# Backups and security

## The nightly backup

Your server is backed up **in full, every night**: your sites, your databases, your mailboxes and your settings. Each backup is **encrypted**, stored **off the machine**, and kept for **seven days**. It runs from outside the server, with nothing for you to set up, and your sites keep serving while it takes place.

## Recovering what was lost

Our team restores, from the night of your choice among the seven:

* a **file** or a **folder** of your site;
* a **database**;
* a **mailbox**, or a folder of messages;
* your **whole account**, as it was that night.

Write to support stating your domain, what is to be restored (the file path, the database name or the email address) and the **night** you want, for example "the night of the 12th to the 13th". Data written after that backup is not included: before restoring a database, export it if you want to keep the day's changes.

## Your own copies

Your data belongs to you, and you keep a copy whenever you wish:

* **your files**: download your `public_html` folder over FTP or SFTP, or compress it into a `.zip` in **File Manager** before downloading it;
* **your databases**: export them from **phpMyAdmin**, **Export** tab, or over SSH with `mysqldump`;
* **your mail**: a mail program set up with IMAP keeps a copy of your folders on your computer.

Before a major update of your site, a new version of WordPress for example, make a copy of your files and your database: you can go back in a few minutes if needed.

## The server's security

Our team keeps the server up to date and monitors it for you:

* the system's **security patches** are applied every day;
* a **firewall** filters access, and repeated login attempts are blocked automatically;
* a permanent **anti-DDoS protection** protects the network;
* outgoing **mail** is monitored, to protect the reputation of your sendings;
* each account runs its **PHP under its own identity**, separated from the other accounts.

On your side, three habits protect your site:

1. keep your CMS, its theme and its plugins up to date;
2. give each email address and each FTP account its own long password;
3. remove the plugins and accounts you no longer use.

## Frequently asked questions

### Are backups included in my plan?

Yes: the nightly backup and its seven days of retention are included in all three plans.

### My site was changed without my knowledge.

Write to support right away, stating the domain and since when you have noticed the change: our team identifies the night to restore with you and helps you close the access that was used.