What it does
An offsite destination is storage you own that a site's backups can stream to directly, in addition to the local restore point on the server itself — the archive goes straight from the site to your storage; it never passes through WPClientHub.
How to
- From Settings, add an offsite destination: an S3-compatible bucket (AWS S3, Backblaze B2, Wasabi, Cloudflare R2) or an SFTP server.
- For SFTP, you can authenticate with a password or an SSH key.
- Click Verify — every destination is write-tested before it can be used, so a bad credential or a locked-down bucket is caught immediately rather than on the night a client actually needs a restore.
- Attach the destination to a site's backup schedule.
Limits & defaults
| Setting | Default |
|---|---|
| Credential storage | Encrypted at rest in the hub's database; delivered per-job inside the cryptographically signed backup command and wiped when the job finishes |
| Verification | Every destination is write-tested on save |
| Permissions | Only owners and admins can see or change storage credentials |
| Health score effect | A backup profile with no offsite destination costs a site 10 health-score points — see The health score, explained |
Troubleshooting
Verification keeps failing
Double-check the bucket region/endpoint (for S3-compatible services) or the host/port/key (for SFTP); the write test uses the exact credentials you entered, so a typo there is the most common cause.
The health score still says no offsite destination after I added one
The destination has to actually be attached to that site's backup schedule, not just exist for the organization.