A useful business-email backup lets you recover the correspondence you need after an accidental deletion, account problem or provider change. Start by checking what is copied, how recent the copy is and whether you can retrieve a particular message with its attachment. Seeing the same inbox on a phone and laptop does not prove you have an independent recovery copy.
For a small firm, the practical choice is between a verified provider recovery service, a controlled export for a specific job and an ongoing backup arrangement. The right combination depends on how often mail changes, how quickly staff need it back and who can perform the recovery.
Write down the loss you need to recover from
“Back up email” is too broad a brief to give a supplier. Describe the incident and the required result. These three requests need different checks:
- A deleted customer conversation: recover that message and its attachment without replacing newer mail.
- A damaged or unavailable mailbox: restore enough history for staff to resume work, including sent replies and folders.
- A provider change: retain the agreed history and prove that it can be read before cancelling the old service.
Include shared addresses in the record. A backup of your personal inbox may miss the team’s enquiries mailbox. Contacts, calendars, local folders, aliases and mailbox rules also need explicit decisions; copying messages does not establish that every surrounding setting has been preserved.
For example, a small consultancy might need a deleted quote attachment recovered individually while keeping every email received since yesterday. A whole-mailbox restore that replaces today’s contents would not meet that brief without a plan to preserve and reconcile the newer messages.
Separate synchronisation, archiving and recovery
With a synchronised mailbox, a change made on one device can appear on the others. That is useful for daily work, but it can spread an accidental deletion too. Ask where an earlier recoverable version exists and what happens if access to the live account is lost.
An Archive button may simply move a message within the same mailbox. A separate online archive may serve a storage or retention purpose. Neither name tells you the recovery history, access requirements or restoration method. Ask for those details instead of treating the word “archive” as a backup specification.
Likewise, a WordPress backup need not include email held by another provider. List the website, mailboxes and any locally stored mail separately when planning continuity.
Check what your provider can restore
Ask the current provider before buying another service. Get the backup scope, available restore points, retention, access requirements, likely process and any charges. Request an example of restoring one message as well as a whole mailbox if both matter to your business.
Krystal’s cPanel backup documentation includes email among the recoverable account components. Its VPS, cloud and managed WordPress services have different arrangements, so confirm the actual product holding the mail.
Krystal’s documented email-account restore process replaces the entire mailbox with the selected backup, and cannot restore an individual email or folder through that workflow. Messages received after that backup can be lost in the replacement. Preserve current mail and agree the recovery method with support before proceeding.
This is a useful question for any provider: “Will this recovery merge selected items into the current mailbox, or replace what is there?” Ask how duplicates, newer messages and existing folders will be handled. Do not experiment on the only working mailbox to find out.
Use exports for a defined purpose
An export can provide a dated copy before a cleanup or migration. Decide which account and folders it must contain, where the completed files will be stored and which software will open them. Record the date range you have actually checked, rather than naming the file “complete backup” and assuming completeness.
Outlook: check the version and downloaded history
Microsoft’s PST export instructions distinguish new and classic Outlook. In classic Outlook, check the selected account, included subfolders and available mail history; Cached Exchange Mode can limit an export to cached items. The export copies messages and attachments but does not preserve every setting, such as rules and folder permissions.
The current guidance also lists limitations for calendar/contact access and mailbox import in new Outlook. Check both the export and intended recovery application before relying on a PST. Save the export to the supported local location specified by Microsoft, rather than an actively synchronised OneDrive folder.
Google: download the data and check how it opens
Google Takeout can produce an export of selected account data; downloading it does not delete the original. For an organisation, confirm permitted access and the appropriate administrator export route. Follow the included format guidance and verify that your chosen application can read the downloaded messages and attachments.
Allow time to obtain and inspect the files before a service is cancelled. An export request, a download link and a saved readable copy are three different checkpoints. Keep the old account available until the agreed checks are complete.
Keep the copy accessible to the business
Mail exports can contain customer details, quotations and attachments. Store them in an access-controlled location under business ownership, with appropriate encryption and a recovery method that another authorised person can use. Keep the only recovery credential somewhere other than inside the protected copy.
A disconnected external drive can hold a second copy of a completed export. If you need to buy one, our portable SSD guide compares compact desk use with a drive that travels between locations, alongside capacity and encryption checks. A drive you already own may be sufficient if it has room and can be read on the recovery computer.
For scale, two 8 GB mailbox exports kept in three complete dated versions require about 48 GB before overhead and growth. That is a storage example, not a recommended backup interval. Choose the interval by how much recent correspondence you could reasonably reconstruct.
A manual export is more plausible for an occasional pre-migration copy than for a busy shared inbox needing frequent recovery points. If the business needs ongoing protection, compare services by mailbox coverage, recovery granularity, retained history, failed-job alerts, access control, restore charges and exit options. Have the administrator demonstrate those requirements before committing.
The business email hosting guide covers the separate choice of day-to-day mailbox service. Keeping email at the current provider and adding suitable recovery protection may be simpler than moving the website or replacing the whole productivity suite.
Prove the recovery with a small acceptance check
Use a separate test location or the provider’s safe inspection method. Avoid overwriting current business mail during a rehearsal. Ask the person responsible to show:
- An older received message and a recent one from the period the copy should cover.
- A sent reply, so the business can see what was promised as well as what was requested.
- A message from a folder outside Inbox, and the relevant shared address if it is included.
- An attachment opened successfully with the expected contents.
- The practical steps for returning a selected item or mailbox to use, including access, permissions and any replacement risk.
Record the copy date, account, sample checked, result and person who performed the check. Sampling cannot prove every message is intact, but it can expose missing folders, truncated history or an unreadable format before the original is removed.
Before changing providers, use the website and email migration checklist to keep mailbox recovery separate from domain routing and website files. New mail arriving after the initial copy still needs to be accounted for.
For a website project in Formby, Freshfield or L37, tell us which email services the website depends on. That gives the project a clear boundary for what is moving, what is staying and who will verify it.
Provider documentation checked 21 October 2026.
