Security & Performance
Make WordPress faster, safer and easier to recover.
A practical order of operations for backups, updates, access, caching, media and troubleshooting.
Security baseline
Reduce preventable risk
- Use unique admin accounts and strong passwords
- Enable multi-factor authentication where possible
- Remove unused themes, plugins and accounts
- Keep core, themes and plugins updated
- Limit administrator access
- Maintain off-site backups and test restores
- Use HTTPS and secure hosting configuration
Performance baseline
Fix the largest bottlenecks first
- Choose appropriate hosting and current PHP
- Resize and compress images before upload
- Use page caching and a CDN when appropriate
- Remove duplicate plugins and unused scripts
- Limit heavy fonts, sliders and third-party embeds
- Clean recurring database bloat carefully
- Test with real pages and real devices
Troubleshooting order
When something breaks
Record the exact symptom
Copy the error, URL, time, device and user role. Screenshots help, but exact text is better.
Identify what changed
List plugin updates, theme edits, migrations, DNS changes, PHP changes and new integrations.
Check site health and logs
Review WordPress Site Health, host logs and browser console messages before guessing.
Reproduce on staging
Use a staging copy or troubleshooting mode to isolate conflicts without disrupting visitors.
Change one variable
Test one plugin, setting or code change at a time and record the result.
Restore service first
Roll back to the last known good state, then investigate the root cause safely.