Title: Okleone Backups – Backup, Restore, Migrate, Encrypted Cloud Backups Author: damjanfixit Published: zosun 4, 2026 Last modified: zosun 24, 2026 --- Search plugins ![](https://ps.w.org/okleone-backups/assets/banner-772x250.png?rev=3681743) ![](https://ps.w.org/okleone-backups/assets/icon.svg?rev=3681743) # Okleone Backups – Backup, Restore, Migrate, Encrypted Cloud Backups By [damjanfixit](https://profiles.wordpress.org/damjanfixit/) [Download](https://downloads.wordpress.org/plugin/okleone-backups.3.16.27.zip) * [Details](https://fon.wordpress.org/plugins/okleone-backups/#description) * [Reviews](https://fon.wordpress.org/plugins/okleone-backups/#reviews) * [Installation](https://fon.wordpress.org/plugins/okleone-backups/#installation) * [Development](https://fon.wordpress.org/plugins/okleone-backups/#developers) [Support](https://wordpress.org/support/plugin/okleone-backups/) ## Description Okleone Backups backs up your database and files into verified archives, restores them through a wizard that checks everything with a dry run first, and moves whole sites between domains without breaking serialized data. The features other plugins charge for are the point of the free version: encryption with a key only you hold, cloud storage connected in one click, and migration that actually works. **Backups** * Manual and scheduled backups, hourly to monthly, of your database, plugins, themes, uploads and other wp-content folders * Built for large sites: archives are split into parts and written across many short requests, so a 4 GB site backs up on ordinary shared hosting where a single long request would be killed * Every archive is checksum-verified after it is written, and again before it is restored * Retention rules so old backups clean themselves up * Email reports, either every backup or only the ones with a warning or an error **Encryption, free, with your key** Switch it on and every new backup is encrypted on your server with AES-256-GCM before it is stored anywhere, local disk included. You hold the recovery key; no storage provider, no host, and not Okleone Backups itself can read your archives. A standalone decrypt tool ships in the plugin folder, so even a site that no longer exists cannot lock you out of your own backups. **Cloud storage without developer accounts** Connect Dropbox or OneDrive by approving access on the provider’s own consent screen. No app registration, no API keys to paste: our relay holds the app credentials so you never have to create developer apps, and your files travel directly from your server to the provider. **Restores you can trust** The restore wizard verifies the archives, then runs a dry preflight that reports exactly what would change before anything does. A restore that is interrupted resumes instead of starting over. Pick single components, the database alone, or everything. **Migrate and clone** Move a site to a new domain: URLs, paths and table prefixes are rewritten safely, including inside serialized data, which is where most search-and-replace tools corrupt a site. Take a full backup on one site, bring the package to another by cloud storage or upload, and press Migrate. Both directions are free. **Housekeeping** Database cleanup (revisions, transients, orphaned rows), file cleanup that shows where your disk actually went, a cron viewer, site info for support requests, and settings export/import. **Premium** The premium build adds, on top of everything above: incremental file backups (after the first full, each run carries only what changed, and a restore replays the chain for you), a staging site on your own server, Rescue Protection (an emergency console that keeps working when WordPress will not load, with crash pages that email you recovery credentials), a restore point taken automatically before plugin, theme and core updates, Amazon S3, Google Drive, Azure Blob, SFTP, FTP and S3-compatible services as storage targets, and 1 GB of managed WP-AllBackup Storage in Germany with every licence. Premium is a separate build, WP-AllBackup, from your account at [wp-allbackup.fixit.biz](https://wp-allbackup.fixit.biz/); install it and your settings, schedules and restore points carry straight over. ### External services The free plugin works without any account: backups, restores, scheduling, encryption, migration and the cleanup tools all run entirely on your server and contact nobody. Two optional features talk to external services, and only when you use them: **The WP-AllBackup auth relay and portal**, when you connect Dropbox or OneDrive. Pressing Connect registers your site with our portal (portal.fixit.biz), which issues the site a token; the relay (relay.fixit.biz) uses that token to hand your site the provider’s access token after you approve access on the provider’s own consent screen. We hold the provider app credentials so you do not have to create developer apps; we never see your files. What is sent: your site URL, the plugin version, and the token exchange itself. The same portal validates a licence key if you enter one. Our [privacy policy](https://wp-allbackup.fixit.biz/privacy.html) and [terms](https://wp-allbackup.fixit.biz/terms.html) describe both services. **Dropbox and Microsoft OneDrive**, after you connect them. Backup archives are uploaded from your server directly to the provider’s API, and deletions run there when retention removes an old backup. Their terms apply to what you store: [Dropbox privacy](https://www.dropbox.com/privacy), [Microsoft privacy](https://privacy.microsoft.com/). ## Screenshots [⌊Backup and Restore: one screen for taking a backup and for the restore points you already have.⌉⌊Backup and Restore: one screen for taking a backup and for the restore points you already have.⌉[ Backup and Restore: one screen for taking a backup and for the restore points you already have. [⌊The restore wizard's dry run reports what would change before anything does.⌉⌊ The restore wizard's dry run reports what would change before anything does.⌉[ The restore wizard’s dry run reports what would change before anything does. [⌊Targets: local disk plus Dropbox and OneDrive, connected without developer apps.⌉⌊ Targets: local disk plus Dropbox and OneDrive, connected without developer apps.⌉[ Targets: local disk plus Dropbox and OneDrive, connected without developer apps. [⌊Policies: schedules from hourly to monthly with retention and backup windows.⌉⌊ Policies: schedules from hourly to monthly with retention and backup windows.⌉[ Policies: schedules from hourly to monthly with retention and backup windows. [⌊Encryption: switched on once, with the recovery key only you hold.⌉⌊Encryption: switched on once, with the recovery key only you hold.⌉[ Encryption: switched on once, with the recovery key only you hold. [⌊Migrate / Clone: three steps, with the dry run before the site changes.⌉⌊Migrate/ Clone: three steps, with the dry run before the site changes.⌉[ Migrate / Clone: three steps, with the dry run before the site changes. ## Installation 1. Install through the WordPress plugins screen, or upload the plugin folder to `/ wp-content/plugins/okleone-backups/`. 2. Activate it through the Plugins screen. 3. Open the backup menu and press Backup Now. The local backup directory works out of the box, automatic backups are off until you switch them on in the policy, and the Targets tab adds cloud destinations when you want them. ## FAQ ### Where are backups stored? On a fresh install, in a `wpab-backups` folder beside your web root when the server lets the plugin write there, which no web request can reach; otherwise in `wp-content/ wp-allbackup-backups`, protected from direct download. Settings > Backup directory shows the folder in use and lists the alternatives. Optionally on every connected remote storage target as well. ### How do I make sure my backups cannot be downloaded over the web? Okleone Backups ships an `.htaccess` and a `web.config` that block direct access on Apache and IIS, and it takes the world-readable bits off the folder and its files so a web server running as a different user cannot serve them. It also checks, from the plugin, whether the folder actually refuses a real HTTP request, and shows a warning if it does not. nginx, Caddy and LiteSpeed do not read `.htaccess`, so on those you must add the rule yourself. For nginx, inside the site’s `server { }` block: ``` location ~* /wp-content/wp-allbackup-backups/ { deny all; return 403; } ``` The most robust option on any server is to move the backup folder outside your web root entirely: set an absolute path in Settings under “Backup directory” and the archives you already have are moved with it. If your hosting gives you nothing above the web root, keep the default and add the server rule above. ### Are my backups encrypted? If you want them to be. Under Settings > Encryption, switch it on and every new backup is encrypted on your server before it goes anywhere, local disk included. You are shown a recovery key once; write it down somewhere that is not this site, because it is the only way to read these backups elsewhere and nobody, Okleone Backups included, can recover it for you. Restores decrypt as they read, and `bin/wpab-decrypt. php` in the plugin folder decrypts an archive on any machine with PHP. ### Do I need API keys for Dropbox or OneDrive? No. Cloud connections run through the WP-AllBackup auth relay: you approve access in the provider’s own consent screen and tokens are delivered to your site server- to-server. See the External services section for exactly what travels where. ### Will it back up a large site on shared hosting? Yes, that is what the split-archive design is for. Archives are written in parts of a configurable size, one short request at a time, with the backup saved after every part; a request that is killed costs one part and the next request carries on. The same slicing applies to verification and uploads. ### What is a full backup here, and what is incremental? Every file backup the free plugin takes is a full one, so any backup can stand on its own and be migrated on its own. Incremental file backups, where each run after the first carries only what changed, are part of premium; a chain made there restores on any plan. ### Can I restore a site that no longer loads? That is Rescue Protection, part of the premium build: an emergency console installed under a randomized name that loads nothing from WordPress, plus crash pages that email you recovery credentials when the site goes down. The free plugin restores through wp-admin, and encrypted archives can always be decrypted off-site with the bundled tool. ### What happens to my backups if I uninstall the plugin? Backup archives are left untouched. Settings, history metadata and schedules are removed. ### What does premium add, and what happens to my data if I upgrade? Incremental backups, staging, Rescue Protection, pre-update restore points, the S3, Google Drive, Azure, SFTP, FTP and S3-compatible targets, and 1 GB of managed storage. Premium is the WP-AllBackup build, from your account; install it and settings, schedules and restore points carry straight over. ## Reviews ![](https://secure.gravatar.com/avatar/a86dfcc776d42a8d03dcd9ab2888d0ba5378e92dd85525b36457fab7b96deeac? s=60&d=retro&r=g) ### 󠀁[Fast support resolution](https://wordpress.org/support/topic/fast-support-resolution/)󠁿 [zavodks](https://profiles.wordpress.org/zavodks/) zosun 15, 2026 I had an issue with the staging environment , the support was pretty fast and identified the the issue after sending the error issue. They got it resolved next day!! Keep the good work! [ Read all 1 review ](https://wordpress.org/support/plugin/okleone-backups/reviews/) ## Contributors & Developers “Okleone Backups – Backup, Restore, Migrate, Encrypted Cloud Backups” is open source software. The following people have contributed to this plugin. Contributors * [ damjanfixit ](https://profiles.wordpress.org/damjanfixit/) [Translate “Okleone Backups – Backup, Restore, Migrate, Encrypted Cloud Backups” into your language.](https://translate.wordpress.org/projects/wp-plugins/okleone-backups) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/okleone-backups/), check out the [SVN repository](https://plugins.svn.wordpress.org/okleone-backups/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/okleone-backups/) by [RSS](https://plugins.trac.wordpress.org/log/okleone-backups/?limit=100&mode=stop_on_copy&format=rss). ## Changelog The full release history travels with the plugin and lives at [wp-allbackup.fixit.biz](https://wp-allbackup.fixit.biz/). #### 3.16.27 * Fixed: when the premium build is activated beside this plugin, the page reloads once by itself, so the admin menu shows the premium build instead of this plugin. * Premium: the premium build removes this plugin once it has taken over, and your backups, settings and schedules carry on. #### 3.16.26 * Changed: the Rescue Protection switch under Settings is greyed out on this build, which does not include it, and saving settings keeps it as it was for the premium build. #### 3.16.25 * Fixed: the Rescue Protection switch under Settings says it is not part of this build, and the Licence card no longer says connecting arms it. The switch is kept for the premium build. * Premium: turning the switch off removes the emergency console, and after Disarm under Advanced Tools the console no longer comes back on the next page. #### 3.16.24 * Fixed: a restore point kept only on WP-AllBackup Storage says “Not restorable here” on a site that cannot reach that storage, instead of offering a Restore that could not work. #### 3.16.23 * Fixed: a plugin that ships packages under node_modules keeps them in the backup, so a restore does not hand the plugin back missing a script it loads. A folder large enough to be a developer’s own install is still left out, and the backup report names it. #### 3.16.22 * Added: the Licence card says which install of this site it is, so a site that has been reinstalled or moved can be told apart from the one it replaced. * Fixed: storage figures read as numbers in every language, rather than borrowing a decimal point from the site’s language. #### 3.16.21 * Fixed: a failure report now reads the event log at the length it has now, so a log that rolled since it was measured keeps its first event. #### 3.16.20 * Fixed: the restore window offered a storage target the site no longer has, and opened on it, so the restore failed its check on archives it had never tried to fetch. A target that cannot answer now goes last, is marked unavailable and cannot be picked. * Fixed: a backup file whose download was cut short by the server’s time limit was counted as the whole archive, so every later attempt skipped it and the check before a restore failed on it every time. The file is now compared with its recorded size before it counts as present. * Fixed: Close and x did nothing while the restore window was checking archives. Checking writes nothing to your site, so the window now closes and keeps every archive it already fetched. #### 3.16.19 * Changed: Delete asks one question before anything is deleted and names the newer restore points that go with it. An imported restore point says whether its only copy is on this server (IMPORTED, ON THIS SERVER) or its files are in storage this site also backs up to (IMPORTED, SHARED FOLDER), where Delete warns that the site that made it loses them. * Premium: Remove imported takes the restore points a licence-wide rescan of WP- AllBackup Storage brought in off the list in one press, without deleting anything on storage. #### 3.16.18 * Premium: Disconnect and Remove for WP-AllBackup Storage say that only this site stops using it and that the other sites on the licence are not affected. #### 3.16.17 * Fixed: backups imported by a rescan of a storage target that was later removed no longer stay in the list as “Local disk” with “Archives missing”. Removing the target removes them and says how many, and your own backups keep their rows. * Fixed: on a phone, the filter for where restore points came from no longer makes the Backup tab scroll sideways. * Premium: deleting a backup brought in from another site on your licence says it only leaves this site’s list, and WP-AllBackup Storage opens one connection per session and waits out an address that refuses every port. #### 3.16.16 * Changed: the Migrate tab lists packages from other sites ten at a time with page links, and filters them by site, full or incremental, status and date; “backups made on this site” pages by ten too. * Fixed: the Migrate dialog gives the date a package was taken instead of its name, and the tab reads each manifest once instead of five times. #### 3.16.15 * Fixed: in the premium build, a staging copy made on hosting that keeps the site folder closed to other users (cPanel’s 0750) can be opened; its folders get the permissions WordPress gives its own, and a build the web server cannot read says so. ## Meta * Version **3.16.27** * Last updated **2 days ago** * Active installations **Fewer than 10** * WordPress version ** 6.2 or higher ** * Tested up to **7.1.2** * PHP version ** 8.0 or higher ** * Language * [English (US)](https://wordpress.org/plugins/okleone-backups/) * Tags * [backup](https://fon.wordpress.org/plugins/tags/backup/)[cloud backup](https://fon.wordpress.org/plugins/tags/cloud-backup/) [database backup](https://fon.wordpress.org/plugins/tags/database-backup/)[migration](https://fon.wordpress.org/plugins/tags/migration/) [restore](https://fon.wordpress.org/plugins/tags/restore/) * [Advanced View](https://fon.wordpress.org/plugins/okleone-backups/advanced/) ## Ratings 5 out of 5 stars. * [ 1 5-star review ](https://wordpress.org/support/plugin/okleone-backups/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/okleone-backups/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/okleone-backups/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/okleone-backups/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/okleone-backups/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/okleone-backups/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/okleone-backups/reviews/) ## Contributors * [ damjanfixit ](https://profiles.wordpress.org/damjanfixit/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/okleone-backups/)