Photo: Mateusz Dach / Pexels. Illustrative photograph. Photo source · Pexels licence
A backup is useful only if the right information can be restored. A file existing in a dashboard is not proof that it contains the current database, uploaded images or configuration needed to rebuild the site. Test recovery before you depend on it during an incident.
Know what the backup includes
List the website files, database, media and essential configuration. Identify any information stored outside the website, such as email or a third-party application. Confirm the backup frequency and how long older versions are retained.
A site with frequent orders may need a different recovery plan from a rarely edited brochure site. Decide how much recent activity the business could afford to reconstruct and how quickly the site needs to return.
Restore into a private test environment
Use a separate location that does not replace the working site. Keep it private and prevent it from sending real emails, collecting payments or being indexed. Restore the files and database according to the platform and hosting procedure.
Then check a representative set of pages and features. Confirm that images, links, users and content are present. Test an important form safely. Record any missing dependency that only became visible during restoration.
Check access and independence
Make sure an authorised business owner can retrieve the backup even if the original site is unavailable. A copy stored only inside the same public website creates an avoidable dependency and may expose private information if served incorrectly.
Do not publish backup archives or database exports in your document root. Store them in a suitably protected location and restrict access to the people responsible for recovery.
My WordPress support service can include reviewing recovery responsibilities. Send your current arrangement without attaching a database, or review my portfolio. Read A WordPress update broke my website. What should I do first? for recovery after an update and Who should own my domain, hosting and website accounts? for account ownership.
A completed restoration test should leave you with a date, a known backup, the checks performed and the gaps found. That is much more useful than a dashboard showing that a scheduled job ran.