Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More vs WebsiteFix One-Click Performance Optimizer

WordPress Backup & Migration Plugin Duplicator provides a simple way to move WordPress sites, create reliable backups, or clone a site for staging. With Duplicator, you can easily migrate, transfer, or clone your WordPress site between domains or hosts with no downtime. Create full backups of your website, or package your entire site to download and install elsewhere with only a few steps. At Duplicator, reliability, security, and ease of use are our top priorities. Duplicator is built on the same engine as Duplicator Pro: backups of any size, encrypted archives, 1-click restore and cloud storage are all part of the free plugin. Our easy migration wizard makes Duplicator the most beginner-friendly backup and migration plugin on the market. You don’t have to hire a developer. Create a backup and migrate sites in just a few minutes. Duplicator Pro This plugin is the Lite version of Duplicator Pro, which comes with scheduled backups, cloud storage integrations, multisite support, staging sites and more. Get Duplicator Pro for the complete migration and backup solution. Easy Site Migration, Backup, and Cloning Duplicator streamlines site migrations by packaging your website files and database into a single file, known as a “backup”. Download and re-install your “backup” on any new WordPress location or server without dealing with complicated setups. Launch at your new destination without installing WordPress. Duplicator is the only migration and backup plugin that works on an empty site. See why experts love Duplicator: “Duplicator provides an easy to use tool to make backups of your site, or to transfer it to another location.” Richard McAdams – Expert Web Developer Backups Without Size Limits Duplicator’s chunked backup engine splits the work into small steps, so backups of any size complete even on shared hosting with strict server timeouts. Pick the archive engine that fits your server (DupArchive, ZipArchive or shell zip) and the database engine you prefer (mysqldump or chunked PHP). Backups build in the background while you keep working, and Duplicator runs on managed hosts such as WordPress.com, WP Engine and GoDaddy Managed. AutoTune: Backup Settings That Configure Themselves Not sure which settings your server needs? AutoTune runs real test backups and finds the configuration that works on your host, automatically. Before every backup Duplicator checks your server configuration, and when something goes wrong it explains the problem in plain language and offers a one-click fix. Secure WordPress Backups Duplicator offers WordPress backups with military-grade encryption. Protect any backup with a password and AES-256 archive encryption, and see the security status of every backup at a glance. Automatically backup your entire WordPress site to secure cloud storage. 1-Click Restore Restore any backup with a single click from your WordPress dashboard: no FTP, no manual installer upload. Duplicator makes 1-click restores easy and stress-free. Quickly restore your entire website in minutes just like a time machine. Duplicator Cloud Storage Keep your backups off-site with Duplicator Cloud, our own secure cloud storage built for WordPress backups. Connect your account, send backups to the cloud and restore them from the cloud when you need them. You can also keep backups in several local folders with automatic retention of the most recent ones. Duplicator Pro adds Dropbox, Google Drive, OneDrive, Amazon S3, FTP/SFTP and any S3-compatible provider. Fast WordPress Migrations Duplicator makes WordPress website migrations fast and stress-free. Quickly move to a new host, domain, or server. No downtime, no data loss, and no coding required. WordPress Multisite Backups Duplicator offers automatic WordPress Multisite backups with easy 1-click restore. Safely backup your entire Multisite network to secure cloud storage. WooCommerce Backups Duplicator offers reliable WooCommerce backups with military-grade encryption. Easily and automatically back up your entire online store to secure cloud storage. Pre-configured WordPress Installs Never start from scratch with Duplicator’s smart pre-configured WordPress installs. Save time and hassle duplicating ready-made sites with 1-click. WordPress Recovery Points with Quick Rollbacks Duplicator offers hourly recovery points and 1-click rollbacks for WordPress sites. Quickly and automatically recover from failed WordPress updates or disasters. Partial WordPress Backup Plugin Duplicator makes partial backups for WordPress quick and easy. Save storage and restore sites faster with database-only, media-only, or completely custom backups. Server to Server WordPress Migration Import Tool Duplicator makes server-to-server WordPress migrations fast and hassle-free. Quickly import your website to a new server in minutes. No downtime, no data loss. Smart WordPress Migration Wizard Duplicator’s smart WordPress migration wizard makes transferring your website to a new host or server effortless. Advanced installer options, custom search and replace rules and security key regeneration are all included. No downtime, no data loss, and no code required. Drag & Drop Import WordPress Website Tool Migrating WordPress sites has never been easier with Duplicator’s drag & drop import tools. Quickly transfer your site to a new host or server in minutes, no code required. Clone WordPress Website Plugin Duplicator clones your entire WordPress website with 1-click, no code needed. Perfect for staging sites, sandbox, or site migration. WordPress Staging Site Duplicator Pro lets you create a WordPress staging site directly from your WordPress dashboard. Safely test plugin updates, theme changes, and new features on a staging environment before pushing changes to your live site. No manual setup, no separate hosting, and no risk to your production site. AI Ready Backups Duplicator exposes its backup abilities through the WordPress Abilities API, so AI assistants can list your backups, create a new one and check its status on your behalf. Every action respects your WordPress permissions. Duplicator Pro Features Duplicator Pro takes Duplicator to the next level with features you’ll love, such as: WordPress staging sites – create a staging copy of your site to safely test changes before going live Drag and Drop installs – just drag the backup file to the destination site! Server to server import – import a backup directly from a URL or from cloud storage, no download needed Scheduled backups – daily, weekly, monthly or hourly, each with its own template and storage destinations Backup templates to save and reuse your backup configurations Cloud Storage to Dropbox Backups, Google Drive Backups, Microsoft OneDrive Backups, Amazon S3 Backups and FTP/SFTP Backups Any S3-compatible provider: Backblaze B2, Wasabi, Cloudflare R2, DigitalOcean Spaces, Google Cloud Storage, Vultr, DreamObjects and more Unlimited storage destinations – send every backup to several locations at once Quick Connect to Duplicator Cloud with your license key Custom Backups and Cloning: want just plugins, or just themes, just the media? No problem! Recovery Points added for very fast emergency site restores Multisite support – back up and migrate an entire WordPress network, install a subsite as a standalone site or import a site into a network Subsite filtering – back up only the subsites you need Installer branding – white-label the installer with your own look and feel Multi-threaded, chunked engine to support larger websites & databases Support for managed and shared hosts such as WordPress.com, WPEngine, GoDaddy Managed, and more WP-CLI commands for backups and automation Custom plugin hooks for developers Advanced permissions – control which roles and users can create, restore, transfer or configure backups Email notifications when a scheduled backup fails Automatic updates and professional support … and much more! Supported Backup Cloud Storage Integrations The free plugin stores backups locally and on Duplicator Cloud. Duplicator Pro adds any Amazon S3 compatible storage provider plus these first-party integrations. Duplicator Cloud Backups Localhost Backups FTP/ SFTP Backups Dropbox Backups Google Drive Backups Microsoft OneDrive Backups Amazon S3 Backups Cloudflare R2 Backups Wasabi Backups Dream Objects Backups Vultr Backups Digital Ocean Spaces Backups Google Cloud Storage Backups Backblaze B2 Storage Backups Linode Object Storage Backups You can easily see why Duplicator is the best WordPress backup and migration plugin on the market! Want to unlock these features? Upgrade to our Pro version Branding Guidelines Duplicator® is a registered trademark of Snap Creek LLC. When writing about the backup & migration plugin by Duplicator, please make sure to uppercase the initial first letter. Duplicator (correct) duplicator (incorrect)

You’ve heard “you should throttle the Heartbeat API” or “xmlrpc.php should probably be disabled”? But every time you end up in a forum thread with 12 conflicting code snippets, three of which will wreck your site. WebsiteFix One-Click Optimizer solves exactly this problem. Seven hand-curated performance and security fixes, each with auto-safety-check (automatically detects conflicting plugins and does NOT intervene), each one-click-activatable and just as one-click reversible. The 7 Fixes 1. Throttle the Heartbeat API Reduces the WordPress Heartbeat frequency contextually: 60s in the admin, 120s in the post editor (instead of 15s), practically off on the frontend. Typical savings: 75–85% less admin-ajax.php load → lower CPU throttling at your host, significantly lower TTFB value. 2. Disable XML-RPC & Pingbacks Closes the XML-RPC endpoint (by far the most common brute-force attack target on WordPress) and disables outbound pingbacks. Auto-safety-check: if Jetpack, Wordfence, or Sucuri are active, the fix does NOT intervene — you don’t have to choose between security plugin and xmlrpc hardening. Plus REST API user enumeration protection for anonymous requests. 3. Remove Emojis & oEmbed Discovery Removes the WordPress emoji polyfill scripts (wp-emoji-release.min.js, ~14 KB) and the oEmbed auto-discovery routes. Saves 2–3 HTTP requests per page load. URL embeds in the editor remain functional — only public discovery is turned off. 4. Strip Query Strings from Static Assets Strips ?ver=… from CSS/JS asset paths. Proxy and CDN caches (Cloudflare, host caches) can now cleanly cache the assets. Auto-safety-check: with WP Rocket / W3 Total Cache / WP Super Cache, the fix does NOT intervene — caching plugins handle this themselves. 5. Remove jQuery Migrate from Frontend Removes jquery-migrate.min.js (~11 KB) from the frontend but keeps it active in the admin. On modern themes (2020+), Migrate is unnecessary. Lighthouse Performance score typically increases by 1–3 points. 6. Block Author Archives (User Enumeration Protection) Prevents username discovery via /?author=N or /author/ /. Auto-safety-check: if Yoast already has Author Archives disabled, the fix does not intervene. The most well-known brute-force prep trick is neutralized — calls are 301-redirected to the homepage. Additionally: REST API user-individual endpoints blocked for anonymous calls. 7. Hide WordPress Version from Frontend Removes the tag from the HTML head, from the RSS feed, and from asset URL ?ver= strings. External scanners and brute-force bots can no longer directly identify the exact WordPress version — version-specific exploit-sweep attacks become more expensive. Auto-safety-check: if Wordfence / Sucuri / All-in-One Security / Perfmatters are active, the fix does not intervene (they handle this themselves). How It Works Technically When you activate a fix, the plugin writes a single PHP file to /wp-content/mu-plugins/wf-optimizer- .php. WordPress automatically loads must-use plugins before all regular plugins — no activation workflow needed, no reload trick, the fix takes effect immediately. When you deactivate, the file is deleted. Standard WordPress behavior returns immediately. When you uninstall the plugin itself, ALL fix files are automatically removed. We NEVER edit your functions.php. We do not touch theme files, wp-config.php, or existing plugins. Each fix is isolated in its own file — you can inspect them yourself, and you can just as easily delete them manually if you don’t want to use the plugin anymore. All filesystem operations go through the WordPress WP_Filesystem API (put_contents, delete, is_writable, etc.) — no direct PHP filesystem calls. What It Does NOT Do Writes nothing to your database (a single wp_options entry with the list of active fixes is the exception — ~50 bytes). Modifies no theme files, no functions.php, no wp-config.php. Does not automatically deactivate existing plugins — auto-safety-check detects conflicts and skips the fix. Sends no user data to external servers. Fully offline-capable. Shows no ad banners, no nag screen, no trial expiration. Who Is Behind This WebsiteFix is a WordPress diagnostic tool developed in Frankfurt, Germany. The seven snippets are ported 1:1 from our free Smart Fix Library at website-fix.com/smart-fix-library. The plugin is open source under GPL. Feedback/bugs: support@website-fix.com. Auf Deutsch / In German Sieben kuratierte WordPress-Performance- und Security-Fixes mit einem Klick aktivierbar. Jeder Fix kommt mit Safety-Check (erkennt konfligierende Plugins automatisch und greift dann NICHT ein). Aktivierte Fixes werden als Must-Use-Plugin-Datei in /wp-content/mu-plugins/ mit dem Präfix wf-optimizer- abgelegt — kein Theme-Edit, kein Reload-Workaround, sofortige Rückgängig-Möglichkeit. Read-only-Verbindung zu deiner Datenbank — nur ein einziger wp_options-Eintrag mit ~50 Bytes wird gespeichert. Die sieben Snippets sind 1:1 aus unserer kostenlosen Smart-Fix-Library auf website-fix.com portiert. Want a free diagnosis before fixing? If you’re not sure which of the 7 fixes you actually need — start with a free 60-second scan of your live site at website-fix.com/plugin/optimizer. It runs from outside (no FTP, no login, no admin access required) and tells you exactly which performance leaks are draining your hosting plan: Heartbeat API hammering your CPU? Yes/No, with the live frequency. XML-RPC open to brute force? Yes/No, with the current attack surface. Author archives leaking usernames? Yes/No, with the exposed names. jQuery Migrate still loading in your frontend? Yes/No, with the wasted KB. You get a personalized “activate these 3 first” recommendation — instead of guessing. The scan is free, no signup, no email wall before the result. After the scan: come back here, hit “Apply” on the matching fix in the plugin’s Tools page, done. Two free tools, one workflow. Want the deeper 92-point audit (database bloat tables, PHP error stack traces, hook-chain conflicts, slow query log)? That’s at website-fix.com — same place, same no-login policy. Use this plugin for the surface fixes, use the online tool for the diagnosis that needs more than a heuristic. Auf Deutsch Wenn du nicht sicher bist, welche der 7 Optimierungen du wirklich brauchst, starte mit dem kostenlosen 60-Sekunden-Scan auf website-fix.com/plugin/optimizer. Der Scan läuft extern — kein FTP, kein Login, kein Backend-Zugang — und zeigt dir konkret, welche Performance-Lecks deinen Hosting-Plan ausquetschen. Du bekommst eine “diese 3 zuerst aktivieren”-Empfehlung statt zu raten. Kostenlos, keine Anmeldung, keine E-Mail-Wall vor dem Ergebnis.