Backup
Create complete backups in Admin → Backup & restore (super administrators).
What a backup contains
A backup is a single ZIP file:
| File | Contents |
|---|---|
database.sql | All tables and data |
config.json | Application key, base URL and time zone (no database password) |
uploads/ | Branding images |
manifest.json | Version, creation date, table list and SHA-256 checksums of every file |
The application key is included because it decrypts stored secrets and signs the audit log. Treat backups as confidential.
Creating and downloading
- Click Create backup. Large databases can take a minute.
- The backup appears in the list with its size, date and integrity status.
- Click Download to save it. Downloads are only available to signed-in super administrators.
Backups are stored in storage/backups, which is never accessible from the web. Delete old backups from the list to save disk space.
Tip: Download backups and keep copies away from the hosting account, for example in cloud storage. A backup that only exists on the same server does not protect you if the server is lost.
Integrity check
Every backup is checked against its manifest when it is listed, before it is downloaded and before it is restored. A damaged or modified file is reported as corrupt and cannot be restored.
Other options
cPanel's Backup tool and phpMyAdmin → Export also work. If you use them, also keep a copy of config/config.php (it contains the application key).
To restore a backup, see Restore.