WordPress is fun yet powerful. And there are so many things you can do with it. But don\u2019t just leap in with both feet and start WordPressing with reckless abandon. There are best practices one needs to partake in to ensure your WordPress site is dialed in and safe, to boot.<\/p>\n
Like anything worth having, WordPress needs a little TLC to get the end result looking groovy.<\/p>\n
Building a home with a lousy foundation is a recipe for disaster. The same goes for your website. Hosting is critical in the success of your WordPress site.<\/p>\n
Build a site that gets lots of traffic on a hosting platform that can\u2019t handle the traffic load and you just sank your ship. Get the type of hosting needed to handle the traffic and also be easy to use, going forward.<\/p>\n
There are a wide range of hosting platforms to get you started in the right direction. From shared hosting<\/a> on cPanel, Managed WordPress hosting<\/a>, to a VPS<\/a> (virtual private server) or dedicated server<\/a> if you have bigger plans.<\/p>\n Now that you have your hosting picked out and your WordPress site installed, it’s time to start down the path of theme and plugin choices.<\/p>\n For your site\u2019s safety and your reputability, never<\/em> just download free themes and plugins from an untrusted site. That is a timebomb just waiting to go off.<\/p>\n<\/blockquote>\n Always download from trusted sources. For instance, if you are looking for just a basic theme, all the themes in the WordPress repository have been checked for malicious content and are generally safe to download.<\/p>\n A good third-party vendor of WordPress themes is Envato Market<\/a> (formerly ThemeForest). I have used them for years \u2014 good support and great theme selections.<\/p>\n These are all premium themes though that cost cash money to get a hold of. But they generally aren\u2019t very expensive, and you\u2019ll be getting, often times, a really nice out of the box theme that will last you till you later change your mind and want to rebrand to a new theme \u2014 which is perfectly acceptable to do.<\/p>\n I change my theme up about every three to four years or so. Just don\u2019t change the look too much, or you\u2019ll confuse your visitors and possibly lose a few, too.<\/p>\n With regards to plugins, it is almost always necessary to download and install plugins from the WordPress repository. They have been checked and are generally safe to use.<\/p>\n Never just download a plugin from an untrusted site, as you will be flirting with danger.<\/p>\n<\/blockquote>\n There are some premium plugins out there that aren\u2019t available through the WordPress dashboard, like Revolution Slider and others. These are premium plugins and only available for download from the plugin developer\u2019s site.<\/p>\n Do your research though and investigate things like WordPress version compatibility, the overall number of downloads, the last updated date, and how many stars the plugin has.<\/p>\n When doing any theme customization, one of the most important WordPress best practices is to enable a child theme. This way, you can edit your site\u2019s theme to your heart\u2019s content, without losing all those customizations when your theme gets an update.<\/p>\n Hard code your main theme, and those edits may very well be lost when the theme is updated. And that can really harsh your mellow.<\/p>\n What is a child theme, you might ask? Good question. Simply put, a child theme is a sub-theme that inherits the look, feel, and functionality of the parent theme. When you make modifications to the child theme, they are kept separately from the parent theme’s files.<\/p>\n This comes in handy, since your theme will, most likely, get an update, or several, during the time you use it. If you\u2019ve customized the parent, all your arduous work is typically overwritten.<\/p>\n But if you custom code a child theme, those changes are kept, yet the site\u2019s theme is updated successfully.<\/p>\n Never (I repeat, never) take security of your site lightly. A compromise can be disastrous to get rid of and can cause downtime or even complete site destruction.<\/p>\n It stinks that there are people out there who are so smart yet use their intelligence to wreak havoc on your hard work. But that isn\u2019t going to change any time soon.<\/p>\n So, you\u2019re best off securing your site as best as you can.<\/p>\n<\/blockquote>\n One nuisance is comment form spam. It\u2019s a huge pain for some. However, there is an effortless way to avoid that, almost entirely. Just download and install the plugin called Discuz<\/a>. Then, turn off WordPress\u2019 inherent comment capability entirely and allow Discuz to handle all commenting on your site.<\/p>\n I did and have gotten only one comment form spam in over three years!<\/p>\n<\/blockquote>\n Another cool plugin that I have used is Akismet<\/a>. This is a comment form and spam blocking plugin that works with your native WordPress commenting system. This aids in defeating comment form spam too.<\/p>\n But I feel Discuz just takes care of things a little better. Both plugins are free with an option to go pro.<\/p>\n Another way to feel warm and fuzzy about your new site is to enable a CDN\/WAF (content delivery network\/web application firewall). A firewall does a fantastic job of blocking out the knuckleheads out there who want to visit your site just to cause trouble.<\/p>\n It aids in DDoS (Distributes denial of service) protection and allows the good traffic to access your site.<\/p>\n<\/blockquote>\n Another key WordPress best practices is a very strong and rotating password for your admin user. Also, a totally unrelated username is preferred.<\/p>\n For example, don\u2019t have a site called Bob\u2019s Biscuits and have an admin username of bob or biscuit. You\u2019re just giving away the first half of your admin user\u2019s security. Then, all the bad actor needs to do is to solve for the password and they\u2019re in.<\/p>\n I rotate my passwords out every month or two. I also use long and strong passwords and a totally unrelated username. I have yet to be compromised as a result.<\/p>\n From a hosting standpoint, you should also have strong passwords and usernames for your cPanel hosting or server. These too need to be regularly rotated out. Password change day is a pain, but not nearly as big of a pain as being compromised for not doing it.<\/p>\n Updated your site yet?<\/p>\n WordPress frequently has core file updates, as do good plugins and good themes. Never let your site get out of date. This is a surefire way to get compromised.<\/p>\n WordPress is an open-source application \u2014 that being said, bad actors are constantly downloading the latest versions of WordPress in order to scan for vulnerabilities. These are later used to gain access to your site.<\/p>\n You can thwart these bad efforts by simply and regularly updating your core files, plugins, and theme. It\u2019s an easy couple\u00a0 clicks and a couple minutes of waiting for the update to complete.<\/p>\n That is a small price to pay for security.<\/p>\n<\/blockquote>\n To update your site, just log into your dashboard, mouse over the left main menu that reads Dashboard,<\/strong> and then select Updates<\/strong>. This loads your Updates screen. Here you can update your WordPress core files, theme(s), and plugins, all in one place.<\/p>\n Before you update anything, though, be sure to back up your site and database first. That way, in the event that something goes haywire, you can revert back to the last viable version of your site.<\/p>\n Also, be sure to update your plugins one at a time. This way, if one of the plugins goes sideways, you\u2019ll know which one it was and can deactivate that plugin, in phpMyAdmin<\/a> or File Manager and deal with it later.<\/p>\n Remember, when your site is updating, it will be offline, as WordPress generates a temporary .maintenance<\/em> file while the updates are being completed. Once the updates are complete, that file is terminated.<\/p>\n That being said, you may want to perform updates during slower or non-peak times so as not to interfere with too many visitors to your site.<\/p>\n On a side note, sometimes that .maintenence<\/em> file can get stuck and left behind. If this happens, you\u2019ll need to go into File Manager or your favorite FTP program and manually delete said file to get your site back up again.<\/p>\n Don\u2019t just throw a bunch of content together and call it a day. Websites are so much more than just content. The content needs to be great and designed in a way that looks tasty to search engines.<\/p>\n There are a host of plugins out there, both free and premium, that can assist you with building great content that search engines like Google will prefer.<\/p>\n One plugin for this is Rank Math<\/a>. It’s an SEO plugin for WordPress that makes it easy for you to optimize your content with built-in suggestions based on widely accepted best practices.<\/p>\n You can easily customize important SEO settings, control which pages are indexable, and how you want your website to appear in search with structured data. This plugin, like all SEO plugins I\u2019ve tried, has both a free and a premium option.<\/p>\n Another plugin is Yoast<\/a>. It makes sure your site meets the highest technical SEO standards. It also gives you the tools to optimize your content for SEO and overall readability. This too comes in both free and paid versions.<\/p>\n There are many more out there to choose from, I merely mentioned two, as listing more could result in an article all its own.<\/p>\n I can\u2019t express this strongly enough. You must have some sort of redundancies in place to ensure you have something to fall back on.<\/p>\n Backups are critical for peace of mind.<\/p>\n<\/blockquote>\n The worst feeling of all is possibly managing a WordPress site that gets irreparably compromised and having nothing to restore from. That\u2019s just what you wanted to do, right? Rebuild your entire site again… from scratch.<\/p>\n You can\u2019t have a site without images. That\u2019s just boring. But images can be a hindrance if not set up correctly. Closing out our WordPress best practices: always optimize your images before you upload them to your site.<\/p>\n Size them appropriately, in that you don\u2019t want to have a massive image that is several megabytes in size and then rely on your site to shrink the large image down.<\/p>\n That\u2019s still a large image, it just appears smaller, thus increasing load times.<\/p>\n<\/blockquote>\n There are tons of image editing programs out there to choose from. Some paid, some free, but all necessary. Compress the image and resize the image before<\/em> you upload.<\/p>\n Also include alt tags and descriptions for each image uploaded. This aids in SEO, because some people might find your site via Google or other image searching.<\/p>\n Once you\u2019ve uploaded your optimized image, it doesn\u2019t hurt at all to run the image(s) through a cool plugin called Smush<\/a>. Smush will optimize images, turn on lazy load, resize, compress, and improve your Google Page Speed.<\/p>\n I personally use this plugin and have for years. I dig it. If you have already uploaded a bunch of images, Smush has the ability to bulk smush images already uploaded.<\/p>\n All in all, this is but a small starter list in general WordPress best practices that, if utilized, can help get you started on your path to greatness.<\/p>\n Start here and you\u2019ll be a happier designer or developer in the long run. This list is subject to interpretation and substitutions can be made for some of the suggested plugins, but you do you.<\/p>\n Till next time…<\/p>\n The post WordPress best practices for a successful website appeared first on GoDaddy Blog<\/a>.<\/p>\n Source: Go Daddy Garage<\/p>\nThemes and plugins, oh my…<\/h3>\n
\n
\n
The children are your future<\/h3>\n
\n
\n<\/em><\/p>\n<\/blockquote>\nFeeling secure<\/h3>\n
\n
\n
\n
\n
Search engine optimization is key<\/h3>\n
Do you even back up, bruh?<\/h3>\n
\n
Images & load times<\/h3>\n
\n
Closing thoughts on WordPress best practices<\/h2>\n