What to protect

A server snapshot is useful, but application-aware backups are also required. Protect databases, uploaded files, configuration, encryption keys, license details, and deployment definitions. Store at least one copy outside the VPS.

Before a risky change

Create a fresh backup, record its completion time and size, and verify that the destination is reachable. For database applications, use a consistent database backup or maintenance mode where the vendor requires it.

Test recovery

A backup is not proven until you have tested a restore. Document the operating system, application version, secrets, and order of recovery. Reinstall, control-panel removal, disk replacement, and manual provider termination can make data unrecoverable.