Akeeba Backup for Joomla! 10.5.0Stable
Released on: 2026-10-27 03:08 CDT
Packing more than 80 changes, this is one of the biggest Akeeba Backup releases we've ever published – and for a good reason. We have been doing a full audit of our code for security issues, opportunities to harden our security posture, and a complete revamp of our unit and end-to-end tests to eliminate latent bugs. This release is the conclusion of this months-long process, addressing all the smaller issues and everything that had otherwise fallen through the cracks.
What's new?
Security hardening. This version builds on the hardening work started in version 10.3.7 and concludes our full audit of the code, addressing the remaining very minor issues.
Enforced version compatibility checks. The package now checks your Joomla and PHP version when you try to install it. If it detects an incompatible Joomla and/or PHP version it will refuse to install / uninstall / update and tell you. The extension itself will warn you about the incompatibility and refuse to run. This is an additional protection against accidentally breaking your site by installing an incompatible version of our software or your site, or updating / downgrading Joomla or PHP outside the supported range after installing the extension.
Removed legacy error handler. The legacy error handler would show very detailed site and server information whenever an error occurred in the backend of the site. Joomla 4 and later have their own error handler showing the same level of detail when you enable Site Debug. We removed our handler in favor of the core-provided solution. Do remember to set Site Debug to Yes and set Error Reporting to Maximum in your Joomla Global Configuration page to receive a detailed error report before requesting support.
Added support for seven additional Amazon S3 regions. More regions have been added to the S3 engine, matching the updated Amazon S3 documentation. As always, if you had used one of those regions as a custom region it will still work without any change necessary on your end.
Legacy OneDrive options removed. "Upload to Microsoft OneDrive (LEGACY)" and "Upload to Microsoft OneDrive (App-Specific Folder)" are gone. If a backup profile uses either of them, switch it to the “OneDrive for Business” connector. Despite its name, it works with personal Microsoft 365 subscriptions as well – look, we get it, Microsoft's naming of their products and APIs is weird; we just follow their official naming, it doesn't mean we like it.
Restoration changes. The integrated restoration no longer offers the "Use the FTP layer" extraction option, nor the SFTP and "use FTP for all files" modes. Direct and Hybrid remain; Hybrid falls back to FTP when a direct write fails.
Starting backups now requires an anti-CSRF token. The Backup menu item no longer has a "Start immediately" option, and the Quick Icon no longer autostarts the backup, because menu items and links cannot carry an anti-CSRF token. You now start the backup yourself with a click. If your server has broken session handling and backups fail with a security token error, turn off the new Options setting "Backend backup checks the anti-CSRF token".
S3-compatible storage. Import Archives from S3 now supports the custom endpoint of S3-compatible storage. Yes, this means you can now import archives from third-party services such as Wasabi, Synology C2, Scaleway and so on.
Many (very minor) bug fixes. The vast majority of these bugs were issues nobody had hit in over a decade; others were PHP or Joomla version-specific, or packaging issues. A number of reported PostgreSQL backup issues were fixed as well.
HP version
