Maintain your site

The WordPress Maintenance Checklist

The weekly, monthly, quarterly and yearly jobs that keep a WordPress site secure, quick and backed up, in one list.

By , Founder and editor, website developer
Updated · Last reviewed · 2 min read

In short

  • Most WordPress sites need about 15 minutes of care a month.
  • The core jobs are: updates, backups, a quick security check and a look at the site as a visitor.
  • WordPress installs minor and security core updates automatically on most sites; plugins and themes need checking.
  • Print our free PDF checklist and tick it off each month.

Every week (5 minutes)

  • Check your backups ran. Look for the latest backup date in your host's panel or backup plugin.
  • Look at Dashboard › Updates and install any security updates for plugins and themes.
  • Read the emails WordPress sends to the admin address, such as auto-update reports and recovery mode messages.
  • Moderate comments and check form entries.

Every month (15 minutes)

  • Take a backup, then update plugins and themes. See updating plugins safely.
  • Visit the site on your phone: home page, a post, the contact form, and the checkout for shops.
  • Open Tools › Site Health and fix anything marked critical.
  • Delete plugins and themes you don't use. WordPress's hardening guide recommends deleting plugins you aren't using.
  • Check for broken links and pages that return errors.

Every three months

  • Test-restore a backup to a staging or spare site. See how to back up WordPress.
  • Review user accounts: remove people who no longer need access and check everyone has the lowest role they need.
  • Check your PHP version in your hosting panel. WordPress.org recommends PHP 8.3 or greater.
  • Check your page speed and image sizes. See how to speed up WordPress.

Every year

  • Renew your domain and hosting, and check your contact details on the domain are current.
  • Read your privacy policy and cookie banner and update them for any new tools.
  • Review your theme: is it still updated and supported? Consider a refresh in the theme builder.
  • Change admin passwords and check two-step login still works for every administrator.

After every major WordPress release

Back up, update plugins and themes first, then update WordPress from Dashboard › Updates. See how to update WordPress safely.

Get the printable checklist

Download the free WordPress monthly maintenance checklist (PDF) and keep it by your desk.

Sources and further reading

  1. Updating WordPress – WordPress.org Documentation
  2. Plugin and themes auto-updates – WordPress.org Documentation
  3. Backups – WordPress Advanced Administration Handbook
  4. Hardening WordPress – WordPress Advanced Administration Handbook

Didn't find your answer?

Ask us anything about WordPress or the theme builder. We answer the most useful questions here, so others can benefit too.

We may publish your question (never your name or email) with an answer. See our privacy policy.

Keep reading

Update plugins safely A safe routine for plugin updates, when to turn on auto-updates, and exactly what to do if an update breaks… Update a theme Which customisations survive a theme update and which don't, plus three ways to update a theme safely. Back up WordPress A WordPress backup has two parts: the files and the database. Here is how to back up both, how often, where…

One useful WordPress tip a week

Short, practical and free. Unsubscribe whenever you like.