without sharing your passwords.
The module runs on your own server; when a backup is due, our panel triggers it over HTTPS. You don't need to enter your FTP, database or hosting panel passwords into our system, and if you wish, the archive is encrypted with AES-256 before it leaves your server.
Secure Data Infrastructure
Your data stays under your control from start to finish
Your backups are packaged on your own server and go straight to your own storage; backup files are not stored on our servers. If you wish, the archive is encrypted with AES-256.
- Built in Türkiye: a Bursa-based team; the panel is hosted in Türkiye.
- Optional encryption: if you turn on AES-256, the archive is encrypted on your site's server.
- Data protection tools: data export, account deletion and an audit log in the panel; your data is not shared with third parties.
- Support: support tickets from the panel and a contact form, provided in Turkish; if you prefer, we can perform the restore for you as a paid service.
Optional Encryption
AES-256 Algorithm
$ct = openssl_encrypt($chunk, 'aes-256-cbc', $key, OPENSSL_RAW_DATA, $iv);
// With encryption on, the archive is encrypted before it leaves your server
System Features
Website Backup Features
Zero-Server-Storage
Your backup files are not stored on our servers. They are packaged on your own server and uploaded directly to your own storage; we only keep metadata such as date, size and status.
AES-256 Encryption (optional)
If you wish, your backups are encrypted with AES-256: the archive is encrypted on your site's server and travels to your storage encrypted. The passphrase is known only to you; we do not store it and cannot open your backups. If you lose it, encrypted backups cannot be recovered.
Immutable Backup (WORM) NEW
The nastiest part of ransomware is that, once inside your server, it deletes the backups too. In a bucket with S3 Object Lock enabled (Amazon S3, Wasabi, Backblaze B2, MinIO), your backups become undeletable and unmodifiable for the number of days you choose; in COMPLIANCE mode that includes your own account. Other storage destinations do not offer WORM.
Wizard-Based Restore
Restore the whole backup or only the files, the database or the emails, either to the original location or to another domain in your account. A three-step wizard guides you: component selection, summary, confirmation.
PHP Backup Module (Universal Setup)
Upload the module to your site's root directory and connect your WordPress, Laravel, OpenCart or custom PHP site without sharing FTP details. Backups are written directly to your own storage. Requires PHP 7.1+ (8.1+ recommended).
Virus & Malicious Code Scanning
If you wish, your files and database are scanned for malicious code during the backup (off by default, no extra charge). In email backups, messages carrying malicious attachments are always left out of the archive. The scan runs on your own server and you see every finding in the panel. It detects; it does not clean automatically.
Multiple Storage Destinations
Write the same backup to up to 3 destinations at once (e.g. Drive + S3 + your own server). If one goes down, you restore from another. No extra charge.
Email (IMAP) Backup NEW
Alongside files and databases, your mailboxes are backed up via IMAP too; the folder structure is preserved and messages are not duplicated on restore. Requires the PHP imap extension on your server.
Storage Providers
Google Drive, Amazon S3 and S3-compatible services (Backblaze B2, Wasabi, Cloudflare R2, MinIO), OneDrive, Yandex.Disk and Dropbox (up to 150 MB per archive). To keep everything on your own infrastructure: the site's own server, or the Receiver Module installed on a separate server.
8-Layer Backup Verification
Every backup is checked in eight layers: coverage, content, database, trend, presence at the destination, integrity, drill and incremental chain. In the weekly sample restore test, the archive is downloaded on your own server and its integrity and the completeness of the database dump are verified. If an archive can't be found at the destination, you see a warning in the panel and receive an email.
Backup Report Card
For every backup, see what is on the site and what is in the backup side by side: file count, databases (is any missing?), mail accounts and folders, integrity and presence at the destination. The report card is ready in the panel for every backup; when your first backup is taken, its summary arrives by email.
Backup Content Viewer
Look inside a huge archive without downloading it: browse the file list folder by folder and find the file you need (the viewer only lists), then select just that file in the restore wizard's file tree and restore it. You don't need to restore the whole site for one accidentally deleted image or a single template file.
Frequent Backup & Smart Skip
If even hourly isn't enough, take a backup every 15 minutes with Frequent Backup; made for stores whose order and stock data change often. With incremental mode on, no empty backup is created when nothing on the site has changed, so your cloud space doesn't fill up with needless files.
Incremental Backup
An optional mode: changed files, changed database tables and new email messages are transferred; a full backup is taken again at set intervals. It is enabled separately for files, database and email; a discount applies to each component where it is on. It covers all three components in the PHP Backup Module and files only in the WordPress plugin; in the chunked mode used for very large sites, only email is incremental.
Customer Portal
Open unlimited customer accounts and assign domains with per-permission control: back up, download, restore, or view only. Your brand name, logo and support details appear on the portal login screen and in portal emails.
Server / Domain Migration
The same infrastructure is used not only for backups but also to move a site to another server. Move files and database to a target domain in your account using the source's latest full backup; an old → new database mapping is applied and your configuration files are updated with the new details. The module must be installed on the target server.
Automatic Old Backup Cleanup
For each backup type (Files · Database · Email · Full) only the newest N are kept and older ones are deleted from your cloud space automatically. You decide how many to keep; the feature is off by default, and none of your backups is touched unless you turn it on.
Reporting & Notifications
Track backup status, errors, your cloud quota and transfer usage in the panel; the backup calendar shows which site is backed up on which day. Notifications arrive by email, in-app notification or signed Webhook, and a weekly summary email is sent every Monday. You can create scoped API keys for automation.
Process
How to Set Up Automatic Backup in 4 Steps
Once you've signed up, it takes less than 5 minutes to start taking backups. Here's the whole process:
Add a Domain
Upload the PHP Backup Module to the root directory and click Verify in the panel to connect the domain; there's no need to share FTP or database details.
Connect Your Cloud
OAuth for Google Drive, Dropbox, OneDrive and Yandex.Disk; your own keys for Amazon S3 and S3-compatible storage, or your own server.
Choose the Frequency
Monthly, weekly, daily, hourly or every 15 minutes. Choose the frequency and time separately for each component; a failed backup is retried within 4 hours.
Back Up, Monitor & Restore
Backups start automatically and you can follow progress live. If something goes wrong, restore fully or partially with the wizard.
Connection Tool
Backup Modules
Connect your site to Yedekalma without sharing FTP or database details. Download the helper that suits your platform, install it, connect it.
Free WordPress Plugin
No Account RequiredIf you'd like to try it free first: the Yedekalma plugin on WordPress.org takes a full backup in one click, restores from the same screen, migrates your site to a new domain and runs a malicious code scan. It all runs on your own server; no sign-up, API key or paid version is required. How is WordPress backup done?
Download from WordPress.org → Free · GPL licensed · Can connect to the panel for scheduled backupsPHP Backup Module
Universal PHP SetupFor WordPress, Laravel, OpenCart or custom PHP sites (PHP 7.1+, 8.1+ recommended). Upload the module to the root directory; your database credentials stay with you. It backs up files, MySQL/MariaDB databases and mailboxes together.
How to Install & Download → Setup steps + download linkOther Platforms
Any Site Running PHPThe PHP Backup Module works on any site running PHP, including Joomla, OpenCart, PrestaShop and Drupal. If you use a platform that isn't listed, write to us and we'll look at it together.
Suggest Your Platform → Write to us for setupPricing
Pricing by Backup Frequency
You only pay for backup frequency; site size doesn't change the price and there is no storage fee (backups sit in your own space).
- ✓ Unlimited number of backups; your bill doesn't grow because your site does
- ✓ Four components: Files · Database · Email (IMAP) · Full
- ✓ Optional incremental backup: files · database · email (PHP Backup Module; files only in the WordPress plugin — a discount on each component where it is on)
- ✓ Optional AES-256 encryption (on your site's server)
- ✓ Backup to your own cloud or your own server (Receiver Module)
- ✓ Multiple storage destinations: the same backup to up to 3 destinations
- ✓ Restore wizard (3 steps): full, partial or a single file
- ✓ Malicious code scanning (files · database, optional) + malicious message filter for email
- ✓ 8-layer verification + Backup Report Card + archive-loss alert
- ✓ Immutable backup support with S3 Object Lock (WORM)
- ✓ Customer Portal: customer accounts with per-domain permissions
- ✓ Email · in-app · Webhook notifications
- ✓ Panel and account data in Türkiye
- ✓ Backup files are not stored on our servers
- ✓ Payment: bank transfer / EFT
- ✓ Annual billing (discount for paying 2–3 years upfront) · cancel any time
Comparison
Hosting Backups vs. Automatic Backup
The speed, security and cost advantages Yedekalma offers over traditional backup methods.
| Feature | Traditional Backup | Yedekalma |
|---|---|---|
| Setup time | Hours / days | 5 minutes |
| Automation | Manual script / cron | Fully automatic + notifications |
| Backup transfer | A full copy every time | Full or optional incremental |
| Backup storage | Kept on the server / centrally | Zero-Server-Storage (straight to your own cloud) |
| Server access | FTP / DB passwords are shared | No passwords shared (PHP Backup Module) |
| Backup integrity | Manual checks | 8-layer verification + Backup Report Card |
| Encryption | Requires a plugin | Optional AES-256 (on your site's server) |
| Multiple storage destinations | Separate configuration | Up to 3 destinations at once (included) |
| Ransomware protection | Backups can be encrypted/deleted too | S3 Object Lock (WORM), undeletable backup |
| Malicious code scanning | Requires a separate product | Files · database (optional) · email filter (included) |
| Single-file recovery | Download + extract the whole archive | List the archive without downloading, pick the single file in the wizard |
| Restore | Manual commands / SQL | Wizard-based restore (files · DB · email) |
| Error monitoring | Reading log files | Panel + email alerts |
| Data protection (KVKK/GDPR) | Your own responsibility | Data export, account deletion, audit log |
| Cost | Sysadmin hours + disk | Per domain per year, by frequency |
Security & Compliance
Security and Privacy
The security measures we use in our backup infrastructure, and tools that help with your data-protection processes. We make no compliance claims; compliance comes from your own processes.
In short
What Is Website Backup and How Is It Done?
Website backup means keeping a copy of your site's files, database and mailboxes somewhere else. Manual site backup is not enough for two reasons: it gets forgotten, and it is never tested. The right answer is automatic backup — the backup runs by itself, is verified, and is reported back to you.
Read more: how it works and how often to back up
At Yedekalma, automatic website backup runs from a single PHP module: you upload it to your site's root, the archive is built on your own server and uploaded straight to your own cloud account. You never share your FTP or MySQL password with us for database backup; backup files are not stored on our servers. WordPress backup needs no plugin either — the same module works for WordPress, WooCommerce, Laravel, OpenCart, Joomla and custom PHP sites.
You can choose the frequency separately for each component: weekly for brochure sites, daily for sites with regular content, and hourly for e-commerce backup where an order or stock change must not be lost. Every backup taken is verified in 8 layers (including the SHA-256 checksum, a properly closed archive and the completeness of the database dump) — because a backup that will not open on the day you need it is the same as no backup at all.
For more detail, see: website backup · WordPress backup · database backup · email backup · backup verification · incremental backup. For pages specific to your platform see all backup solutions, for packages and amounts see backup pricing, and for the differences with other tools see the backup comparison.
Frequently Asked
Frequently Asked Questions About Website Backup
eval/base64, known shells such as c99/r57/wso, EICAR), and the database for code injected into content. The paths of any findings are listed in the panel and you get an email notification. In email backups, messages carrying malicious attachments are always left out of the archive and reported in the panel. Note: this is detection; nothing is cleaned automatically (cleaning is available only in the free WordPress plugin).
- The trial belongs to your account; it is not given separately for each domain. It ends on the same date for all domains linked to your account.
- During the trial you can add at most 1 domain; for more, you need to start a subscription.
- During the trial you can take backups of any type and in any number: Full (files + database + email), Files only, Database only or Email only.
- When the trial ends, you need to start a subscription for your domains so that backups continue.
No credit card required, no commitment, cancel any time. There is NO automatic charge at the end of the trial.
Contact
Get in Touch
Technical and sales support for fast answers
Ask our team anything about our backup services, plans or your disaster-recovery scenarios. We will get back to you as soon as possible.
Our Email Address
destek@yedekalma.com
Head Office
Konak Mahallesi Barış (120) Sokak Ofis Artı No:3 Kapı No:12, Bursa, Türkiye