Most WordPress problems are avoidable with a few habits. This guide covers the basics.
Keep everything updated
Update WordPress core, themes and plugins regularly. Outdated software is a common cause of site problems. Delete anything you do not use.
Use strong, unique logins
Give every account a unique password stored in a password manager, and enable two-step verification for administrators where supported.
Back up on a schedule
Keep both files and the database backed up, store a copy away from the web server, and test restoring. Check which backup features your hosting plan includes.
Limit access
Give each person only the permissions they need and remove accounts when someone leaves.
Watch for changes
Review your site periodically for unexpected pages, users or redirects, and keep contact details current with your host.
Quick checklist
- Are updates applied weekly?
- Is two-step verification on?
- Was a restore tested?
- Are old users removed?

