Website Backup Strategy for Small Businesses: The 3-2-1 Rule in Practice
A good backup plan is simple: three copies, two kinds of storage, one off site. Here is how to apply the 3-2-1 rule to your website, with a checklist you can finish this week.
Most small business owners think about backups only after something goes wrong. A plugin update breaks the site. A hacker injects spam. An editor deletes the wrong page. Someone overwrites a file by mistake. In each case the question is the same: how fast can you get back to a working site?
A small business website backup strategy answers that question before you need it. It does not need to be complex. This guide shows how to apply a simple, proven rule called 3-2-1 to your website, and how to turn it into a routine that runs without you.
What can go wrong with a website
Knowing the risks helps you decide how much protection you need. The usual causes of lost or damaged sites are:
- Human error. Deleting a page, overwriting a file or changing a setting you cannot undo.
- Bad updates. A theme, plugin or core update that clashes with the rest of your site.
- Malware and hacks. Injected code, spam pages or redirects that send visitors elsewhere.
- Hosting problems. A failed server or an account issue.
- Ransom and sabotage. Someone locks or deletes your content.
Hosting companies run their own safeguards, but those are meant to keep their platform running, not to protect your content from your own mistakes. Do not treat the host as your only backup.
What to back up
A website has two main parts, and you need both.
| Part | What it holds | Examples |
|---|---|---|
| Files | The code, design and media | Theme files, plugins, images, PDFs, uploads |
| Database | The content and settings | Pages and posts, products, orders, users, comments |
If you save only the files, you lose your content. If you save only the database, you lose your design and uploads. Good backup tools handle both. Look for the ability to back up a single file, a folder or a whole database, so you can restore only what you need.
Also keep a short list of things that live outside the site: your domain login, your DNS records, your email setup, your payment settings and the list of plugins you use. These help you rebuild fast if you must start over.
The 3-2-1 rule, explained
The 3-2-1 rule is easy to remember:
- 3 copies of your data: the live site plus two backups.
- 2 different types of storage: for example, cloud storage and a drive you control.
- 1 copy off site: away from the place where the live site runs.
Why it works: each part protects against a different failure. Two backups guard against one copy being damaged. Two storage types guard against a fault that hits only one kind. An off-site copy guards against a problem that hits a whole location or account.
Here is how it looks for a small business site:
| Copy | Where it lives | Purpose |
|---|---|---|
| 1. Live site | Your hosting account | The working version |
| 2. Automatic backup | Secure cloud storage from your backup service | Fast restore, runs daily |
| 3. Downloaded copy | A drive or storage account you control | Off site, and under your own control |
How often should you back up?
Match the schedule to how often your site changes and how much you could afford to lose.
- Brochure site that changes rarely. Weekly may be enough, plus a backup before every change.
- Blog or site you update often. Daily.
- Online store or booking site. Daily at least. Orders and bookings change by the hour, so ask how much data you could lose in a day.
- Before any major change. Always take a fresh backup before an update, a redesign, a move or a plugin install.
Daily automatic backups are the safest default because they do not depend on your memory. BetterMade Hosting Website Backup runs daily without any scripts or schedules for you to manage.
Automatic versus manual backups
Manual backups work, but they have one weakness: people forget. A backup you last made six months ago is a backup you cannot rely on.
- Manual. You export files and the database yourself. It gives you full control and costs nothing, but it takes time and discipline.
- Plugin-based. A site plugin runs backups on a schedule. It is better than manual, but it adds load to the site, and a broken site may also break the plugin.
- Service-based. An outside service connects to your site and copies it on a schedule to its own storage. It is independent of the site, and the copy survives even if the site is damaged.
For most small businesses, a service-based daily backup combined with an occasional downloaded copy covers the 3-2-1 rule with the least effort.
Where to store your backups
Where you put copies matters as much as how often you make them.
- Do not store backups only on the same server as the site. If the server fails or is hacked, you lose both together.
- Use secure cloud storage for the automatic copy. It should be encrypted and separate from your hosting.
- Keep one copy you control. Download a backup now and then to a drive or storage account you own. BetterMade Hosting Website Backup lets you download backups to local storage at any time.
- Protect the copies. Use strong passwords and 2-step verification on every account that holds a backup.
Backups and security work together
A backup is your recovery plan. Security is your prevention plan. You need both, because prevention is never perfect.
BetterMade Hosting Website Backup includes daily malware scanning and continuous security monitoring, so the copies you keep are checked as well as stored. For prevention, the Website Security plans add a website firewall that filters malicious traffic before it reaches your site, malware scanning and expert cleanup if something gets through. The Advanced and Premium plans also include secure backup storage, 25 GB and 200 GB respectively. Our help center explains how to configure your Website Security backups and how to restore your site using Website Security and Backups.
Other steps that lower your risk:
- Keep your site software, themes and plugins updated.
- Remove plugins and themes you do not use.
- Use strong, unique passwords and 2-step verification for admin accounts.
- Limit the number of people with admin access.
Choosing a backup plan size
For BetterMade Hosting Website Backup, every plan includes the same features: automatic daily backups, daily malware scanning, backups of a file, folder or entire database, continuous security monitoring, downloads to local storage and one-click restore. You pick a plan by how much your site stores. Each plan protects one website.
| Plan | Starting price | Best for |
|---|---|---|
| 5 GB | $2.99 | Documents and files |
| 25 GB | $4.99 | Photos and music |
| 50 GB | $7.99 | Videos and multimedia |
To pick, check how large your site is today and leave room to grow. A site full of photos or video needs more room than a small brochure site. Prices exclude applicable taxes and fees. For a plain explanation of the service, read the help article what is Website Backup.
Test your restore
A backup you have never tested is a hope, not a plan. Test your restore twice a year, and after any big change to your site.
- Pick a recent backup.
- Restore it to a test copy of your site, or restore a single file or folder to see that the process works.
- Open the site. Check that pages load, images show, forms send and, for a shop, the checkout works.
- Note how long it took and who did it.
- Fix anything that did not work, and write the steps down.
With one-click restore you can roll back your whole site, or just a part of it, in a single step. Practice anyway, so you are calm if you ever need it for real.
A simple checklist
Use this list to set up your plan this week:
- List every site and database you run.
- Decide how often each one needs a backup.
- Turn on automatic daily backups.
- Download one copy to storage you control.
- Turn on 2-step verification on the accounts that hold backups.
- Schedule a restore test in your calendar.
- Write down who does what if the site goes down, and where the logins are.
Frequently asked questions
Does my hosting company already back up my site?
Hosting platforms usually run some kind of backup for their own use, and the details differ by product. Do not rely on it as your only copy. For example, see the help article on how to back up and restore a Managed Hosting for WordPress site. An independent backup gives you a second copy you control.
How long should I keep old backups?
Keep enough history to go back past the moment a problem started. Some problems, such as hidden malware, are found days or weeks later. A mix of recent daily copies and a few older copies you downloaded gives you choices.
Do I need to back up my email too?
Email is separate from your website. Your email service stores your messages, and you can also keep copies in your mail app. A backup of your website does not include your mailboxes.
Can I restore just one page or file?
With a service that backs up files, folders or whole databases, you can restore only the part you need. This is useful when one change broke one thing.
What is the difference between a backup and a security plan?
A backup lets you recover. A security plan helps you avoid problems and cleans up if something gets through. Use both.
What if I run an online store?
Orders arrive all day, so back up at least daily and always before updates. Take extra care that your database is included, because it holds your orders and customer records.
Your next step
Start with the simplest part: automatic daily backups. BetterMade Hosting Website Backup runs every day, scans for malware and lets you restore with one click. For stronger prevention, add a firewall and cleanup with Website Security. If you need help choosing, call BetterMade support on (480) 624-2500.
