPanels_Built-In_Automatic_Backups\"><span class=\"toc_number toc_depth_2\">7.1.<\/span> cPanel\u2019s Built-In Automatic Backups<\/a><\/li><li><a href=\"#Cron_Jobs_and_Custom_Backup_Scripts_VPS_Dedicated\"><span class=\"toc_number toc_depth_2\">7.2.<\/span> Cron Jobs and Custom Backup Scripts (VPS \/ Dedicated)<\/a><\/li><li><a href=\"#Offsite_and_Versioned_Backups\"><span class=\"toc_number toc_depth_2\">7.3.<\/span> Offsite and Versioned Backups<\/a><\/li><\/ul><\/li><li><a href=\"#Restoring_from_cPanel_Backups_Safely\"><span class=\"toc_number toc_depth_1\">8.<\/span> Restoring from cPanel Backups Safely<\/a><ul><li><a href=\"#Important_General_Rules_Before_Any_Restore\"><span class=\"toc_number toc_depth_2\">8.1.<\/span> Important General Rules Before Any Restore<\/a><\/li><li><a href=\"#Restoring_a_Full_cPanel_Backup\"><span class=\"toc_number toc_depth_2\">8.2.<\/span> Restoring a Full cPanel Backup<\/a><\/li><li><a href=\"#Restoring_a_Home_Directory_Backup\"><span class=\"toc_number toc_depth_2\">8.3.<\/span> Restoring a Home Directory Backup<\/a><\/li><li><a href=\"#Restoring_Databases\"><span class=\"toc_number toc_depth_2\">8.4.<\/span> Restoring Databases<\/a><ul><li><a href=\"#Method_1_Using_the_Backup_Interface\"><span class=\"toc_number toc_depth_3\">8.4.1.<\/span> Method 1: Using the Backup Interface<\/a><\/li><li><a href=\"#Method_2_Using_phpMyAdmin\"><span class=\"toc_number toc_depth_3\">8.4.2.<\/span> Method 2: Using phpMyAdmin<\/a><\/li><\/ul><\/li><li><a href=\"#Restoring_Email_Forwarders_and_Filters\"><span class=\"toc_number toc_depth_2\">8.5.<\/span> Restoring Email Forwarders and Filters<\/a><\/li><li><a href=\"#Restoring_Email_Messages\"><span class=\"toc_number toc_depth_2\">8.6.<\/span> Restoring Email Messages<\/a><\/li><\/ul><\/li><li><a href=\"#Testing_Verifying_and_Maintaining_Your_Backup_Plan\"><span class=\"toc_number toc_depth_1\">9.<\/span> Testing, Verifying and Maintaining Your Backup Plan<\/a><ul><li><a href=\"#Run_Periodic_Restore_Tests\"><span class=\"toc_number toc_depth_2\">9.1.<\/span> Run Periodic Restore Tests<\/a><\/li><li><a href=\"#Keep_a_Simple_Backup_Runbook\"><span class=\"toc_number toc_depth_2\">9.2.<\/span> Keep a Simple Backup Runbook<\/a><\/li><li><a href=\"#Common_Mistakes_to_Avoid\"><span class=\"toc_number toc_depth_2\">9.3.<\/span> Common Mistakes to Avoid<\/a><\/li><\/ul><\/li><li><a href=\"#Wrapping_Up_Build_a_Backup_Habit_Not_a_One-Time_Task\"><span class=\"toc_number toc_depth_1\">10.<\/span> Wrapping Up: Build a Backup Habit, Not a One-Time Task<\/a><\/li><\/ul><\/div>\n<h2><span id=\"Why_cPanel_Backups_Matter_More_Than_You_Think\">Why cPanel Backups Matter More Than You Think<\/span><\/h2>\n<p>When you manage websites, email and databases on a cPanel hosting account, a failed plugin update, a hacked script, a deleted folder or a corrupted database table can disrupt your site. A clean, recent backup that you can restore with confidence can substantially reduce recovery time.<\/p>\n<p>A clear backup routine should cover entire-account recovery as well as individual sites and email inboxes. This guide explains how to plan those backups and their restoration before an incident.<\/p>\n<p>We will walk through what a full cPanel backup actually includes, how to back up files, databases and emails step by step, where to store backups, and how to restore them safely. Whether you run a single business site, multiple client projects or an email-heavy domain, this article will give you a practical, repeatable backup and restore workflow you can trust.<\/p>\n<h2><span id=\"What_a_Full_cPanel_Backup_Actually_Contains\">What a Full cPanel Backup Actually Contains<\/span><\/h2>\n<p>Before you click any buttons, it helps to understand what a cPanel backup is and what it is not. A <strong>full cPanel backup<\/strong> taken from within your account is essentially a compressed archive of account-level files, databases and settings.<\/p>\n<p>A typical full backup contains:<\/p>\n<ul>\n<li><strong>Home directory files<\/strong>: Website files (public_html and subdirectories), custom scripts, uploaded media, configuration files, logs (depending on settings) and user-level config. Check exclusions and the actual archive contents before assuming every required file is included.<\/li>\n<li><strong>Databases<\/strong>: MySQL\/MariaDB databases attached to the account, including content, users and privileges.<\/li>\n<li><strong>Email data<\/strong>: Mailboxes, email folders (Inbox, Sent, custom folders), email accounts, forwarders and filters.<\/li>\n<li><strong>DNS zone settings (when cPanel manages DNS)<\/strong>: Zone file for your domains, addon domains and subdomains.<\/li>\n<li><strong>FTP accounts and settings<\/strong>: Additional FTP users and their directory mappings.<\/li>\n<\/ul>\n<p>In other words, a full cPanel backup provides an account archive for recovery on the same server or migration to another cPanel server. Confirm target compatibility and arrange administrator access for the full restore.<\/p>\n<p>A few important clarifications:<\/p>\n<ul>\n<li><strong>Backups are not snapshots of the whole physical server.<\/strong> They include only your cPanel account, not other customers or system-level services.<\/li>\n<li><strong>The native cPanel interface cannot automatically restore a full account backup.<\/strong> Arrange restoration through WHM with an administrator who has the necessary privileges. Provider plugins may offer separate restoration capabilities. For partial restores, cPanel gives you self-service tools.<\/li>\n<li><strong>Do not assume a backup captures a changing account at one exact instant.<\/strong> Plan file and database backups to cover the same recovery point. Depending on the application, this may require maintenance mode or pausing writes; choosing a low-traffic period alone does not ensure consistency. For a migration, pause application writes while creating the final backup or plan how to synchronize subsequent changes.<\/li>\n<\/ul>\n<p>Knowing this helps you decide when a full backup is appropriate (for example, before a big migration) and when partial backups of files, databases or email will be enough.<\/p>\n<h2><span id=\"Backup_Types_in_cPanel_Full_vs_Partial\">Backup Types in cPanel: Full vs Partial<\/span><\/h2>\n<p>cPanel offers two main backup paths:<\/p>\n<ul>\n<li><strong>Full Account Backups<\/strong><\/li>\n<li><strong>Partial Backups<\/strong>: Home directory, individual databases, email forwarders and filters<\/li>\n<\/ul>\n<h3><span id=\"Full_Account_Backup\">Full Account Backup<\/span><\/h3>\n<p>Full account backups are created from the <strong>Backup<\/strong> or <strong>Backup Wizard<\/strong> interface in cPanel. They cover account-level files, databases and settings and are useful when:<\/p>\n<ul>\n<li>You are <strong>migrating<\/strong> your account to another cPanel server.<\/li>\n<li>You are making <strong>major structural changes<\/strong> (rebuilding the site, changing CMS, hosting multiple new applications).<\/li>\n<li>You want a <strong>periodic full archive<\/strong> (e.g. monthly) of the account for long-term retention.<\/li>\n<\/ul>\n<p>Limitations to keep in mind:<\/p>\n<ul>\n<li>Full backups are <strong>resource-heavy<\/strong> and can take time on large accounts.<\/li>\n<li>Plan for a server administrator to restore a full account backup, rather than using cPanel&#8217;s partial-restore tools. For reseller accounts or <a href=\"https:\/\/www.dchost.com\/vps\">VPS<\/a>\/dedicated setups running cPanel &amp; WHM, confirm who has the necessary restoration access.<\/li>\n<\/ul>\n<h3><span id=\"Home_Directory_Backup\">Home Directory Backup<\/span><\/h3>\n<p>A <strong>Home Directory backup<\/strong> is a partial backup that includes:<\/p>\n<ul>\n<li>Website files within your home directory, including public_html and any subdomain or addon-domain document roots located there<\/li>\n<li>Custom folders in your home directory that belong to your web apps<\/li>\n<li>Other covered home directory data, including server-side email for your account\u2019s domains<\/li>\n<\/ul>\n<p>A home directory backup includes files you own and files you can access; inaccessible files you do not own and configured exclusions can leave gaps. Back up databases separately, and inspect the archive before restoring it rather than treating it as a website-only backup. Use a home directory backup when:<\/p>\n<ul>\n<li>You are making <strong>file-level changes<\/strong> (theme updates, plugin uploads, code deployments).<\/li>\n<li>You want a <strong>separate archive of your home directory<\/strong> for file-level recovery.<\/li>\n<\/ul>\n<h3><span id=\"Database_Backups\">Database Backups<\/span><\/h3>\n<p>cPanel lets you download <strong>individual database backups<\/strong> (as .sql.gz files) or export via phpMyAdmin. You should back up databases before:<\/p>\n<ul>\n<li>Applying <strong>major CMS or plugin updates<\/strong> (WordPress, Joomla, Drupal, etc.).<\/li>\n<li>Running <strong>SQL scripts<\/strong> that change schema or bulk data.<\/li>\n<li>Cleaning up or optimizing large tables.<\/li>\n<\/ul>\n<p>For WordPress users, combining database backups with file backups is essential. Our article on <a href=\"https:\/\/www.dchost.com\/blog\/en\/wordpress-backup-strategies-for-shared-hosting-and-vps\/\">WordPress backup strategies on shared hosting and VPS<\/a> dives deeper into CMS-specific scenarios.<\/p>\n<h3><span id=\"Email_Forwarders_and_Filters\">Email Forwarders and Filters<\/span><\/h3>\n<p>In the backup interface you will also see options to back up and restore <strong>Email Forwarders<\/strong> and <strong>Email Filters<\/strong>. These are configuration settings, not the email content itself. Use them when:<\/p>\n<ul>\n<li>You rely on <strong>complex forwarding rules<\/strong> (support queues, distribution lists).<\/li>\n<li>You have <strong>custom filters<\/strong> and want to preserve them during migrations; confirm which rules the export includes before relying on it.<\/li>\n<\/ul>\n<p>For the actual <strong>email messages<\/strong> (Inbox, Sent, folders), confirm that your full or home directory archive contains the required server-side mailbox files. If present, those files can also be extracted manually, as discussed later.<\/p>\n<h2><span id=\"Preparing_Your_Account_for_Safe_Backups\">Preparing Your Account for Safe Backups<\/span><\/h2>\n<p>Good backups start with a bit of housekeeping. Taking a backup of a messy account is better than no backup at all, but a few simple steps will make your backups quicker, smaller and easier to restore.<\/p>\n<h3><span id=\"Check_Disk_Usage_and_Quotas\">Check Disk Usage and Quotas<\/span><\/h3>\n<p>Backups need disk space to be created and stored. A full-account backup can fail when the account is near or over quota because cPanel cannot write required files. Check available space before starting. In cPanel:<\/p>\n<ol>\n<li>Log in to cPanel.<\/li>\n<li>Look at the <strong>Disk Usage<\/strong> or <strong>Statistics<\/strong> panel to see how much space you are using vs. your quota.<\/li>\n<li>If you are close to your limit, clean up unnecessary files (old backups, staging sites, logs).<\/li>\n<\/ol>\n<p>If you regularly hit disk limits, you may need a plan with more storage or a VPS\/<a href=\"https:\/\/www.dchost.com\/dedicated-server\">dedicated server<\/a>. Compare storage quotas and the space needed to generate and retain backups before choosing a package.<\/p>\n<h3><span id=\"Remove_Old_Local_Backups_and_Temporary_Files\">Remove Old Local Backups and Temporary Files<\/span><\/h3>\n<p>Many site owners unintentionally keep multiple .zip or .tar.gz backup files inside their home directory. When you run a new full backup, these files may be included again, wasting space and time.<\/p>\n<p>Before creating a fresh backup:<\/p>\n<ul>\n<li>Delete <strong>old backup archives<\/strong> you no longer need from your account (after ensuring they are safely stored elsewhere).<\/li>\n<li>Remove <strong>unused staging folders<\/strong> and very old test sites.<\/li>\n<li>Empty <strong>cache directories<\/strong> created by plugins (if safe to do so) to reduce size.<\/li>\n<\/ul>\n<h3><span id=\"Review_SSL_and_DNS_Before_Major_Changes\">Review SSL and DNS Before Major Changes<\/span><\/h3>\n<p>If you are about to perform a migration or big change, verify that your <strong>DNS and SSL configuration<\/strong> is healthy first. Two useful resources from our blog:<\/p>\n<ul>\n<li>If you are unsure about DNS records, see <a href=\"https:\/\/www.dchost.com\/blog\/en\/what-are-dns-records-beginners-guide\/\">what DNS records are and how A, AAAA, CNAME, MX, TXT and SRV work<\/a>.<\/li>\n<li>To understand free <a href=\"https:\/\/www.dchost.com\/ssl\">SSL certificate<\/a>s and how to set them up on cPanel, read <a href=\"https:\/\/www.dchost.com\/blog\/en\/cpanel-directadmin-free-ssl\/\">our Let\u2019s Encrypt SSL setup guide for cPanel<\/a>.<\/li>\n<\/ul>\n<p>Backing up a clearly configured environment makes restores much less confusing later.<\/p>\n<h2><span id=\"Step-by-Step_Creating_a_Full_cPanel_Backup\">Step-by-Step: Creating a Full cPanel Backup<\/span><\/h2>\n<p>Let\u2019s walk through the process of creating a full account backup from the standard cPanel interface. Exact menu names may vary slightly depending on the theme, but the flow is the same.<\/p>\n<h3><span id=\"1_Log_In_and_Open_the_Backup_Tool\">1. Log In and Open the Backup Tool<\/span><\/h3>\n<ol>\n<li>Log in to your cPanel account.<\/li>\n<li>In the <strong>Files<\/strong> section, click <strong>Backup<\/strong>. The following steps use this interface; <strong>Backup Wizard<\/strong> offers a separate guided workflow.<\/li>\n<\/ol>\n<h3><span id=\"2_Generate_a_Full_Backup\">2. Generate a Full Backup<\/span><\/h3>\n<ol>\n<li>In the Backup interface, look for the section labeled <strong>Full Backup<\/strong>.<\/li>\n<li>Click <strong>Download a Full Account Backup<\/strong> to open the <strong>Generate a Full Backup<\/strong> interface.<\/li>\n<\/ol>\n<h3><span id=\"3_Choose_Backup_Destination\">3. Choose Backup Destination<\/span><\/h3>\n<p>cPanel will ask where you want to store the backup:<\/p>\n<ul>\n<li><strong>Home Directory<\/strong>: The backup file is generated inside your existing account (usually in \/home\/username). You will then download it through your browser over HTTPS or via SFTP, if available.<\/li>\n<li><strong>Remote FTP Server<\/strong>: Sends the backup to a remote server using ordinary FTP. Standard FTP does not encrypt credentials or backup contents in transit; do not use it for sensitive backups over an untrusted network.<\/li>\n<li><strong>Remote FTP Server (Passive Mode Transfer)<\/strong>: Uses passive FTP, which can help with firewall compatibility but does not add encryption. The same credential and data-exposure risks apply.<\/li>\n<li><strong>Secure Copy (SCP)<\/strong>: Sends the backup over an encrypted SSH connection to a remote destination that supports SCP. Confirm destination access and verify the server\u2019s host key before trusting the connection.<\/li>\n<\/ul>\n<p>For most users, selecting <strong>Home Directory<\/strong> and then downloading over HTTPS is the simplest approach. These archives can contain sensitive website, database and email data, so use HTTPS, SFTP or SCP where available and verify the destination\u2019s identity. Do not treat passive FTP as encrypted transport or assume that an FTP option means TLS-protected FTPS. For a remote destination, enter its connection details in the fields cPanel provides. Review any <strong>Include integration links<\/strong> option carefully: it may include external account credentials. Sending backups securely to physically separate remote storage can provide the offsite copy in a 3-2-1 strategy. We discuss that more in our article on <a href=\"https:\/\/www.dchost.com\/blog\/en\/3-2-1-backups-cpanel-plesk-vps\/\">the 3-2-1 backup strategy and automated backups on cPanel, Plesk and VPS<\/a>.<\/p>\n<h3><span id=\"4_Enter_Email_Notification_Recommended\">4. Enter Email Notification (Recommended)<\/span><\/h3>\n<p>You will see a field labeled <strong>Email Address<\/strong> for completion notification:<\/p>\n<ul>\n<li>Enter an email address you monitor actively.<\/li>\n<li>Or select <strong>Do not send email notification of backup completion<\/strong> if you prefer to check manually.<\/li>\n<\/ul>\n<p>On large accounts, backups can take quite a while. The email confirmation helps you avoid downloading an incomplete file.<\/p>\n<h3><span id=\"5_Start_the_Backup_and_Wait\">5. Start the Backup and Wait<\/span><\/h3>\n<ol>\n<li>Click <strong>Generate Backup<\/strong>.<\/li>\n<li>cPanel will start assembling account files, databases and email data into a compressed archive.<\/li>\n<li>If you requested notification, check for the completion email. If you selected <strong>Home Directory<\/strong> as the full backup\u2019s destination, refresh the page and wait until the archive is available for download.<\/li>\n<\/ol>\n<p>Use the actual <strong>.tar.gz<\/strong> filename shown for your completed full backup when downloading it; do not rely on a guessed date-and-time naming pattern.<\/p>\n<h3><span id=\"6_Download_and_Store_Offsite\">6. Download and Store Offsite<\/span><\/h3>\n<p>After the backup is ready:<\/p>\n<ul>\n<li>Click the file name to download through your browser over HTTPS; or<\/li>\n<li>Use SFTP, if available, to download the file from your home directory to your local machine.<\/li>\n<\/ul>\n<p>Do not leave full backups sitting in your account indefinitely. After you download and verify them, keep a copy in <strong>offsite storage<\/strong>, physically separate from the hosting server or data center. This could be your workstation, an encrypted external drive kept elsewhere, or object storage in a separate location. Restrict access to backup copies, use encryption at rest for sensitive archives, and keep recovery keys available separately. Once the offsite copy is verified, you can delete the account-local archive to free space.<\/p>\n<h2><span id=\"Backing_Up_Files_Databases_and_Emails_Individually\">Backing Up Files, Databases and Emails Individually<\/span><\/h2>\n<p>Full backups are great for big milestones and migrations, but in daily operations you often only need partial backups. cPanel makes it easy to grab just the bits you care about.<\/p>\n<h3><span id=\"Home_Directory_Backup_Including_Website_Files\">Home Directory Backup (Including Website Files)<\/span><\/h3>\n<ol>\n<li>In cPanel, go to <strong>Files &gt; Backup<\/strong>.<\/li>\n<li>Under <strong>Partial Backups<\/strong>, click <strong>Home Directory<\/strong> to download a compressed home directory backup.<\/li>\n<\/ol>\n<p>Use this:<\/p>\n<ul>\n<li>Before deploying <strong>new code<\/strong> or <strong>themes<\/strong>.<\/li>\n<li>Before using the <strong>File Manager<\/strong> to perform bulk deletions or moves.<\/li>\n<li>Before enabling aggressive <strong>caching plugins<\/strong> that may change file structures.<\/li>\n<\/ul>\n<h3><span id=\"Database_Backups_via_cPanel\">Database Backups via cPanel<\/span><\/h3>\n<ol>\n<li>In cPanel, go to <strong>Files &gt; Backup<\/strong>.<\/li>\n<li>Under <strong>Partial Backups<\/strong>, look for <strong>Download a MySQL Database Backup<\/strong>.<\/li>\n<li>Click the name of the database you want to back up (e.g., <strong>user_wp123<\/strong>).<\/li>\n<li>Your browser will download a <strong>.sql.gz<\/strong> file.<\/li>\n<\/ol>\n<p>Alternative via phpMyAdmin:<\/p>\n<ol>\n<li>In cPanel, open <strong>Databases &gt; phpMyAdmin<\/strong>.<\/li>\n<li>Select your database on the left.<\/li>\n<li>Click the <strong>Export<\/strong> tab.<\/li>\n<li>Choose <strong>Quick<\/strong> and <strong>SQL<\/strong>, then click <strong>Go<\/strong>.<\/li>\n<\/ol>\n<p>For WordPress or database-intensive applications, we strongly recommend combining these backups with a regular schedule, as covered in our <a href=\"https:\/\/www.dchost.com\/blog\/en\/saas-backup-and-data-retention-on-vps-and-cloud\/\">backup and data retention best practices for SaaS apps<\/a>. The principles apply equally well to content-heavy websites.<\/p>\n<h3><span id=\"Email_Data_Backups\">Email Data Backups<\/span><\/h3>\n<p>There are three layers to email backups with cPanel:<\/p>\n<ul>\n<li><strong>Account configuration<\/strong>: email accounts, passwords, forwarders, filters<\/li>\n<li><strong>Server-side mailboxes<\/strong>: the actual message files stored in your home directory<\/li>\n<li><strong>Client-side copies<\/strong>: if you use POP3\/IMAP in a desktop client<\/li>\n<\/ul>\n<h4><span id=\"1_Forwarders_and_Filters\">1. Forwarders and Filters<\/span><\/h4>\n<ol>\n<li>Go to <strong>Files &gt; Backup<\/strong>.<\/li>\n<li>Under <strong>Partial Backups<\/strong>, download a domain\u2019s email forwarders by clicking its domain name under <strong>Forwarders<\/strong>.<\/li>\n<li>Download account-level email filters by clicking the filter name under <strong>System Filter Info<\/strong>.<\/li>\n<\/ol>\n<p>The filter download covers only rules from <strong>Global Email Filters<\/strong>. It does not include individual mailbox rules configured through <strong>Email Filters<\/strong>; do not rely on this download to preserve those rules.<\/p>\n<h4><span id=\"2_Server-Side_Mailboxes\">2. Server-Side Mailboxes<\/span><\/h4>\n<p>Server-side message files and email-account configuration are different parts of a backup; do not treat <strong>etc\/<\/strong> as another message-storage directory. cPanel documents that a home directory backup includes files you own, including email for your account\u2019s domains, plus files you do not own but can access. Files you neither own nor can access are omitted, and configured exclusions can omit files or directories. The backup types to check for server-side email are:<\/p>\n<ul>\n<li><strong>Full cPanel backups<\/strong><\/li>\n<li><strong>Home directory backups<\/strong><\/li>\n<\/ul>\n<p>A full account archive\u2019s <strong>homedir<\/strong> component contains a copy of the account\u2019s home directory. Before relying on either backup type, inspect the archive for the expected email data and account configuration, check exclusions, and test restoration. Server backups cannot recover messages that exist only on a desktop client. Understanding how you access email therefore matters for backup strategy. If you are unsure about POP3 vs IMAP vs webmail, our article <a href=\"https:\/\/www.dchost.com\/blog\/en\/pop3-vs-imap-vs-webmail-email-access-and-backups\/\">comparing POP3, IMAP and webmail for backup and access<\/a> is worth a read.<\/p>\n<h4><span id=\"3_Client-Side_Copies_Outlook_Thunderbird_Apple_Mail\">3. Client-Side Copies (Outlook, Thunderbird, Apple Mail)<\/span><\/h4>\n<p>If you use <strong>POP3<\/strong> with \u201cdelete from server\u201d enabled, your desktop or laptop may be the only place where some emails exist. In that case you must:<\/p>\n<ul>\n<li>In <strong>classic Outlook for Windows<\/strong>, export the email you need to an <strong>Outlook Data File (.pst)<\/strong>. Select the correct account, ensure the required messages are fully downloaded, and select <strong>Include subfolders<\/strong>. Export each account separately. Where a download-range slider is available, set it to <strong>All<\/strong> for a complete export and allow downloading to finish; for Cached Exchange Mode, follow Microsoft\u2019s guidance to turn it off before exporting beyond the current cache. Save the export outside a OneDrive-synced location.<\/li>\n<li>A PST export copies email and attachments but does not preserve everything: message rules, folder properties and blocked-sender lists are excluded. An <strong>OST<\/strong> is not the independent archive workflow: Outlook can recreate an Exchange OST from the server mailbox, which does not make the cache an interchangeable backup of local-only data.<\/li>\n<li>For Thunderbird, Apple Mail or another client, use a client-specific export or profile-backup procedure and validate its coverage. Keep an independent copy of the resulting backup, inspect the expected accounts and folders, and test restoration before relying on it or deleting the originals.<\/li>\n<li>Consider <strong>IMAP<\/strong> to keep messages on the server for server-side backups, but synchronization is not itself a backup. Switching protocols does not by itself protect messages already stored only on your computer.<\/li>\n<\/ul>\n<h2><span id=\"Automating_Backups_with_Cron_Jobs_and_Offsite_Storage\">Automating Backups with Cron Jobs and Offsite Storage<\/span><\/h2>\n<p>Manual backups are good, but one missed click can coincide with the one incident you actually care about. Automation reduces reliance on remembering each backup, but scheduled jobs still need monitoring and periodic restore checks.<\/p>\n<h3><span id=\"cPanels_Built-In_Automatic_Backups\">cPanel\u2019s Built-In Automatic Backups<\/span><\/h3>\n<p>Providers can schedule backups at the server level. For your chosen plan, confirm whether scheduled backups are included, what they cover, how often they run and how long they are kept.<\/p>\n<p>Key questions to clarify with your provider (or your own DevOps team if you run a VPS\/dedicated server):<\/p>\n<ul>\n<li><strong>Frequency<\/strong>: daily, weekly, monthly?<\/li>\n<li><strong>Retention<\/strong>: how many days of history?<\/li>\n<li><strong>Scope<\/strong>: full accounts, only files, only databases?<\/li>\n<li><strong>Location<\/strong>: stored on the same server or offsite?<\/li>\n<\/ul>\n<p>Even if automatic provider backups exist, we still recommend having <strong>your own independent backups<\/strong>, especially for critical business or customer data.<\/p>\n<h3><span id=\"Cron_Jobs_and_Custom_Backup_Scripts_VPS_Dedicated\">Cron Jobs and Custom Backup Scripts (VPS \/ Dedicated)<\/span><\/h3>\n<p>If you manage a VPS or dedicated server with root access, you can configure cron jobs to:<\/p>\n<ul>\n<li>Run cPanel\/WHM backup routines at specific times.<\/li>\n<li>Export individual databases on a schedule.<\/li>\n<li>Sync backup archives to remote storage via rsync, rclone or S3-compatible tools.<\/li>\n<\/ul>\n<p>We have a detailed walkthrough on this in our article <a href=\"https:\/\/www.dchost.com\/blog\/en\/cpanel-directadmin-cron-backups-maintenance\/\">planning automatic tasks with cron jobs on cPanel and DirectAdmin<\/a>. It shows how to schedule backups, reports and maintenance tasks cleanly.<\/p>\n<h3><span id=\"Offsite_and_Versioned_Backups\">Offsite and Versioned Backups<\/span><\/h3>\n<p>Regardless of your hosting type (shared, VPS, dedicated or colocation), your backup plan is strongest when it follows the <strong>3-2-1 principle<\/strong>:<\/p>\n<ul>\n<li><strong>3 copies<\/strong> of your data, including the live data and two backups<\/li>\n<li><strong>2 different media types<\/strong> (e.g., disk and magnetic tape); an external disk or S3-compatible object store does not by itself establish a different physical media type<\/li>\n<li><strong>1 copy offsite<\/strong> (physically separate from your main server or data center)<\/li>\n<\/ul>\n<p>For example, you might distribute copies as follows. Check the underlying storage media separately before treating this arrangement as meeting every part of 3-2-1:<\/p>\n<ul>\n<li>The live data on your cPanel account.<\/li>\n<li>Daily backups on a separate backup server that you or your backup provider maintain.<\/li>\n<li>Weekly or monthly archives in S3-compatible storage or another region, with at least one copy physically offsite.<\/li>\n<li>Multiple dated restore points with a defined retention period, rather than a single remote copy overwritten by every sync. Choose the schedule and retention according to how much data loss you can tolerate and how far back you may need to recover.<\/li>\n<\/ul>\n<p>If you are not yet doing offsite backups and want a practical, step-by-step starting point, our guide on <a href=\"https:\/\/www.dchost.com\/blog\/en\/restic-borg-offsite-backups-s3-storage\/\">offsite backups with Restic\/Borg to S3-compatible storage<\/a> pairs nicely with the cPanel-level routines described here.<\/p>\n<h2><span id=\"Restoring_from_cPanel_Backups_Safely\">Restoring from cPanel Backups Safely<\/span><\/h2>\n<p>Backups are only as good as your ability to restore them calmly when needed. cPanel offers self-service restore options for partial backups; full backup restores generally require administrator access.<\/p>\n<h3><span id=\"Important_General_Rules_Before_Any_Restore\">Important General Rules Before Any Restore<\/span><\/h3>\n<ul>\n<li><strong>Always create a fresh backup of the current state<\/strong> before restoring an older one. That way, you retain a recovery option if needed.<\/li>\n<li><strong>Test the restore in an isolated environment<\/strong> before changing production, with access restricted and live email, scheduled jobs and payment integrations disabled.<\/li>\n<li><strong>Plan for downtime<\/strong> for the specific sites or services you are restoring, especially databases and email. Stop new application writes during restoration and decide how to reconcile newer orders, user changes or other data that must be retained. A low-traffic window alone is not sufficient. Check file\/database compatibility before reopening the site.<\/li>\n<li><strong>Communicate<\/strong> with your team or clients so they know not to make changes during the restore window.<\/li>\n<\/ul>\n<h3><span id=\"Restoring_a_Full_cPanel_Backup\">Restoring a Full cPanel Backup<\/span><\/h3>\n<p>The <strong>native cPanel interface cannot automatically restore a full account backup<\/strong>. Arrange a restore through WHM with an appropriately authorized administrator. There are two typical scenarios:<\/p>\n<ul>\n<li><strong>Same server restore<\/strong>: Your hosting provider (or you, with the necessary WHM privileges or root access) uses the full backup file to restore account data from that backup.<\/li>\n<li><strong>Migration to another server<\/strong>: The full backup is uploaded to a new cPanel server and restored there to move your site and email with minimal changes.<\/li>\n<\/ul>\n<p>On shared hosting, ask your provider whether full-account restores are supported for your plan. Provide the backup\u2019s location through a private support channel and agree on the restore scope and timing before proceeding.<\/p>\n<h3><span id=\"Restoring_a_Home_Directory_Backup\">Restoring a Home Directory Backup<\/span><\/h3>\n<ol>\n<li>Log in to cPanel.<\/li>\n<li>Go to <strong>Files &gt; Backup<\/strong>.<\/li>\n<li>Under <strong>Restore a Home Directory Backup<\/strong>, click <strong>Choose File<\/strong>.<\/li>\n<li>Select the previously downloaded home directory backup (.tar.gz file).<\/li>\n<li>Click <strong>Upload<\/strong>.<\/li>\n<\/ol>\n<p>cPanel will extract the archive and <strong>overwrite existing files<\/strong> with the copies from the backup. This can affect email and other home directory data, not just website files, so inspect the archive and agree on the scope before uploading it. Newer files that do not exist in the backup may be left untouched, but you should assume that anything with the same name will be replaced. Do not treat this as a clean reset that removes every file added since the backup.<\/p>\n<p>Tips:<\/p>\n<ul>\n<li>If you only need to restore a <strong>single website folder or file<\/strong>, consider extracting the backup locally and uploading just that part via SFTP, if available, or cPanel\u2019s File Manager over HTTPS instead of restoring the whole home directory. Verify the destination before uploading; avoid ordinary unencrypted FTP for sensitive files.<\/li>\n<li>For CMS sites (WordPress, etc.), be careful not to mix files from different plugin\/theme versions; ideally restore both files and the matching database backup from the same time.<\/li>\n<\/ul>\n<h3><span id=\"Restoring_Databases\">Restoring Databases<\/span><\/h3>\n<p>You can restore databases either via the <strong>Backup<\/strong> interface or via <strong>phpMyAdmin<\/strong>.<\/p>\n<h4><span id=\"Method_1_Using_the_Backup_Interface\">Method 1: Using the Backup Interface<\/span><\/h4>\n<ol>\n<li>In cPanel, go to <strong>Files &gt; Backup<\/strong>.<\/li>\n<li>Under <strong>Restore a MySQL Database Backup<\/strong>, click <strong>Choose File<\/strong>.<\/li>\n<li>Select the <strong>.sql.gz<\/strong> file you previously downloaded.<\/li>\n<li>Click <strong>Upload<\/strong>.<\/li>\n<\/ol>\n<p>Treat this as a potentially destructive restore to the database named in the backup, not a guaranteed clean replacement of every existing table. Make sure you know which application uses that database, and verify the restored contents before reopening the site.<\/p>\n<h4><span id=\"Method_2_Using_phpMyAdmin\">Method 2: Using phpMyAdmin<\/span><\/h4>\n<ol>\n<li>In cPanel, open <strong>Databases &gt; phpMyAdmin<\/strong>.<\/li>\n<li>Select the target database on the left, checking its name against the application configuration. For a test restore, use a separate empty database rather than the production database.<\/li>\n<li>Click the <strong>Import<\/strong> tab.<\/li>\n<li>Click <strong>Choose File<\/strong> and select your .sql or .sql.gz backup file.<\/li>\n<li>Leave defaults unless you know you need specific settings.<\/li>\n<li>Click <strong>Go<\/strong> to start the import.<\/li>\n<\/ol>\n<p>The import\u2019s effect depends on the SQL statements in the backup; it can replace data, add data or fail on conflicts. Prefer testing in a separate empty database before changing production. Access phpMyAdmin over HTTPS and check its upload and execution limits before importing. If compressed uploads are unsupported, extract the SQL file first; if the backup exceeds the available limits, agree on an appropriate restoration method with your provider. Do not drop live tables merely to resolve an import error: first preserve a fresh backup, confirm the target and plan the application cutover.<\/p>\n<h3><span id=\"Restoring_Email_Forwarders_and_Filters\">Restoring Email Forwarders and Filters<\/span><\/h3>\n<ol>\n<li>In cPanel, go to <strong>Files &gt; Backup<\/strong>.<\/li>\n<li>Under <strong>Restore Email Forwarders<\/strong> or <strong>Restore Email Filters<\/strong>, click <strong>Choose File<\/strong>.<\/li>\n<li>Select the backup file you downloaded earlier.<\/li>\n<li>Click <strong>Upload<\/strong>.<\/li>\n<\/ol>\n<p>Before restoring, preserve the current routing settings and confirm which forwarders and filter types the backup includes. Afterward, verify the restored rules in cPanel and test critical mail routing rather than assuming existing settings were preserved.<\/p>\n<h3><span id=\"Restoring_Email_Messages\">Restoring Email Messages<\/span><\/h3>\n<p>If you lost email content (not just configuration), the options depend on your situation:<\/p>\n<ul>\n<li><strong>Home directory backup or full cPanel backup available<\/strong>: Ask your provider or server administrator to plan a targeted mailbox restore from the backup; mail data is usually under \/home\/username\/mail\/domain\/user\/. Preserve any newer messages first, and confirm that the mailbox configuration and restored file ownership are correct.<\/li>\n<li><strong>IMAP client still has messages<\/strong>: Before reconnecting or syncing, preserve an independent local copy of the messages and confirm that their full contents are available. You may then be able to copy them into the restored or recreated IMAP account.<\/li>\n<li><strong>POP3-only setup<\/strong>: Look for local mail client backups or exported message archives that your client can restore. Also check whether a server backup retains any of the missing messages.<\/li>\n<\/ul>\n<p>Because email can be tricky to reconstruct, we strongly recommend treating <strong>email backups as seriously as website backups<\/strong>, especially for sales and support inboxes.<\/p>\n<h2><span id=\"Testing_Verifying_and_Maintaining_Your_Backup_Plan\">Testing, Verifying and Maintaining Your Backup Plan<\/span><\/h2>\n<p>Verification is part of the backup process: use controlled restore tests to check that your backups can recover the data and services you need.<\/p>\n<h3><span id=\"Run_Periodic_Restore_Tests\">Run Periodic Restore Tests<\/span><\/h3>\n<p>At least a few times per year, or after any major change in your site architecture, perform a controlled restore test:<\/p>\n<ul>\n<li>Create a <strong>staging subdomain<\/strong> (e.g., staging.example.com) with a separate document root and database, or use a separate test cPanel account with no production data.<\/li>\n<li>For a subdomain on the live account, extract a recent <strong>home directory<\/strong> backup locally and upload only the required website files to the staging document root; do not run a whole-home restore on the live account for this test. Import the matching <strong>database<\/strong> backup into the separate staging database.<\/li>\n<li>Update the staging site\u2019s configuration (database credentials, URLs) as needed.<\/li>\n<li>Restrict access to staging and disable live email delivery, scheduled jobs and payment integrations before testing. Use sandbox credentials to check key flows such as login, checkout and forms without contacting customers or charging real payments.<\/li>\n<\/ul>\n<p>This not only validates the backups themselves but also gives you a clear, rehearsed procedure for real incidents. For a broader view on disaster recovery planning, our article on <a href=\"https:\/\/www.dchost.com\/blog\/en\/disaster-recovery-plan-rto-rpo-runbooks\/\">writing a no-drama DR plan with RTO\/RPO and backup tests<\/a> is a good companion read.<\/p>\n<h3><span id=\"Keep_a_Simple_Backup_Runbook\">Keep a Simple Backup Runbook<\/span><\/h3>\n<p>Document your backup routine in a small internal guide, for example:<\/p>\n<ul>\n<li>When full cPanel backups are created (monthly\/quarterly)<\/li>\n<li>When partial backups (files, databases) are created (e.g., daily for DB)<\/li>\n<li>Where each type of backup is stored (folder paths, remote endpoints)<\/li>\n<li>Who is responsible for checking backup completion emails<\/li>\n<li>How to request a full restore from your provider<\/li>\n<\/ul>\n<p>When team members change or your infrastructure grows (more cPanel accounts, VPS, dedicated servers), this small runbook saves a lot of confusion.<\/p>\n<h3><span id=\"Common_Mistakes_to_Avoid\">Common Mistakes to Avoid<\/span><\/h3>\n<ul>\n<li><strong>Relying solely on provider backups<\/strong> without having your own copies or knowing the retention policy.<\/li>\n<li><strong>Storing all backups on the same server<\/strong> as the live sites; a hardware issue or ransomware event can take everything at once.<\/li>\n<li><strong>Not including databases<\/strong> in your backup schedule for CMS-driven sites.<\/li>\n<li><strong>Keeping only one backup copy<\/strong> that silently becomes corrupted or incomplete.<\/li>\n<li><strong>Never testing restores<\/strong> until the day something breaks in production.<\/li>\n<\/ul>\n<h2><span id=\"Wrapping_Up_Build_a_Backup_Habit_Not_a_One-Time_Task\">Wrapping Up: Build a Backup Habit, Not a One-Time Task<\/span><\/h2>\n<p>cPanel provides backup tools for your files, databases and emails \u2014 but using those tools consistently is only part of a recovery plan. A full cPanel backup is your safety net for big changes and migrations; partial backups of the home directory, individual databases and email settings are your daily armor against smaller incidents and human mistakes.<\/p>\n<p>If you combine those tools with a realistic schedule, offsite storage and occasional restore tests, you gain <strong>greater confidence<\/strong> in your ability to recover and can identify gaps before an incident.<\/p>\n<p>If you are unsure whether your current hosting plan, disk space or backup setup is enough for your growth, reach out to our team. When assessing a plan, clarify backup responsibilities, storage capacity, retention and restore support so you can choose infrastructure that fits your recovery needs.<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Build a cPanel backup routine for website files, databases and email. Understand full-account restore requirements, partial recovery, offsite storage and controlled restore testing.<\/p>\n","protected":false},"author":1,"featured_media":10867,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[184],"tags":[],"class_list":["post-2932","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/www.dchost.com\/blog\/en\/wp-json\/wp\/v2\/posts\/2932","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dchost.com\/blog\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dchost.com\/blog\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/en\/wp-json\/wp\/v2\/comments?post=2932"}],"version-history":[{"count":9,"href":"https:\/\/www.dchost.com\/blog\/en\/wp-json\/wp\/v2\/posts\/2932\/revisions"}],"predecessor-version":[{"id":10869,"href":"https:\/\/www.dchost.com\/blog\/en\/wp-json\/wp\/v2\/posts\/2932\/revisions\/10869"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/en\/wp-json\/wp\/v2\/media\/10867"}],"wp:attachment":[{"href":"https:\/\/www.dchost.com\/blog\/en\/wp-json\/wp\/v2\/media?parent=2932"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/en\/wp-json\/wp\/v2\/categories?post=2932"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/en\/wp-json\/wp\/v2\/tags?post=2932"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}