The best free backup plugins for WordPress are UpdraftPlus, BackWPup, Duplicator, WPvivid and WP STAGING. Each one copies your files and database to a place that is not your web server, and each has a free version that handles the basics: scheduled backups, remote storage and one-click restore.
A backup you have never restored is a guess, not a safety net. This guide covers ten options, what the free version does in plain words, where the paid tier starts, and how to set up a backup routine that survives a hacked site, a failed update or a dead server.
What a WordPress backup has to include
A WordPress site has two parts. The files hold your themes, plugins and the uploads folder. The database holds your posts, pages, users, settings and orders. A backup that only saves one of them cannot rebuild the site, so check that any plugin you pick saves both.
Three things separate a useful backup plugin from a weak one:
- Off-site storage. A backup saved in
wp-contenton the same server dies with that server. You want Google Drive, Dropbox, Amazon S3, an SFTP server or similar. - Scheduling. Backups that depend on you remembering do not happen. Pick a plugin that runs on a timer.
- A restore path you can follow under stress. The best plugin is the one you can restore from at 2 a.m. without reading documentation.
1. UpdraftPlus
UpdraftPlus is the most widely used free backup plugin in the directory. The free version backs up files and database on a schedule, sends copies to several remote destinations and restores from the dashboard. It also covers migration and cloning to a new address.
Best for: site owners who want a familiar, low-effort setup. Premium add-ons exist for things like incremental backups and more storage options, so read the plan page before you rely on a feature you saw in a review.
2. BackWPup
BackWPup saves your files and database as one archive and sends it to cloud storage, FTP or email. It can also run database checks and optimisation jobs, which makes it handy for owners who like to see exactly what each job does.
Best for: people who want job-style control over what gets saved and where it goes. The setup screens ask more of you than UpdraftPlus does, but you get fine-grained choices in return.
3. Duplicator
Duplicator began as a migration tool. It packages your whole site into an archive plus an installer file, so you can rebuild it on another host or a local machine. It now also offers scheduled backups and cloud storage, with some storage and recovery features reserved for the paid tiers.
Best for: moving a site between hosts and keeping a portable copy you can drop onto a fresh server.
4. WPvivid Backup and Migration
WPvivid backs up and restores your site, migrates it between domains, and includes staging in its free plugin listing. You can split large backups into parts, which helps on hosts with tight upload limits, and choose what to include.
Best for: owners who want backup, migration and a staging copy from one plugin without paying first.
5. WP STAGING
WP STAGING is best known for creating a staging copy of your live site, where you can test updates before they touch visitors. It also handles backups and restores, with cloud storage and advanced features in the paid version.
Best for: sites where you want to test a plugin update on a clone first and keep a backup of the same site.
6. XCloner
XCloner is an open-source plugin that backs up your files and database, schedules backups and sends them to remote storage. The interface is plainer than the polished competition, and that is fine if you want a tool that stays out of the way.
Best for: developers and owners who prefer open-source tools and do not need a guided wizard.
7. Backup Migration
Backup Migration creates a full backup archive and migrates a site by upload or by link. It runs backups in the background and lets you pick what goes into the archive.
Best for: small and mid-sized sites where you want a free tool for backup and a quick move to a new host.
8. All-in-One WP Migration
All-in-One WP Migration exports your site to a single file and imports it on another install. The free plugin covers the core export and import. Larger imports and many cloud storage destinations are sold as paid extensions, so treat it as a migration tool first and a backup tool second.
Best for: one-off copies, such as moving a site to a new host or cloning it to a local development setup.
9. Jetpack VaultPress Backup
Jetpack VaultPress Backup saves your site to Automattic’s servers and lets you restore from the Jetpack dashboard. The plugin is free to install, but the backup service itself sits behind a paid plan, so it does not belong on a strictly free list. It earns a place here because many owners ask about it.
Best for: owners who want a hosted service run by the team behind WordPress.com and are happy to pay for it.
10. BlogVault
BlogVault is a hosted backup service that stores copies off your server and includes a staging option. It runs the heavy work on its own servers rather than yours, which helps on busy or shared hosting. Like Jetpack, it is a service first: the plugin is free, but ongoing backups depend on a plan.
Best for: busy sites where you do not want backup jobs competing with visitors for server resources.
Comparison table
| Plugin | Free version covers | Best for |
|---|---|---|
| UpdraftPlus | Scheduled files and database backups, remote storage, restore | Everyday backups |
| BackWPup | Backup jobs, many destinations, database tools | Job-style control |
| Duplicator | Site packages for migration, scheduled backups | Moving between hosts |
| WPvivid | Backup, restore, migration, staging | All-in-one free tool |
| WP STAGING | Staging copies, backups and restore | Testing updates first |
| XCloner | Open-source backup, schedule, remote storage | Plain, no-frills use |
| Backup Migration | Backup archive and site migration | Simple small sites |
| All-in-One WP Migration | Core export and import | One-off site moves |
| Jetpack VaultPress Backup | Free plugin, paid backup plan | Hosted service |
| BlogVault | Free plugin, paid backup plan | Busy sites, staging |
The 3-2-1 backup rule for WordPress
The 3-2-1 rule is the standard way to think about backups. Keep three copies of your data, on two different kinds of storage, with one copy somewhere else entirely. For a WordPress site that looks like this:
- Copy one: the live site on your host.
- Copy two: a scheduled plugin backup sent to cloud storage such as Google Drive, Dropbox or S3.
- Copy three: a backup stored by your host, or a manual download you keep on a local drive.
The point is that no single failure can take everything. A hacked server, a deleted cloud account or a plugin bug each leave at least one clean copy.
Test your restore before you need it
Most backup failures show up at restore time, not backup time. A job can report success while the archive is incomplete, the storage link has expired or the database dump is truncated. Run a restore test on a schedule:
- Create a staging site or a local install.
- Restore your latest backup into it.
- Log in, open a few posts, load the media library and place a test order if you run a shop.
- Write down how long it took and what you had to look up.
Do this after you first set up the plugin and again after any major change to your hosting. The test takes little time compared with a failed restore on a live site.
Check what your host already does
Many hosts run their own daily backups, often with a restore button in the control panel. That is a useful layer, but treat it as one copy, not the whole plan. Host backups usually live on the same infrastructure as your site, the retention window can be short, and the restore may not include everything you expect. Ask your host how long they keep copies, whether they include the database and whether you can download them. If you are weighing hosts, our guide to choosing the best WordPress hosting covers what to look for.
How to choose
Start with what you need the backup for:
- Scheduled protection for a normal site: UpdraftPlus, BackWPup or WPvivid.
- Moving to a new host: Duplicator, All-in-One WP Migration or Backup Migration. Our roundup of WordPress migration plugins goes deeper.
- Testing updates safely: WP STAGING or WPvivid.
- Hands-off hosted backup: Jetpack VaultPress Backup or BlogVault, with a paid plan.
A backup plugin protects you after something goes wrong. A security plugin tries to stop the problem first, so the two work together. See our guide to WordPress security plugins and our wider backup plugin comparison. Heavy backup jobs also use server resources, so schedule them for quiet hours and read our notes on speeding up your WordPress site.
Frequently asked questions
What is the best free backup plugin for WordPress?
UpdraftPlus is the most common pick because the free version covers scheduled backups, remote storage and restore. WPvivid and BackWPup are strong alternatives if you want more built into the free plugin or more control over backup jobs.
Can I back up a WordPress site without a plugin?
Yes. You can copy your files over SFTP and export the database with phpMyAdmin or a host tool. It works, but it is manual and easy to forget, so most owners schedule backups with a plugin instead.
How often should I back up my site?
Match the schedule to how often your content changes. A brochure site may be fine with a weekly backup. A shop or a community site where people post daily should back up daily, and a busy store may need more often than that.
Where should I store my backups?
Store them off your web server, in a cloud account such as Google Drive, Dropbox or Amazon S3. Keep at least one copy where a server problem or a hacked account cannot reach it.
Do I need a backup plugin if my host makes backups?
Yes, keep your own copy as well. Host backups are useful, but the retention period can be short and they sit on the same infrastructure as your site. A second copy under your control costs very little.
Are free backup plugins safe to use?
The popular ones are widely used and actively updated, but keep them up to date and protect the storage account with a strong password and two-factor login. A backup contains your whole database, so treat it as sensitive data.
Can I use a backup plugin to move my site to a new host?
Yes. Duplicator, All-in-One WP Migration, WPvivid and Backup Migration are built for it. Move a copy first, test it on the new host, and switch your domain only when everything works.
Next step
Pick one plugin, send backups to cloud storage, and run a restore test this week. Then check your host’s own backup options so you have a second copy. For a deeper look at related tools, read our guides on migration plugins and security plugins.