WordPress quickstart on HostingSwift
Install WordPress, harden it, make it fast, and keep it updated — the essentials.
WordPress powers a huge share of the web. Done well it is fast and safe; done carelessly it is a magnet for attacks. Here is the short version.
Install
From /panel/web, choose WordPress in the one-click installer. The panel:
Creates a database and a dedicated database user (never root).
Downloads core and sets correct file permissions.
Generates strong salts and admin credentials.
Or install it yourself on a VPS — see Self-hosting WordPress on a VPS. WordPress itself is free software: wordpress.org · source on GitHub (a mirror of the canonical development at core.trac.wordpress.org).
Immediately after install
Add HTTPS — Free TLS certificates, then force the redirect.
Change the admin username if the installer created "admin"; use a unique strong password and enable 2FA via a plugin.
Set permalinks to "Post name" (Settings → Permalinks) for readable URLs.
Delete unused themes and plugins. Anything installed but inactive is still attack surface.
Disable the built-in file editor by adding to
wp-config.php:
define('DISALLOW_FILE_EDIT', true);Make it fast
A page cache. The single biggest win. Turns dynamic requests into static files for logged-out visitors.
An object cache. On a busy site, a persistent object cache (Redis) cuts database load sharply.
A CDN for static assets if you have a geographically spread audience.
Optimised images. Serve WebP/AVIF where possible; huge JPEGs are the most common cause of a slow site.
Fewer plugins. Every plugin adds queries and requests.
More depth: Speeding up WordPress.
Keep it updated
Outdated plugins are the leading cause of WordPress compromise. Enable automatic minor-core updates, and update plugins and themes on a schedule — after taking a backup. A snapshot before updating means a bad update is a two-minute rollback rather than a rebuild.
Back it up
Files and database, both, off the server. See Back up your data. A WordPress backup without the database is a theme with no content.
Related reading