Fast Backups

Fast Backups helps you protect, restore, and move a WordPress website. Create a complete backup in the dashboard, download it, restore it on the same site, or import it into another WordPress installation.

A backup packages the database, media, themes, plugins, and supported site files into one portable .wpbackup file. The interface is made for site owners and developers who want a straightforward workflow without database tools or server commands.

Complete WordPress Backups

Fast Backups processes data in stages, displays live progress, and saves the completed archive in protected local storage. A complete backup can contain:

• The WordPress database, including plugin and theme settings.
• Media files from the uploads directory.
• Installed themes and plugins.
• WordPress content and supported files from the site root.

Restore or Migrate a Website

Restore a server backup or upload a .wpbackup file. Fast Backups validates the archive, restores the database and files, and shows progress. On a different domain, it updates source-site references to the destination URL and processes serialized WordPress data.

Common uses include:

• Moving a site to a new hosting provider.
• Moving a local or staging site to production.
• Creating a restore point before an update or redesign.
• Recovering a site from an earlier backup.

Optional Password Encryption

Protect a backup with a password. Encryption uses AES-256-CBC when OpenSSL is available. The password is required for import and cannot be recovered by Fast Backups.

Scheduled Backups

Create independent local, FTP/FTPS, and Google Drive schedules. Run them hourly, every six hours, daily, weekly, or monthly.

For each destination you can:

• Enable or disable its schedule separately.
• Select how often backups should run.
• Choose how many recent backups to keep.
• View the last and next scheduled run.
• Review the latest status or error.

FTP settings support protocol, host, port, username, password, remote path, passive mode, and connection testing. Google Drive supports account connection, storage information, backup runs, retention, and disconnection.

Schedules use WP-Cron and may start late on low-traffic sites. Use a real server cron job when exact timing matters.

Security and Validation

Backup work is divided into stages, and large browser uploads can use chunks when supported. Practical size limits still depend on disk space, PHP, the web server, and the host.

Security safeguards include:

• Backup, restore, download, delete, and schedule actions require administrator capability checks.
• Administrative requests use WordPress nonces.
• Backup downloads are not exposed as public file links.
• Imported archives are checked for the expected Fast Backups structure.
• Archive paths are validated to prevent files from escaping the restore directory.
• PHP-like executable files are blocked from writable upload and cache locations during restore.
• Backup manifests are checked before site data is replaced.

Keep at least one recent backup outside the WordPress server and test restores before an emergency.

External Services

Fast Backups can connect to Google Drive when an administrator chooses Google Drive as a backup destination and authorizes a Google account.

When Google Drive is used, the plugin may send the following data to Google:

• OAuth authorization requests so the administrator can grant access.
• OAuth token exchange and refresh requests required to maintain the connection.
• Folder lookup and creation requests for the backup destination.
• Backup archive data when a Google Drive backup runs.
• File list and deletion requests used for remote retention cleanup.
• Account and storage metadata shown on the schedules screen.

Fast Backups uses the service at https://wpbackup.dev to complete the Google OAuth callback flow. During this flow, authorization data required to connect the administrator’s Google account is transmitted between the WordPress site, the callback service, and Google. The service is not contacted for local or FTP backups.

Google Drive data is sent only when an administrator connects or disconnects Google Drive, views connected account information, runs a Google Drive backup, or enables a Google Drive schedule.

Service terms and privacy information:

• Google APIs Terms of Service: https://developers.google.com/terms
• Google Privacy Policy: https://policies.google.com/privacy
• Google Terms of Service: https://policies.google.com/terms
• Fast Backups website: https://wpbackup.dev/

FTP and FTPS backups send the backup archive and the configured connection credentials to the server specified by the administrator. Fast Backups does not choose or operate that server. The terms and privacy policy of the selected hosting or storage provider apply.

Privacy

Fast Backups does not send site data to an external service when you create, download, restore, or schedule a local backup.

If you configure an external destination, backup archives can contain the complete WordPress database and files, including personal or confidential information stored by the site. Make sure you are authorized to copy that data and that the destination meets your security, privacy, and retention requirements.