KeePassXC
Free, local password manager.
Store WordPress, hosting, FTP, and email credentials in an encrypted file on your device. Especially useful after a security incident or to stop reusing passwords.
License: GPL-2.0 / GPL-3.0
Official siteResources
Tools we use and recommend to clients for specific tasks. We do not host them: every link goes to the project's official website.
Make sure you download from the project's official domain. UPG does not distribute installers and is not responsible for modified third-party builds. If you are unsure about configuring a tool, ask for help before touching production.
List last reviewed on June 10, 2026.
Protect credentials and reduce risk after an incident or in daily work.
Free, local password manager.
Store WordPress, hosting, FTP, and email credentials in an encrypted file on your device. Especially useful after a security incident or to stop reusing passwords.
License: GPL-2.0 / GPL-3.0
Official siteUpload files, review folders, and connect via SFTP or SSH to your server.
SFTP/FTP client to upload and download hosting files.
Connect via SFTP to review folders, restore files, or upload backups. Prefer SFTP over plain FTP whenever your hosting supports it.
License: GPL-2.0
Official siteSFTP and SCP client for Windows with quick file editing.
A solid Windows option to move files, edit .htaccess or wp-config.php, and compare folders before and after a cleanup.
License: GPL-3.0
Official siteSSH client for terminal access to your server.
If your hosting offers SSH, PuTTY lets you run commands, review logs, and use tools like WP-CLI when you are comfortable with the terminal.
License: MIT
Official siteExport, review, or prepare the WordPress database with more control.
Visual client for MySQL/MariaDB databases.
Connect to your WordPress database to export tables, review suspicious users, or prepare a migration without relying only on phpMyAdmin.
License: Apache-2.0
Official siteComplement hosting backups with encrypted off-site storage.
Encrypted incremental backups to cloud or external drive.
For teams who want copies off the hosting server: Restic stores incremental versions on S3, Backblaze B2, or other targets. Requires some initial setup.
License: BSD-2-Clause
Official siteSync files with Google Drive, Dropbox, and more.
Copy site or hosting backups to external storage in an automatable way. Complements — does not replace — a well-defined backup strategy.
License: MIT
Official siteLighten the site before blaming the hosting plan.
Compress images in the browser before uploading to WordPress.
Reduce JPG, PNG, or WebP file size without installing anything locally. Lighter sites load faster and use fewer hosting resources.
License: Apache-2.0
Official siteSmall utilities that show up in almost every web project.
Compress and extract site backups and archives.
WordPress backups often arrive as .zip files. 7-Zip opens and creates compressed archives without proprietary utilities.
License: LGPL-2.1
Official siteText editor for web configuration files.
Handy for reviewing .htaccess, wp-config.php, or DNS exports with syntax highlighting. Not a substitute for backups: edit carefully and keep a copy first.
License: GPL-3.0
Official site