How To Make A WordPress Website

Before you start building, it helps to understand what you are actually choosing between. Two products share the WordPress name but work very differently:

• WordPress.com is a hosted service. WordPress handles the servers, updates, and security. It is quick to start but limits what plugins you can use, how you can monetize, and how far you can customize the design without paying for higher-tier plans.
• WordPress.org is the self-hosted version. You download the software, install it on your own hosting account, and own everything outright. This is what the vast majority of website owners use, and what this guide covers.

To build a self-hosted WordPress site, you need three things before you do anything else:

A domain name

Your domain is your site’s address (e.g., yourbusiness.com). A few practical tips for picking one:

• Keep it short and easy to spell. If you have to spell it out every time someone asks, it is too complicated.
• Stick with .com if you can. Other extensions work, but .com still carries the most trust recognition.
• Avoid hyphens. People forget them, mistype them, and they make your domain look less professional.
• Do not get too clever with keyword stuffing. “bestcheapwordpresshosting.com” is harder to brand than a simple company name.

You can register a domain through registrars like Namecheap or Porkbun, or buy it directly through your hosting provider at signup. Bundling is convenient, but registering separately keeps you more flexible if you ever switch hosts.

Web hosting

Hosting is the server where your WordPress files actually live. For a first site, the choice comes down to three main categories:

• Shared hosting (SiteGround, Bluehost, Hostinger): Multiple sites share one server. Cheapest option, typically $3-10/month. Fine for new sites with low traffic. Performance can dip during traffic spikes.
• Managed WordPress hosting (WP Engine, Kinsta, Cloudways): Servers optimised specifically for WordPress, with automatic updates and staging environments. Costs more ($25+/month) but faster and easier to manage. Worth considering if your site will handle ecommerce or significant traffic from launch.
• VPS hosting: A middle ground. More resources than shared, less hand-holding than managed. Not recommended unless you are comfortable with server administration.

For a brand-new site, shared hosting is the right starting point. You can always migrate later as your traffic grows.

What to look for in a host: one-click WordPress installer, free SSL certificate, daily backups, and support that responds in under a few hours. Avoid hosts that lock you into annual plans with no money-back guarantee.

SSL certificate

SSL enables HTTPS and is required for Chrome to show your site as “secure” rather than flagging it with a warning. Most hosts include a free SSL certificate through Let’s Encrypt. If yours does not, that is a red flag worth factoring into your host choice.

Once you have a domain and hosting sorted, you are ready to install WordPress.

The fastest way to install WordPress is through your hosting provider’s control panel. Most hosts now offer a one-click installer. The exact interface varies, but the process is nearly identical everywhere:

1. Log into your hosting dashboard. This is usually cPanel, or a custom panel like SiteGround’s Site Tools or Hostinger’s hPanel.
2. Find the WordPress installer. It may be labeled “WordPress,” “Softaculous,” “Installatron,” or similar. Click it.
3. Click “Install Now” or “Get Started.”
4. Select the domain where you want WordPress installed. If you only have one domain, it will be preselected.
5. Fill in your site name, admin username, and admin password. Use a strong, unique password. This is your site’s back door and the most common attack target.
6. Click Install. The process usually finishes in under a minute.

Once done, you will get a link to your WordPress admin area, typically yoursite.com/wp-admin. Log in with the credentials you just created.

Your first look at wp-admin

When you log in for the first time, you will see the WordPress Dashboard. Here is a quick orientation:

• Posts: where you write blog articles and news updates. Posts are date-stamped and appear in reverse chronological order.
• Pages: for static content like Home, About, and Contact. Pages do not have publication dates and do not appear in your blog feed.
• Appearance: where you install and activate themes. The sub-menu also includes Customize (for adjusting colours, fonts, and layout) and Menus.
• Plugins: add and manage plugins from here. “Add New” lets you search the WordPress plugin directory.
• Settings: General, Writing, Reading, Discussion, Permalinks. You will need to visit several of these before your site is properly configured.
• Tools: import/export content, site health check, and other utilities.

After a fresh install, WordPress loads a default theme called “Twenty Twenty-Four” (or whichever is current). It is a blank slate. You will want to replace it with something more suited to your site. The next step covers how to do that.

If your host does not offer a one-click installer, or if you want to understand how WordPress connects to your server and database, you can install it manually using FTP.

What you will need:

• An FTP client (FileZilla is free and works on Mac and Windows)
• Your FTP credentials (available from your hosting control panel)
• Access to your host’s database section (MySQL or MariaDB)

Steps:

1. Download the latest version of WordPress from wordpress.org and unzip the file on your computer.
2. Open FileZilla, connect to your server using your FTP credentials, and upload the unzipped WordPress files to your site’s root directory. This is usually called public_html/ or www/. Do not upload the folder itself; upload the contents inside it.
3. Go to your hosting control panel and create a new MySQL database. Note the database name, username, and password. You will need all three in a moment.
4. In your browser, visit your domain. WordPress will detect the missing configuration and launch the setup wizard.
5. When prompted for the database host, type “localhost” for most shared hosts. If that fails, check your hosting control panel or contact support. Some managed hosts use a remote database host address instead.
6. Enter your database name, username, password, and database host, then click Submit.
7. On the next screen, you can change the database table prefix from the default “wp_” to something less predictable (e.g., “xk7_”). This is a small but worthwhile security step since most brute-force scripts target the default prefix.
8. Complete the installation wizard: set your site title, admin username, password, and email, then click Install WordPress.
9. Log in at yoursite.com/wp-admin.

If your domain shows a “coming soon” page instead of the WordPress setup wizard: your host may have a “coming soon” or “maintenance mode” feature enabled by default. Log into your hosting control panel and look for a toggle labeled “Coming Soon,” “Under Construction,” or similar, and turn it off. Then revisit your domain.

The manual process takes 15-20 minutes. It gives you a clear picture of how WordPress, your server, and your database connect, which is genuinely useful knowledge when something goes wrong later on.

Your theme controls how your site looks: layout, colours, fonts, header and footer structure, and the overall visual style. WordPress comes with a default theme installed, but it is a generic starting point. Most site owners replace it within the first hour.

Free vs. premium themes

• Free themes from the WordPress.org theme directory are a good starting point. They are reviewed by WordPress volunteers, so security is reasonably vetted. The trade-off is that support can be slower and some features are locked behind a paid upgrade.
• Premium themes (bought from ThemeForest, StudioPress, or directly from developers) typically offer more design options and dedicated support, but they vary wildly in quality. A cheaper premium theme from an unknown developer can be worse than a well-maintained free one.

What to look for in a theme

• Responsive design: the theme must work properly on mobile. Check the demo on your phone before committing.
• Active development: look at the last update date and number of active installations. A theme that has not been updated in two years is a security and compatibility risk.
• Minimal bloat: avoid themes that bundle 20 plugins, three sliders, and a page builder you never asked for. Lighter themes load faster and are easier to customise.
• Block editor (Gutenberg) support: modern themes should work well with the WordPress block editor, not require a separate page builder just to edit basic pages.

Three solid free themes worth considering

• Astra: extremely lightweight (under 50KB), fast to load, works well with most page builders, and has a large library of starter templates. Popular with WooCommerce stores and business sites.
• Kadence: excellent defaults, full-site editing support, and a generous free version that covers most of what a new site needs. Strong choice if you plan to use the block editor without a page builder.
• GeneratePress: minimal and performance-focused. No visual frills, just a clean, fast base to build on. A good pick if you want full control through code or CSS.

How to install and activate a theme

1. In wp-admin, go to Appearance > Themes.
2. Click “Add New Theme.”
3. Search for the theme name (e.g., “Astra”) and click Install.
4. Once installed, click Activate.
5. Go to Appearance > Customize to adjust the site title, colours, header layout, and other basic settings. Changes here are previewed live before you publish them.

After activating your theme, your site will look noticeably different. The next step is adding the plugins that handle the behind-the-scenes work.

Plugins extend WordPress with features it does not include by default. There are over 60,000 plugins in the WordPress plugin directory, which can make the choice feel overwhelming. For a new site, you only need a focused set covering four functions: speed, security, backups, and SEO.

Caching plugin (site speed)

WordPress generates pages dynamically from a database by default. A caching plugin saves a static version of each page so it loads much faster for subsequent visitors.

• WP Super Cache: free, simple to set up, made by Automattic (the company behind WordPress.com). Good default choice for shared hosting.
• LiteSpeed Cache: free, and significantly faster than most alternatives if your host runs LiteSpeed servers (SiteGround, Hostinger, and A2 Hosting do). Worth checking before picking another option.
• WP Rocket: the premium option. Easier to configure correctly than free alternatives, and includes additional performance features like lazy loading and database cleanup. Worth the cost on higher-traffic sites.

Security plugin

WordPress is the most widely used CMS in the world, which makes it a frequent target. A security plugin adds a firewall, brute-force login protection, and malware scanning.

• Wordfence Security: the most widely used WordPress security plugin. The free tier includes a firewall and malware scanner. It sends alerts when it detects suspicious activity.
• Solid Security (formerly iThemes Security): another solid option with a cleaner interface than Wordfence. Good for beginners who find Wordfence’s dashboard intimidating.

Backup plugin

Backups are the safety net you will wish you had set up if something goes wrong. Do not rely on your host’s backups as your only copy.

• UpdraftPlus: the standard choice. Free version backs up to Google Drive, Dropbox, or Amazon S3 on a schedule you set. Takes about five minutes to configure.

SEO plugin

An SEO plugin handles the technical SEO basics: page titles, meta descriptions, sitemaps, and schema markup.

• Yoast SEO: the most established option. The free version covers everything a new site needs. Its content analysis tool gives real-time feedback as you write posts.
• Rank Math: a strong alternative with more features in the free version than Yoast, including schema markup and basic keyword tracking.

One important warning

More plugins does not mean a better site. Every plugin you add is another piece of code that runs on your server, can conflict with other plugins, and needs to be kept updated. Before installing anything, ask whether you actually need it. A new site typically needs the four categories above, plus any plugin specific to your site’s purpose (a contact form plugin, for instance). Everything else can wait.

Every WordPress site needs a set of core pages before it is ready to share with anyone. Here are the ones to create first:

• Home: the front page of your site. This can be a static page you design, or a blog feed if your site is primarily a blog.
• About: who you are and what your site or business is about. Even a short paragraph is better than nothing. Visitors use this page to decide whether to trust you.
• Contact: how people can reach you. Add a contact form plugin (Contact Form 7 is free and widely used) so you receive messages without publishing your email address publicly.
• Privacy Policy: required by law in most jurisdictions (GDPR in Europe, CCPA in California, and others). WordPress includes a Privacy Policy page template under Pages > Add New. Edit it to reflect your actual data practices.

How to create a page in WordPress

1. In wp-admin, go to Pages > Add New Page.
2. Click in the title area and type the page name (e.g., “About”).
3. Click in the main content area below and write your content. The block editor lets you add paragraphs, headings, images, buttons, and other blocks.
4. On the right side, under “Status and visibility,” click Publish when you are ready to make the page live.

Set your front page

By default, WordPress shows a blog feed on the homepage. If you want a custom Home page instead, go to Settings > Reading, select “A static page,” and set “Homepage” to your Home page. If you want a separate page for your blog posts, create a “Blog” page and set it as the “Posts page” in the same screen.

WordPress has sensible defaults in some areas and poor defaults in others. Before your site goes live, go through these settings to avoid common problems that trip up beginners.

Settings > General

• Site Title and Tagline: set these to match your actual brand. The site title appears in your browser tab and in search results if you have not overridden it with an SEO plugin.
• WordPress Address and Site Address: these should both be your full URL with HTTPS (e.g., https://yoursite.com). If they do not match, you can get redirect loops.
• Timezone: set this to your actual timezone. WordPress uses it to schedule posts. If it is wrong, scheduled posts may publish at unexpected times.

Settings > Permalinks

This is the single most important settings page for a new site. By default, WordPress uses “Plain” permalinks that look like yoursite.com/?p=123. These are impossible to read, do not include keywords, and look unprofessional.

Change the permalink structure to “Post name” immediately. This gives you clean URLs like yoursite.com/my-post-title. Do this before you publish any content. Changing it after you have live pages with incoming links will break those links.

Settings > Discussion

• Consider turning off “Allow people to submit comments on new posts” if you do not plan to moderate a comments section. Spam comments are one of the most common nuisances on WordPress sites.
• If you keep comments enabled, turn on “Comment must be manually approved” to prevent spam from appearing automatically.

Settings > Reading

• Set your homepage display here (covered in the previous step).
• Make sure “Discourage search engines from indexing this site” is unchecked. This option is sometimes enabled during development and accidentally left on, which prevents Google from indexing your site at all.

Settings > Writing

Less critical, but worth checking: make sure your default post category is something meaningful rather than “Uncategorized.” Go to Posts > Categories, rename or add categories that fit your site, then come back to Settings > Writing and set a sensible default.