Schedule Automatic WordPress Blog Backup to Dropbox

The industry standard in 2026 is UpdraftPlus (Free). It is the only major plugin that allows automated Dropbox backups without a paid subscription. Install the plugin, authorize your Dropbox account via OAuth, and set the schedule to "Weekly" or "Daily" depending on your posting frequency.

Many hosting providers promise "Daily Backups," but these are server-side snapshots. If you lose access to your hosting account or if the server melts down, you lose the backups too.
Off-site storage (Dropbox) is critical because it separates your data from your host. The complexity lies in the OAuth Token exchange; if you change your Dropbox password, the backup connection breaks silently.

Checklist

• Dropbox Account: Ensure you have at least 1GB of free space. A single backup can range from 50MB to 500MB.
  
• Plugin: Install "UpdraftPlus WordPress Backup Plugin" (Author: TeamUpdraft).
  
• Administrator Access: You cannot set this up with Editor permissions.
  
• The Hidden Requirement: Disable "Always Keep" on Dropbox. You must configure the plugin to delete old backups (e.g., "Retain this many scheduled backups: 2"). If you don't, your Dropbox will fill up in a month, and future backups will fail.
  

Step-by-Step Guide

• Step 1: Install & Activate
  
  Go to Plugins > Add New. Search for "UpdraftPlus." Install and Activate.
  
• Step 2: Configure Remote Storage
  
  Navigate to Settings > UpdraftPlus Backups > Settings (Tab).
  Under "Choose your remote storage," click the Dropbox icon.
  
• Step 3: The Schedule
  
  Set "Files Backup Schedule" to Weekly (or Daily if you post daily).
  Set "Database Backup Schedule" to Daily (databases are small; back them up often).
  Set "Retain this many scheduled backups" to 3.
  
• Step 4: Authenticate
  
  Scroll down and click Save Changes.
  A popup will appear asking you to authorize Dropbox. Click the link, log in to Dropbox, and click Allow.
  Crucial: Click the final orange button "Complete Setup" to return to your dashboard.
  

How It Works & Hidden Details

The "Chunking" Mechanism:

PHP scripts (which run WordPress) have a "Time Out" limit (usually 30-60 seconds). Uploading a 500MB zip file to Dropbox would kill the script.
UpdraftPlus splits your site into small chunks (e.g., 2MB zip files). It uploads them one by one. If the server times out, it resumes from the last chunk. This is why it is reliable even on cheap shared hosting.

App Folder vs. Full Access:

In the free version, UpdraftPlus writes to a specific sandbox folder: `Dropbox > Apps > UpdraftPlus`. It cannot see your personal photos or other documents. This is a security feature, not a bug. Do not try to force it to write to the root folder.

Things to Watch Out For

• Risk 1: The "exclude" trap. By default, UpdraftPlus backs up "Uploads," "Themes," and "Plugins." It does not back up WordPress Core files (wp-admin, wp-includes). This is fine (you can re-download WordPress), but if you customized core files (which is bad practice), you will lose those edits.
  
• Risk 2: Dropbox Token Expiry. If you use 2-Factor Authentication on Dropbox and change your password, the token UpdraftPlus uses might expire. Check your backup logs once a month to ensure they are green.
  

Frequently Asked Questions

• Q: Can I use Google Drive instead?
  A: Yes. The process is identical. However, Dropbox's API is generally faster and less prone to "token disconnects" than Google's in the WordPress environment.
  
• Q: How do I restore?
  A: If your site breaks, reinstall a fresh WordPress. Install UpdraftPlus. Connect Dropbox. Click "Rescan Remote Storage." Your backups will appear. Click Restore.
  

Update: Additional Details & Recent Changes

• The "Restore" Advantage (Why Updraft Wins in 2026):
  The main reason UpdraftPlus remains the standard over competitors like BackWPup is Restoration. While other plugins allow free backups to Dropbox, they often gate the "One-Click Restore from Console" feature behind a paywall. UpdraftPlus Free allows you to pull the backup from Dropbox and restore it directly within the WP Admin dashboard without needing FTP or manual unzipping.
• Missing `wp-config.php` Risk:
  Be aware that the free version of UpdraftPlus does not backup `wp-config.php` or non-WordPress files (like custom PHP scripts in your root folder) by default. It strictly backs up `wp-content` and the database. If your server is completely wiped, you will need to manually create a new `wp-config.php` (connecting to the database) before you can install UpdraftPlus to run the restore.
• Dropbox vs. Google Drive Permissions:
  As of 2026, Google's API often requires "Full Drive Access" scopes for many backup plugins to function reliably. Dropbox still cleanly supports the "App Folder" isolation (`Apps/UpdraftPlus`), ensuring that if your site is hacked, the attacker cannot delete your personal non-backup files.
• OAuth Refresh Token Cycle:
  Dropbox now strictly enforces short-lived access tokens (4 hours) paired with a "Refresh Token." While UpdraftPlus handles this rotation automatically, if your site has very low traffic (no visitors to trigger the WP-Cron job that refreshes the token), the connection may stale. It is good practice to visit your site admin panel at least once a week to ensure the cron fires and the token refreshes.

Set "Retain this many scheduled backups" to 3.

Update: For "Daily" schedules on limited Dropbox accounts (2GB Free Tier), it is safer to set retention to 2. A typical 500MB site backup x 3 copies = 1.5GB, which is dangerously close to the 2GB limit, potentially causing failed backups if the "delete old" process hangs.