Looking after our site
Any website using a CMS will require looking after. This will involve settings for backups, security as well as performance. This post outlines which plugins I’d recommend for each of these 3 aspects.
We can install plugins as usual: via the ‘add plugins’ function (+ search) in admin ~ or via the WordPress Plugin Directory on wordpress.org . Once installed, it will be important to keep the plugin up to date. This can be done manually though it might be best to enable the auto-update.
Back-ups
WPVivid ↗
This plugin offers the function to schedule automated backups which can be saved to a designated server and used for restoring posts as well as migrating the site.
This plugin is vital to keep our content safe and ensure. It’s one of the first functions to add to a new WordPress website. There are various tiers available, the free version will be sufficient for starters. As first step, it’s important to configure the settings to fit.
Setup
- install and activate the plugin
- access settings under WPvivid Backup (located the left panel)
- set the location of the backup files
ideally this will be a different server to the one the website is hosted on. Keeping the site and the backup files on different servers will be the safest option. - go to the ‘schedule’ tab and run one manual backup – then configure the timing of the backups to be run automatically
Security
Wordfence ↗
This plugin runs regular, automated security checks and monitors the site. It includes a firewall, malware scanner and additional security features.
The free version of this plugin will offer protection against malicious code or content, against brute force attempts, check theme and plugin files for integrity and we can scan the site for problems. This plugin has been around for years and is one of the most popular and effective protections we can add to our sites.
All of the above… and more.
server tools ↗
These are the plugins on offer by the hosting of this site, SiteGround. Depending on the server, your options will be different.
The screenshot shows the options available on SiteGround – who specialise on WordPress hosting. Their server tools are therefore geared towards maintenance specific to WordPress.
When it comes to both backups, security and performance as well, your hosting package and server might include various options to enhance the website. It will be worth checking on the tools available in your control panel. And if you’re not sure, do ask technical support about the best settings for your site – they will be able to help you with the configurations.
Update spring 2025
Finding out that SiteGround is using Google Cloud – I decided to change hosting (to Guru Hosting). I’d been with SiteGround for nearly 10 years and I cannot fault them. They are excellent and I absolutely love their tech support team. A wonderful bunch of people, quick to reply and always on hand to help solve any issues that arise. My move is a very much based on my decision to avoid US-based services (and particularly, as much as possible anyway, to avoid anything to do with the big corps like Google) … because … well, you know, politics… and mistrust in the US government and their flippant disregard for people and their rights.
A note on performance
There are quite a number of plugins available to manage cache, aiming to increase performance. My advice would be to be cautious and research the options available. I usually first check on the server and the tools in the control panel and make use of what’s available. This will save the extra plugin in WordPress and usually be the best approach.
If the server tools seem to limited, there will be caching and performance plugins out there which can enhance loading speed and more. This is something I would recommend you do as final step and not during the theme build. Caching functions can interfere with the preview of you template edits and it would be a frustrating process. Work on your theme, finalise the content input, settings and theme build – and then look into performance before site launch.