CPBackup
Off-site cPanel backups
Get Started Login
Home / Docs

Docs

A small, practical documentation hub for setup, security, restores, and common questions.


Overview

What CPBackup does and why the format matters.

CPBackup keeps independent off-site backups separate from your hosting provider — stored in native cPanel (cpmove) format so restores can begin immediately (no rebuild or conversion step).

Each backup includes a secure wget restore URL so you can pull it straight onto your destination server over root SSH for fast server-to-server recovery.

Restore options
wget URL + cPanel restore
Server-to-server when speed matters.

Security

Plain-language safeguards to protect access and keep restores reliable.

At a glance

Encrypted transfers · Token-based access · SSRF protections · Off-site storage isolation

Encrypted transport
  • SSH/SCP
    Backups transfer over encrypted channels (no FTP).
  • Server-to-server restore
    Use the secure restore URL to pull directly onto the destination server.
  • No inbound access required
    You control what your server allows — restores are initiated by you.
API authentication
  • Token-based access
    Use scoped cPanel API tokens instead of passwords.
  • Revocable anytime
    Remove a token to instantly stop access.
  • Least privilege
    Grant only what’s needed for backup operations.
SSRF protection
  • Private/reserved IP ranges restricted
    Blocks requests to internal network targets by default.
  • Safer hostname handling
    Reduces risk when clients enter their own hostnames.
  • Optional allowlisting
    Where needed, restrict access to approved targets only.
Off-site storage & isolation
  • Off-site by default
    Keeps backups independent from your hosting provider.
  • UK-based storage
    Designed for customers who prefer UK infrastructure.
  • Account-level separation
    Each client’s data is isolated to reduce cross-account risk.
Integrity & restore model
  • Native cPanel format
    Stored as cPanel generates it (cpmove), so restores can start immediately.
  • No rebuild step
    No conversions or repacking before you can restore.
  • Retention enforcement
    Keep the newest restore points and automatically expire older ones.
Best practices
  • Keep restore URLs private
    Treat restore links like passwords — never paste them publicly.
  • Secure your portal login
    Use a strong password and enable 2FA if available.
  • Limit who can change settings
    Restrict access to tokens, schedules and restore options.
  • Rotate tokens on change
    Update tokens if staff access changes or exposure is suspected.
Common mistake

If you need to share a restore URL with support, share it only in a private ticket and redact sensitive parts where possible.

Restore guide

Fast recovery using the secure wget restore URL and native cPanel format.

Quick steps
  1. Copy the wget restore URL from Backup Manager.
  2. SSH to the destination server as root, then download with wget.
  3. Restore in cPanel/WHM — it’s already in native cPanel format.

WHM: Backup Restoration → Restore a Full Backup/cpmove file.

Before you start
  • Destination server
    Run the download on the server you’re restoring onto.
  • Root access
    Or equivalent privileges for your restore method.
  • Private restore URL
    Treat it like a password.

Tip: Native cPanel format + server-to-server download is usually the fastest recovery path.

wget (example only) CLI

Example only. Your real restore URL is shown for each backup in the Backup Manager. Run this on the destination server (not your PC) and treat the URL like a password.

cd /root
wget -L --content-disposition --trust-server-names 
'https://cpbackup.net/backup?action=downloadtoken&token=TOKEN_EXAMPLE_ONLY'
Prefer a simpler option?

You can also download backups to your PC using the Download button shown for each backup in the Backup Manager. You don’t need to use wget if you’d rather download locally first.

Troubleshooting
  • Resume
    Use wget -c to continue.
  • Disk space
    Free space should be at least the backup size.
  • Expired / 403
    Regenerate the restore URL in Backup Manager.
  • DNS
    Check resolver / network if the host can’t be resolved.

FAQ

Everything from billing and retention to restores, access and troubleshooting.

What does the base plan include?
£10/month includes 10GB of storage.
How is overage billed?
Additional usage is £1/GB, billed monthly at the end of your billing cycle.
What does “storage used” mean?
It’s your total stored backup size at billing time.
Can I lower my bill?
Yes — reduce stored backup size before your billing date and the next invoice reflects it.
Are there storage tiers?
No — pay only for what you store. No forced plan upgrades.
Why is native cPanel format important?
Backups are stored in native cPanel (cpmove) format — no rebuild or conversion step.
What is the wget restore URL for?
It lets you pull backups server-to-server, which is often much faster than downloading via a home/work connection.
Do I have to use wget?
No — you can also download backups to your PC using the Download button in Backup Manager.
How long do restore links last?
Each restore URL is unique per backup and intended for recovery use. If you need a fresh link, open the backup again in Backup Manager.
How often can backups run?
You choose the schedule — set it to match how frequently your sites change.
Can I change retention later?
Yes — adjust how many restore points you keep anytime.
What happens when I reduce retention?
Older restore points are removed first, keeping your newest backups available.
Do you store my passwords?
Where possible, use tokens instead of passwords — tokens can be revoked anytime.
Can I revoke access?
Yes — revoke or rotate the token at any time if access changes or you suspect exposure.
Are transfers encrypted?
Transfers use secure channels wherever possible.
Why does off-site matter?
If your primary host has an outage, off-site copies keep recovery options available.
Where should I check for incidents?
Check the Status page for active incidents and updates.
What should I include in a support ticket?
Include the domain/hostname, backup job ID (if shown), approximate time, and the full error/output text (screenshots help too).
A backup failed — what now?
Check the backup status/details first. If it still isn’t clear, submit a ticket with the failure message and timestamp.
What’s included in a backup?
It’s a full archived backup of the cPanel account — email (accounts/forwarders), MySQL databases, all files/folders, and websites/apps hosted in the account.
What format is it stored in?
Native cPanel (cpmove) format, so restores can start immediately with no conversion step.
How do I download a backup?
Use the Download button in Backup Manager to save it to your PC, or use the secure wget restore URL for server-to-server transfers.
Need help?

Not sure whether to use the wget restore URL or download to your PC first? Tell us what you’re trying to restore and we’ll point you to the safest, fastest path.

For an exact cost estimate, use the calculator on the Pricing page.

If something fails, include the exact command you ran and the full error/output in your ticket for quicker resolution.