Free tools Windows power users keep installed
One-click scans. No signup required.
Use WHM’s scheduled backup system and an Rsync Additional Destination. In WHM → Backup → Backup Configuration, enable backups, set retention, add the remote server with its hostname, SSH port (22 by default), username, destination directory and private key, then select Save and Validate Destination. Run one backup and a restore test before trusting the schedule.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
This approach backs up the cPanel account that contains public_html, rather than silently mirroring only that directory. Keep a local copy as well as the remote destination: cPanel warns that remote transfers take additional processing time and strongly recommends an Additional Destinations location.
As an Amazon Associate I earn from qualifying purchases.
What you need before configuring an automatic remote backup
The WHM method requires root or reseller-level access with permission to configure server backups. Prepare these items first:
- A remote server with enough storage for the backup sets and retention period.
- A dedicated remote account and a directory used only for backups.
- The remote hostname or IP address, SSH port, username and destination path.
- An SSH private key on the cPanel server, with the matching public key installed for the remote account. cPanel recommends key authentication for Rsync destinations.
- A retention policy that fits both the local backup volume and the remote server’s capacity.
- A test account or staging location where you can restore a representative file without affecting production.
Limit the remote account’s permissions to its backup directory. Do not store its private key, password or configuration files under public_html, where a web-server misconfiguration could expose them.
#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Set up WHM to send backups to the remote server
1. Create the remote account and directory
On the destination server, create a separate account for backups and a directory that is not used by a public website. Give the account write access to that directory and read access for verification and restore work. Using a dedicated account makes it easier to revoke access, rotate keys and identify backup traffic in logs.
Record the exact path in the form expected by the destination server. A path that exists for an interactive administrator may not exist for the restricted backup account, so verify it while logged in as that account.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minute2. Prepare SSH key authentication
- Generate or select an SSH key on the cPanel server. Keep the private key on the cPanel host and protect its file permissions.
- Install the matching public key in the remote account’s authorized-key configuration.
- Confirm that the remote account can authenticate without an interactive password prompt and can write to the backup directory.
- Check that the selected SSH port is reachable from the cPanel server. The Rsync destination port documented by cPanel is 22 by default; use another port only when the remote SSH service is configured for it.
Key authentication is preferable for an unattended job because a scheduled process cannot answer a password prompt. If the key is encrypted with a passphrase, ensure your server’s backup design supports non-interactive use; otherwise validation or the scheduled transfer will stop at authentication.
3. Enable backups and choose retention
- Sign in to WHM.
- Open Backup → Backup Configuration.
- Enable the backup system.
- Choose the accounts and backup type required by your recovery plan.
- Set retention values for daily, weekly or other available backup sets according to your storage budget and recovery needs.
- Leave local backups enabled unless you have a documented reason not to keep them. cPanel recommends retaining a local copy as well as a remote destination.
Retention is a recovery decision, not just a storage setting. A single newest archive protects against hardware loss but not against a file that was deleted or corrupted days earlier. Longer retention gives you more historical restore points while consuming more space and extending transfer time.
4. Add an Rsync Additional Destination
- In Backup Configuration, find Additional Destinations and choose Rsync.
- Enter the remote hostname, port, username and destination directory.
- Select or provide the SSH private key that corresponds to the public key installed for the remote account.
- Set the destination timeout within cPanel’s documented range of 30 to 300 seconds. A short timeout can fail on a slow or distant server; a longer value lets a sluggish connection wait longer before being marked unsuccessful.
- Save the destination and click Save and Validate Destination.
Validation is a prerequisite, not a substitute for a complete transfer test. It confirms that cPanel can use the destination settings, but it does not prove that a full backup will fit, finish within the schedule window or be readable during a restore.
Rank #2
- Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
5. Run a real backup and inspect the result
- Start one backup manually after validation.
- Watch the WHM backup status and notification output for completion or transfer errors.
- Log in to the remote server and confirm that the expected archive or backup files exist in the destination directory.
- Check ownership and permissions so the remote account can read the files needed for recovery.
- Extract or restore one representative file into a staging location. For a website, include a file from
public_htmland, where relevant, test the account’s database separately.
Only after this test should you rely on the recurring schedule. A green transfer message demonstrates delivery, not recoverability.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →How cPanel schedules the job
cPanel’s documented default backup cron entry is:
0 2 * * * /usr/local/cpanel/bin/backupThat runs at 2:00 AM in the server’s local time, according to cPanel Support (2023). “Local time” means the timezone configured on the cPanel server, not necessarily your own timezone or the destination server’s timezone. Confirm the server clock and timezone before choosing a maintenance window.
WHM administrators can change the schedule in Configure cPanel Cron Jobs. To force an immediate run for testing or recovery preparation, execute:
/usr/local/cpanel/bin/backup --forceA forced run is useful after changing credentials, destination paths or retention. It can also overlap with the normal schedule if started at the wrong time, so check for an existing backup process before launching another one and allow enough time for large accounts.
Recommended Free Tools
Rank #3
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
What an automatic cPanel backup contains
WHM’s scheduled backup system works at the account level. The account archive includes the files in that account’s public_html, along with the other account data selected by the backup configuration. This is different from a simple directory mirror: an account backup is packaged for cPanel recovery and may include configuration and service data in addition to website files.
If your requirement is specifically “keep a second copy of this one directory,” confirm that the chosen cPanel backup type and retention settings meet that requirement. Do not assume that a successful account archive is an immediately browsable copy of public_html; test extraction and identify the path inside the archive before an emergency.
Incremental backups change the destination options. cPanel states that if you use the Incremental backup type, you can only use Rsync additional destinations. Therefore, an incremental design cannot use an FTP or WebDAV Additional Destination as a substitute.
If you have cPanel access but no WHM
Shared-hosting customers commonly have access to Backup or Backup Wizard but not WHM. The user-level workflow is different:
- Open Backup or Backup Wizard in cPanel.
- Create a full account backup, choosing the available destination option.
- Supply the remote FTP or SCP server details requested by the interface.
- Wait for the archive to be created and transferred, then verify it on the remote server.
A full account backup includes the account’s public_html files. However, cPanel states that a full backup cannot be automatically restored from the cPanel user interface. Recovery requires extracting the archive and uploading the public_html contents, or obtaining help from the hosting provider or a WHM administrator. This makes user-level backups useful for off-site copies but less automated at restore time.
Rank #4
- Easily store and access 4TB of content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Rsync, FTP, WebDAV and SCP: which method fits?
The right method depends on access level, authentication, backup format and how much recovery automation your provider supports. The following comparison uses only capabilities documented for the cPanel workflows above.
| Method | Where it is available | Authentication and transport details | Backup form | Incremental support | Restore and operations considerations |
|---|---|---|---|---|---|
| Rsync Additional Destination | WHM Backup Configuration | Remote hostname, port (22 by default), username, destination path and SSH private key; cPanel recommends key authentication | Transfers cPanel backup data to the remote destination | Supported; cPanel says Incremental backup type can use only Rsync Additional Destinations | Best fit for an SSH-capable server and unattended WHM scheduling; validate the destination, inspect logs and perform restore tests |
| FTP | Supported as a WHM Additional Destination; also available for cPanel full-account backup destinations where the provider exposes it | FTP credentials and server details required by the interface; encryption and exact mode are not stated in the supplied cPanel material | Full account archive in the cPanel user-level workflow | Not stated for FTP; it cannot be used for an Incremental WHM destination | Useful when the remote provider offers FTP but not SSH; restoration from a cPanel full backup is not automatic in the user interface |
| WebDAV | Supported as a WHM Additional Destination | WebDAV endpoint and credentials; exact security options are not stated in the supplied cPanel material | WHM backup data sent to the configured destination | Not stated for WebDAV; Incremental WHM backups require Rsync | Choose only when the destination service is designed for WebDAV and you have verified listing, read access and restore handling |
| SCP | Available as a remote destination in the cPanel Backup or Backup Wizard user-level workflow | Remote SSH/SCP details requested by the cPanel interface; exact scheduling behavior without WHM is not stated | Full account .tar.gz archive |
Not stated; the cPanel Incremental restriction applies to WHM Additional Destinations | Suitable for an off-site archive when you lack WHM; restore requires extraction and uploading files or provider/WHM assistance |
For a server administrator who controls an SSH-capable destination, Rsync is the practical default because it integrates with WHM scheduling and is the only Additional Destination documented for incremental backups. FTP, WebDAV or SCP can still be appropriate when a hosting provider requires one of those protocols or does not permit SSH key access.
Security controls that prevent a backup from becoming a new breach
- Use a dedicated destination account. Do not reuse the account that administers the remote server.
- Restrict directory permissions. Give the account access to the backup directory only, not the entire remote filesystem.
- Protect the private key. Keep it outside
public_html, restrict its permissions and rotate it when staff or hosting access changes. - Separate web and backup paths. A backup directory should not be served by the web server or exposed through a predictable URL.
- Review notifications and logs. A failed transfer, full destination or expired key must produce an alert that someone actually monitors.
- Keep more than one copy. The remote server protects against loss of the cPanel host, while a local copy can make a quick restore possible when the network or destination is unavailable.
Retention and storage planning
Estimate storage from the size of the generated backup set, the number of retained versions and any local copy. Account archives can contain more than the visible website directory, so size the destination for the configured account data rather than only the current public_html total.
Use a retention policy that answers three questions:
- How far back must you recover if an unwanted change is discovered late?
- How many recent restore points are needed during active development or content publishing?
- What is the response when the destination reaches capacity?
When storage is tight, do not simply delete the newest backup. First identify which retention tier is consuming space, confirm that at least one known-good local and remote restore point remains, then adjust retention and run a verified backup.
Troubleshooting failed validation or transfers
Validation fails immediately
- Recheck the hostname, port, username and destination path for typographical errors.
- Confirm that the public key belongs to the private key selected in WHM.
- Test that the remote account can log in from the cPanel server and write to the target directory.
- Check firewall rules on both servers, including a nonstandard SSH port if one is configured.
Validation succeeds but the scheduled transfer fails
- Look for destination-capacity errors and compare free space with the size of the generated backup.
- Review the timeout setting. cPanel documents a range of 30–300 seconds; a slow connection may require a higher value.
- Check whether the backup overlaps with another heavy task or exceeds the available maintenance window.
- Review cPanel notifications and server logs for authentication expiry, permission errors or interrupted connections.
The remote files exist but cannot be restored
- Verify that the remote account can read the files, not merely create them.
- Confirm that the archive is complete and has a plausible size rather than being a zero-byte or partial file.
- Extract a copy in staging and inspect the location of
public_htmlbefore touching production. - If using a cPanel full-account archive without WHM, contact the provider when account metadata or database restoration is required; the cPanel interface cannot automatically restore that archive.
A repeatable verification routine
Schedule a recurring operational check rather than waiting for a disaster:
- Confirm that the last scheduled job completed at the expected server-local time.
- Check the remote destination for a new backup and verify its timestamp, ownership and readable size.
- Review notifications for warnings even when the job reports success.
- Restore one small website file to staging and compare it with the live copy.
- At a longer interval, restore a complete account or representative staging copy, including the data your recovery plan depends on.
- Record the result, the restore duration and any key, permission or capacity changes needed before the next test.
This routine catches the most dangerous failure mode: a backup process that appears successful but produces files nobody can use.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
