A complete backup has three parts: the backup file, your uploads, and your encryption keys.
1. The backup file
In the Console, open Tools → Backups and press Download backup. It's one file with your content, settings, people and redirects. Only administrators and the owner can download one, and only the owner's backup includes everyone's sign-in details.
2. Your uploads
Uploaded files are listed in the backup but not included. Copy the uploads folder from Webfaze's data folder as well.
3. Your encryption keys
Copy config/secrets.env from the data folder and keep it somewhere separate from your other backups. It holds the keys that check passwords and unlock saved credentials. Keeping it apart means a stolen backup on its own can't be used to crack passwords. You need it to restore onto a different server.
Faster on a VPS: copy the whole data folder, for example tar czf webfaze-backup.tar.gz data/. With SQLite, data/webfaze.db is your database. With MySQL, back up the database with your host's tools too.
Automatic backups before updates: every update from the Console saves a full backup in the data folder's backups/ folder first.
Restoring
- Tools → Backups → Restore from a backup, choose the file.
- Tick I understand this replaces all current content and press Restore.
Restoring replaces the whole site and signs everyone out, so use it to recover, not to bring back one post. A backup made on a newer version of Webfaze can't be restored on an older one: update first.
Even when the licence has lapsed, the backup download stays available.