Web hosting backups: what to verify before you buy

A host that promises "daily backups" is not the same as a host that can put yesterday's site back online in an afternoon. Backups are an insurance product. You only learn whether the policy pays out when something is already broken.

Before you buy, make sure you understand what "backup" actually means on the plan you are considering. This goes hand in hand with how to choose web hosting without relying on top 10 lists, renewal pricing, and testing support. For why affiliate roundups skip restore proofs, read The Truth About Hosting Review Sites.

Why "we back up nightly" is not a plan

Sales pages love the word backup. They rarely answer the questions that matter after a bad deploy, a ransomware hit, or a deleted database:

• What is included? Files only? Databases? Email? DNS records? Cron jobs? SSL certificates?
• How far back can you go? One day? Seven? Thirty? "Forever," until you read the fine print?
• Who can restore? Self-serve in the panel, or a ticket that waits for a systems queue?
• How long does a restore take? Minutes, hours, or "we will get back to you"?
• Where do copies live? Same disk as the site? Same data centre? Offsite?

If those answers are fuzzy, the backup is marketing, not disaster recovery.

A short pre-purchase backup check

You do not need to break a production site. You need comparable answers from every shortlisted host.

Ask for the backup details in writing

Send the same chat or ticket question to each host:

On this plan, what exactly is backed up (files, databases, email, DNS), how often, how many restore points, how long are they retained, and can I restore a single file or database myself from the panel?

Save the reply. Vague "we take care of backups" answers fail the check.

Confirm restore, not just snapshot

Ask one follow-up:

If I need yesterday's WordPress database only, what are the steps and typical turnaround? Is restore self-serve?

A host that can snapshot but cannot restore a single database without rebuilding the whole account is a different product than one with granular restores.

Check whether backups are included or upsold

Many "unlimited" shared plans include a thin backup add-on, or none at all, and push a paid panel plugin after checkout. Put the real monthly cost on your two-year renewal sheet. A $3/mo plan that needs a $3/mo backup add-on is a $6/mo plan.

Ask where copies live and who owns the export

You want at least:

• Copies that survive a disk failure on the same machine (not "backup equals the live disk")
• A way to download a full export yourself (files and database), not only restore in place
• Clarity on whether cancelled accounts still get a recovery window

If you cannot export, you do not have a portable backup. You have a leash.

What good backup hygiene looks like in practice

Strong setups share boring traits:

• Documented scope. A help article that lists included objects and retention, not a badge that says "secure."
• Retention that matches your risk. A brochure site may need a week. A store taking orders needs enough points to undo a bad plugin and a quiet corruption that sat for days.
• Granular restore options. Full account, single database, and single file or path are the useful trio.
• Self-serve where the plan claims it. If the sales page says "one-click restore," verify the button exists on a trial or demo, or get a screenshot of the UI from support.
• Offsite or at least off-node copies. Same-server "backups" die with the server.

Your own offsite copy still matters. Host backups fail, get throttled during outages, or exclude the one folder you needed. A weekly (or daily) export to storage you control is the sensible move, especially before a host transfer.

Red flags that should pause the purchase

Pause when:

• Backups are "included" but restore requires a paid emergency ticket with no published SLA
• Retention is "up to 30 days" with no statement of how many points or how often
• Email, DNS or databases are quietly excluded
• The only backup is a plugin you install yourself, with no host-side copy
• Support cannot explain the last successful restore they performed for a customer like you
• Cancelling hosting immediately deletes every recovery point with no grace window

Affiliate lists rarely stress-test restores. They screenshot uptime widgets and move on.

A short backup checklist

Before you pay:

1. Backup scope written down: files, database, email, DNS, yes or no for each.
2. Frequency and retention written down (for example daily, 14 restore points, 14-day retention).
3. Restore path confirmed: self-serve versus ticket, granular versus full-account only.
4. Typical restore turnaround noted from support (not from the marketing site).
5. Add-on cost included in the two-year total if backups are not free on the plan.
6. Export or download path confirmed so you can leave with your data.
7. Your own offsite copy scheduled, even if the host looks excellent.
8. Only then follow a referral link, including ours.

We treat backups the same way we treat support and renewal maths: claims without a restore path are incomplete. Our FAQ on how we rank hosts prefers evidence over splash ratings, and a host that cannot explain restores does not deserve trust, no matter how green the uptime badge looks.

When looking for a web host, remember that a backup badge is only as good as the restore behind it. Ask the questions above, keep your own copy somewhere you control, and do not sign up on marketing alone. More web hosting guides and the homepage rankings are there when you are ready to compare.