How to Backup cPanel: The Complete Step‑by‑Step Guide

📌 Quick Overview

1️⃣ Why Backing Up Your cPanel Account Is a Must

You’ve spent countless hours building a site, configuring email, tweaking DNS, and populating databases. One accidental click, a malicious script, or a hardware failure can wipe it all out in seconds.

Key reasons to back‑up regularly

1. Human error – Over‑writing a file, deleting a folder, or mis‑configuring a plugin.
2. Security breaches – Ransomware, compromised FTP credentials, or brute‑force attacks.
3. Server‑side issues – Power loss, disk corruption, or a buggy cPanel update.
4. Regulatory compliance – Some industries require you to retain data for a fixed period.

A solid backup strategy turns these “what‑ifs” into “just a quick restore”.

Bottom line: If you can’t afford to lose the data, you can’t afford to skip backups.

2️⃣ What Exactly Is a cPanel Backup?

In the cPanel world, a backup is a compressed archive (usually a .tar.gz file) that contains all or a selected subset of the files, databases, email, and configuration settings tied to a single hosting account.

There are three primary backup types you’ll encounter:

Understanding the distinction is crucial because it dictates how long the backup will take, where you can store it, and what you’ll be able to restore.

3️⃣ Prerequisites – What You Need Before You Start

Tip: If you’re on a shared hosting plan without SSH, the UI backup wizard will be your primary tool. If your host offers “Backup & Restore” APIs, you can automate the whole process via scripts.

4️⃣ The UI Approach – Using cPanel’s Built‑In Backup Wizard

cPanel makes backups intuitive. Below is a detailed, screen‑by‑screen walk‑through.

4.1 Log Into cPanel

1. Open https://yourdomain.com/cpanel (or the URL given by your host).
2. Enter your cPanel username and password.
3. Click Log In.

4.2 Locate the Backup Wizard

• In the Files section, click Backup Wizard.
• (If you can’t see it, you may have limited privileges; contact your hosting provider.)

4.3 Start a New Backup

1. Click Backup → Full Backup.
2. Choose Destination – Most hosts let you select Home Directory (default) or an FTP remote server.
   • Home Directory is the simplest for a one‑off download.
   • Remote FTP can push the archive directly to an off‑site server.
3. Enter Email Address – cPanel will notify you when the backup finishes.
4. Set a Backup Password (optional but recommended). This password encrypts the archive and is required for restoration.

Pro tip: Use a strong, unique password (minimum 12 characters, mixed case, numbers, symbols). Store it in a password manager.

4.4 Initiate & Monitor

• Click Generate Backup.
• You’ll see a progress bar. For large accounts, this may take 10‑30 minutes (or more).
• Once complete, you’ll receive an email with a link to the backup file location.

4.5 Download the Archive

1. Return to cPanel → File Manager → home directory.
2. Locate the file (e.g., cpmove-username_2024-04-25.tar.gz).
3. Right‑click → Download.
4. Save it to a secure location on your local machine or external drive.

Safety reminder: Verify the download completed without corruption (checksum comparison if available).

5️⃣ Partial Backups – Tailoring What You Need

Sometimes you don’t need a full archive—maybe you only want to snapshot the WordPress site (public_html) and its database.

5.1 Backing Up the Home Directory (Files)

1. Backup Wizard → Partial Backups → Home Directory.
2. Choose Compressed (default) and click Generate.

The resulting file is considerably smaller than a full backup because databases, email, and DNS are omitted.

5.2 Backing Up MySQL Databases

1. In Backup Wizard, click Partial Backups → MySQL Databases.
2. Pick the database(s) you need (e.g., wp_blog).
3. Click Generate Backup.

You will get a .sql.gz file that can be restored via phpMyAdmin, the command line, or within cPanel’s MySQL® Databases interface.

5.3 Backing Up Email Accounts

1. Backup Wizard → Partial Backups → Email Forwarders & Filters (or Email Accounts).
2. Select the accounts you wish to preserve.
3. Click Generate Backup.

Email backups retain mailbox files (.mbox/.eml), forwarder rules, and auto‑responders—perfect for a quick migration.

6️⃣ Restoring From a Backup – Bring Your Site Back to Life

Whether you’re recovering from a crash or moving to a new host, restoration follows a similar pattern.

6.1 Full Account Restoration

1. In cPanel, go to Backup Wizard → Restore → Full Backup.
2. Click Choose File, select the .tar.gz you uploaded via File Manager or FTP, and confirm.

cPanel will unpack everything: files, databases, email, DNS zones. The process can take a while; monitor the “Restoring…” bar.

6.2 Partial Restoration

• Home Directory: Use File Manager → Upload to place the archive, then click Extract.
• Database: In phpMyAdmin, choose Import, browse the .sql.gz, and start the import.
• Email: Upload the email archive into mail folder (/home/username/mail) and set correct permissions (chmod 750 for directories, chmod 640 for files).

6.3 Post‑Restore Checklist

7️⃣ Command‑Line Backups – For Power Users & Automation

If you have SSH access, the CLI gives you speed, granularity, and the ability to schedule recurring backups with Cron.

7.1 Basic Syntax

# Full backup of the whole cPanel account

/scripts/pkgacct username –backup –output /home/username/backups

# Partial backup: only public_html

tar -czf /home/username/backups/public_html_$(date +%F).tar.gz -C /home/username/public_html .

• /scripts/pkgacct is a cPanel utility that creates an account backup (cpmove-username.tar.gz).
• The tar command compresses selected directories.

7.2 Database Dumps

# Dump all MySQL databases for the user

mysqldump -u cpanelusername -p$(/usr/local/cpanel/bin/getuserdatabases username | grep password | cut -d’ ‘ -f2) –all-databases | gzip > /home/username/backups/all_databases_$(date +%F).sql.gz

Security note: Avoid exposing the DB password in the command line on multi‑user systems. Use a cPanel‑generated MySQL socket or a .my.cnf file with restricted permissions.

7.3 Email Archive

# Archive all email folders for the user

tar -czf /home/username/backups/email_$(date +%F).tar.gz -C /home/username/mail .

7.4 Automating With Cron

Edit the crontab (crontab -e) and add a line like:

# Daily full backup at 02:30 AM

30 2 * * * /scripts/pkgacct username –backup –output /home/username/backups && /usr/bin/find /home/username/backups -type f -mtime +30 -delete

• This runs the backup script each night, stores the archive, and automatically deletes files older than 30 days to conserve space.

8️⃣ Off‑Site Storage – Strengthening Your Disaster Recovery

The 3‑2‑1 rule is the industry standard:

• 3 copies of your data
• 2 different media (local disk, external drive, cloud object storage)
• 1 off‑site (different location)

8️⃣1 Using cPanel’s Remote Destination Feature

1. In Backup Wizard → Full Backup, select Remote FTP Server as destination.
2. Input the FTP host, username, password, and optionally a remote directory (e.g., /backups).

cPanel will push the backup directly to the remote server, eliminating the need for a local download.

8️⃣2 Sync to Cloud Storage (S3, Wasabi, Backblaze B2)

If you have SSH, a rclone or awscli command can copy the backup after it’s generated:

# Example with rclone

rclone copy /home/username/backups s3:my-cpanel-backups/username –progress

Schedule this using Cron to run shortly after the backup finishes.

8️⃣3 Using cPanel’s “Site Publisher” (for developers)

Some hosts embed an API token that you can call from a script to push a backup to a Dropbox or Google Drive folder via their respective SDKs. Check the host’s documentation for any proprietary integrations.

9️⃣ Verifying Backups – Don’t Assume They’re Good

A backup that fails silently is worse than no backup at all. Follow these verification steps:

1. Checksum – After download, compare the MD5/SHA1 hash to the one shown in cPanel (if available). Example:
2. md5sum cpmove-username_2024-04-25.tar.gz
3. Test Extraction – On a local machine, run:
4. tar -tzf cpmove-username_2024-04-25.tar.gz > /dev/null && echo “Archive OK”
5. Database Import Test – Load the .sql.gz into a local MySQL instance.
6. Spot‑Check Emails – Open a few mail files (.eml) with a text editor to ensure content integrity.

Make it a habit to verify at least once per month.

🔟 Maintenance – Keeping Your Backup Strategy Fresh

1️⃣1️⃣ Best‑Practice Checklist (Copy‑Paste Ready)

☑ Verify cPanel account has enough free disk space (> backup size × 1.2).

☑ Enable two‑factor authentication for cPanel login.

☑ Use a strong, unique password for each backup archive.

☑ Store backups on at least two media types (local + cloud).

☑ Schedule automated backups via Cron or Backup Wizard.

☑ Test restoration on a non‑production server quarterly.

☑ Keep backup logs (date, size, destination, checksum) in a separate file.

☑ Encrypt backups when transferring over public networks (SFTP/HTTPS).

☑ Update your backup password every 90 days.

☑ Document backup procedures for team members.

1️⃣2️⃣ Common Pitfalls & How to Avoid Them

1️⃣3️⃣ FAQ – Quick Answers at a Glance

Q1. Do I need to back up my SSL certificates?
A: Yes. cPanel includes SSL keys/certificates in a full backup. If you use Let’s Encrypt, you can re‑issue them, but keeping a copy saves time.

Q2. How long does a full backup take?
A: Depends on data size and server load. Rough rule: ~30 seconds per GB for compression on a typical shared host. Expect 5–30 minutes for most accounts.

Q3. Can I schedule backups from the cPanel UI?
A: The Backup Wizard itself does not have a built‑in scheduler, but many hosts expose a “Backup Configuration” module where you can set daily/weekly intervals. Otherwise, use Cron with SSH.

Q4. My host disables SSH – can I still automate?
A: Yes. Look for the host’s API (cPanel UAPI) which can be called via a simple curl script to trigger a backup. Check your provider’s documentation.

Q5. How secure is an FTP backup destination?
A: Plain FTP is not encrypted; consider FTPS (FTP over TLS) or SFTP (SSH). For highly sensitive data, use encrypted archives (openssl enc -aes-256-cbc).

Q6. Do I need to back up cron jobs?
A: They are stored in /var/spool/cron/username on the server. Full backups include them; for partial backups, copy the file manually.

Q7. Will restoring a backup overwrite existing files?
A: Yes – a full restore replaces existing content. If you only need to add missing files, use a partial restore or manually extract the needed folder.

Q8. How to restore an email account without the cPanel UI?
A: Upload the .tar.gz containing the mail folders to /home/username/mail/, set correct permissions, and run cpanel -i mail –restore. This is rarely needed; most hosts require UI.

Q9. Can I back up multiple cPanel accounts at once?
A: Only if you have root or reseller access. Use the pkgacct script for each account in a loop. Example:

for user in user1 user2 user3; do

/scripts/pkgacct $user –output /backups

done

Q10. What if my backup file becomes corrupted?
A: If you keep multiple copies (local + cloud) you can fall back to an earlier version. This underscores the importance of the 3‑2‑1 rule.

🎉 Wrap‑Up: Your Backup Engine Is Now Ready

You now have:

• A clear why behind backups.
• Step‑by‑step instructions for full and partial backups via cPanel UI.
• A command‑line toolkit for power users and automation.
• Strategies for off‑site storage, verification, and regular maintenance.
• A cheat‑sheet checklist, pitfalls to avoid, and a handy FAQ.

All that’s left is to activate the plan, test it, and keep the process disciplined. Remember: a backup is only as good as the last time you tested the restore.

Takeaway: If you can create a backup in five minutes, you can restore in ten. The difference between a minor hiccup and a full‑scale disaster often hinges on this simple habit.

🔑 Keywords

1. cPanel backup
2. website backup
3. cPanel tutorial

📢 Hashtags

#cPanel #Backup #WebHosting

Disclaimer: The information provided in this guide is for educational purposes only. While we make every effort to ensure the accuracy and reliability of the instructions, we are not liable for any data loss, service interruption, or other damages that may arise from the implementation of these backup procedures. Always test backups in a non‑production environment first, and consult with your hosting provider if you are unsure about any step.