A Monthly Website Health and Security Checkup You Can Do Yourself

Ten minutes a month can prevent many website problems. Use this checklist, or ask a professional to run it for you.

Updates

• Update WordPress core, plugins and themes after taking a backup.
• Remove plugins and themes you do not use.

Backups

• Check that the latest backup ran successfully.
• Test a restore every few months.

Users and access

• Review the user list and delete accounts you do not recognise.
• Remove access for people who no longer need it.
• Check that administrators have strong passwords and two-factor authentication.

Security scan

• Run a malware and file-integrity scan.
• Check Google Search Console for security warnings.

Speed and errors

• Test key pages with PageSpeed Insights.
• Check for broken links and 404 errors.
• Test your contact form and checkout.

SSL and domain

• Confirm the SSL certificate is valid and renews automatically.
• Check your domain and hosting renewal dates, directly with your provider.

Email and tracking

• Check that form notifications arrive.
• Confirm analytics is recording visits.

Keep a log

Write down what you checked and what you changed. It helps you spot patterns and gives a developer useful background.

When to ask for help

If you find something odd, such as unknown admin users, pages you did not create or sudden slowdowns, read our guide to the signs of a hacked website. We offer a monthly care service that covers all of this.