Website Backup Types and the 3-2-1 Rule Explained

"I have a backup" can mean very different things: a full copy taken yesterday, or an old file sitting on the same server that just failed. Before choosing a tool or a plan, you need to understand the types of backup and where they live, because that decides whether you can actually restore your site when something goes wrong.

What exactly are you backing up?

A website is more than files. A useful backup includes everything needed to bring it back online:

• Website files: code, themes, plugins, images and uploads.
• Databases: in WordPress sites and online stores, content, orders and users live in the database, not in the files.
• Email: if company email runs on the same hosting account, messages are part of the data you could lose.
• Settings: DNS records, scheduled tasks and mail settings, which are easy to forget and hard to remember when you need them.

Full, incremental and differential

A full backup copies everything every time. It is the simplest to restore but uses more space and time. An incremental backup stores only what changed since the last backup of any kind, so it is fast and small, but a restore needs the first full copy plus every incremental copy after it, in order. A differential backup stores what changed since the last full backup, which sits in between: it grows over time, but a restore needs only two files.

Most modern backup tools combine these automatically, with periodic full copies and incremental ones in between. What matters to you is not the term but two questions: how many past copies are available, and how long does a restore take?

On the server or off it?

A copy kept on the same server or in the same hosting account is useful for quickly undoing a mistake, such as an update that broke the site. It does not help if the server itself fails, or if an attacker reaches the account and deletes the backups along with the site. That is why you also need a copy off the server: on separate storage, on your own computer, or in a cloud storage service.

The 3-2-1 rule

A widely used, practical rule for protecting important data:

• 3 copies of your data: the original plus two backups.
• On 2 different media, such as the hosting server and separate storage.
• At least 1 copy away from the original location.

For a small website this can be as simple as the daily backup provided by your host plus a weekly copy you download to your computer or external storage. Stores and systems whose data changes every hour need more frequent copies and dedicated separate storage.

Two questions shape your plan: how much can you lose, and how long can you wait?

Specialists call the first RPO: the maximum period of data you can afford to lose. With daily backups you could lose a full day of orders or edits. They call the second RTO: the maximum time the site can stay down during a restore. A personal blog can live with a day of loss and a few hours of downtime; a store taking orders around the clock needs more frequent backups and a tested restore plan.

What EngHosting provides, and what stays with you

According to the plan pages, shared hosting and WordPress plans include a free daily backup from the Economy plan upwards, and the reseller plans include daily backups. Linux VPS, Windows VPS and dedicated servers are the customer's responsibility to manage after delivery, and backup tools, licences and backup storage are available for them in the extra services. In every case, the acceptable use policy states that customers are responsible for taking regular backups of their data, especially if they are not subscribed to a backup plan, so treat your host's backups as one layer of the 3-2-1 rule rather than the whole plan.

Next step

Once the types are clear, move to practice: how to take and restore a cPanel backup step by step, then how to set an automatic schedule and a sensible retention period. If your wider goal is protecting the site, backups are one part of our website security checklist.

Useful links: Shared Hosting, Linux VPS, Domain Registration, Contact Us.