Yedekalma — Backup, Restore, Migration & Malware Scanner

Yedekalma is a free backup plugin that takes a one-click backup of your entire site — files and database — and restores it again from the same screen. It also migrates your site to a new host or domain and scans it for malware.

Everything runs on your own server. No account, no sign-up and no API key: install, activate, click Take Backup. Your backup archives stay on your hosting, and you can download them as a ZIP at any time.

Backup

• Full backup — every file (themes, plugins, uploads) plus the complete database.
• Database backup — MySQL dump only, gzip compressed (.sql.gz) for large sites.
• Files backup — site files only, without the database.
• Works on shared hosting — chunked, time-sliced backup that finishes even when exec() is disabled and PHP limits are strict.
• Incremental backup — compares real file modification times, so a changed file is never skipped.
• Safe storage — local backups live in a hardened, non-browsable folder with unguessable file names.

Restore

• One-click restore of the database, plugins, themes and uploads straight from your dashboard.
• Restore from an archive you already have — drag & drop a .zip, .sql or .sql.gz file and restore from it.
• Integrity checked — a truncated or corrupt archive is refused instead of half-applied, so a bad file can never damage a working site.
• SHA-256 verification of every archive before a restore begins.

Migration

• Move your site to a new host — download the backup, install Yedekalma on the target server and restore.
• Change domain safely — site URL and home URL are rewritten in the database automatically during the restore.
• New database server — wp-config.php credentials can be updated as part of a restore.

Malware scanner

• Security scan of PHP, JS and configuration files across WordPress core, your plugins and the active theme.
• Detects code injections, web shells and backdoors using malicious-pattern matching.
• Persistent results — the scan report survives page reloads, so you can review it whenever you like.
• Bulk clean — select detected files and delete them in one click.
• Core protection — WordPress core files are shielded from accidental deletion while planted files can still be removed.

Optional cloud service

Local backup, restore, migration and the malware scanner are complete on their own and never contact an external server. If you also want off-site copies, you can connect the optional Yedekalma cloud service (see External services below) to:

• Stream backups to your own Google Drive, Amazon S3, Wasabi, Backblaze B2, Dropbox, OneDrive or FTP/SFTP storage.
• Run scheduled automatic backups daily or weekly with retention rules.
• Encrypt archives with client-side AES-256 (BYOK) before they leave your server — the passphrase never leaves your site.

Languages

Yedekalma ships with English, Turkish (Türkçe), German, Russian and Arabic translations.

External services

This plugin can optionally connect to the Yedekalma cloud service (an external SaaS) to perform off-site backup and restore operations, package backups for delivery to your own cloud storage, check subscription state, and monitor backup quota. This connection only happens if you choose to use the cloud service (by entering an API token or using the in-plugin “try without registering” option); the plugin’s local backup/restore features work without any external connection.

• Service URL: https://yedekalma.com
• Terms of Service: https://yedekalma.com/legal
• Privacy Policy: https://yedekalma.com/legal#privacy
• Data Transmission: When connected, the plugin sends requests to the Yedekalma API containing your Site URL, active plugin features, backup metadata (such as file lists, sizes, and checksums), and your API token (or anonymous install id) to perform secure backup and restore tasks.