diff --git a/.htaccess b/.htaccess
index b259c7fea9..cc929d437e 100644
--- a/.htaccess
+++ b/.htaccess
@@ -62,6 +62,10 @@
   Order allow,deny
   Deny from all
 </Files>
+<Files ~ "\.bak$">
+  Order allow,deny
+  Deny from all
+</Files>
 <Files ~ "sitemap\.xml">
   Order allow,deny
   Allow from all
diff --git a/warmup/webserver-configs/htaccess-2.4.dist b/warmup/webserver-configs/htaccess-2.4.dist
index a199b77d58..89dc888120 100644
--- a/warmup/webserver-configs/htaccess-2.4.dist
+++ b/warmup/webserver-configs/htaccess-2.4.dist
@@ -52,6 +52,9 @@
 <Files ~ "\.xml$">
   Require all denied
 </Files>
+<Files ~ "\.bak$">
+  Require all denied
+</Files>
 <Files ~ "sitemap\.xml">
   Require all granted
 </Files>
diff --git a/warmup/webserver-configs/htaccess.dist b/warmup/webserver-configs/htaccess.dist
index b259c7fea9..cc929d437e 100644
--- a/warmup/webserver-configs/htaccess.dist
+++ b/warmup/webserver-configs/htaccess.dist
@@ -62,6 +62,10 @@
   Order allow,deny
   Deny from all
 </Files>
+<Files ~ "\.bak$">
+  Order allow,deny
+  Deny from all
+</Files>
 <Files ~ "sitemap\.xml">
   Order allow,deny
   Allow from all
diff --git a/warmup/webserver-configs/nginx.conf b/warmup/webserver-configs/nginx.conf
index 4076931846..57de118b7f 100644
--- a/warmup/webserver-configs/nginx.conf
+++ b/warmup/webserver-configs/nginx.conf
@@ -83,7 +83,7 @@ http {
       deny all;
     }
 
-    location ~* \.(xml|ini|json|lock)$ {
+    location ~* \.(xml|ini|json|lock|bak)$ {
       deny all;
     }