Skip to content

Free printable checklist

Switching hosts

Move a WordPress site to a new host without losing email, SSL, data or rankings: inventory, rehearse, cut over, then wait.

KIT-04

PDF, 1 page, 7 KB

Download the PDF

One page. Prints on any black and white printer. No signup.

Inventory first

  • Export the full DNS zone: A, AAAA, CNAME, MX, TXT (SPF, verification records), CAA, SRV.
  • Find DKIM selectors (s= in a sent email’s DKIM-Signature header), then dig TXT [selector]._domainkey.example.com.
  • Run dig +short MX example.com and dig TXT _dmarc.example.com. Know where mail lives.
  • List subdomains, cron jobs, server redirects and anything outside WordPress in the web root.
  • Record PHP version and extensions (php -v, php -m), memory limit and upload size.

Prepare the new host

  • Lower TTL on records you will change to 300 seconds, at least one old TTL ahead (24 to 48 hours).
  • Take a full backup of files and database and store it off both servers.
  • Match or improve the PHP version and extensions on the new server.
  • Copy files, import the database. Domain or path changed? wp search-replace with --dry-run first.
  • Recreate cron jobs and any server-level redirects or rules.

Rehearse before DNS

  • Point your hosts file at the new IP and test the site on its real domain.
  • Test logins, forms, search, checkout, uploads and wp-admin on the new server.
  • Have SSL ready: DNS validation, a copied certificate, or issuance within minutes of cutover.
  • Freeze content changes, or plan a final database sync just before cutover.

Cut over

  • Change only A/AAAA and website CNAMEs. Leave MX and mail records alone unless mail moves.
  • Moving DNS hosts too? Recreate every record and compare zones before changing nameservers.
  • Check dig +short example.com @8.8.8.8 and the authoritative nameservers.
  • Confirm a valid certificate, the expected 200/301 codes via curl -I, and purge all caches and CDN.

After the move

  • Send test mail to two major providers. SPF, DKIM and DMARC must pass. Add the new server to SPF if it sends mail.
  • Watch logs and Search Console for 404s and errors for a week. Confirm new backups run.
  • Keep the old host for at least 7 days, until its logs show no more traffic.
  • Raise TTL back (3600 is common). Take a final backup, then cancel the old host last.

Keep packing

The rest of the bag

KIT-01
PDF, 1 page, 7 KB

Backup plan

What a full WordPress backup contains, how often to run it, where to keep it, how to test it.

KIT-02
PDF, 1 page, 7 KB

Hack recovery

After a WordPress hack: contain it, keep evidence, find the way in, clean, harden, recover.

KIT-03
PDF, 1 page, 7 KB

Pre-launch

Check DNS, SSL, WordPress settings, security, speed, SEO, forms and backups before a new or redesigned site goes live.

KIT-05
PDF, 1 page, 6 KB

Site takeover access inventory

Every login, account and file to collect when you inherit a website, in the order that keeps it safe: domain first, backup before changes, then access, code and renewals.

KIT-06
PDF, 1 page, 7 KB

Store fraud response

When a WooCommerce store is hit by card testing: confirm it, slow it down in the first hour, clean up the orders, report it and harden the checkout.

KIT-07
PDF, 1 page, 6 KB

Monthly maintenance

A one-page monthly routine for a WordPress site: backups tested, updates in a safe order, renewals, uptime, Search Console, forms and security checks.

KIT-08
PDF, 1 page, 5 KB

Renewals register

A fill-in register for everything a website renews, with the provider, account owner, who pays, renewal date, cost and cycle, auto-renew and sites for each, one row per item.

Search the field manual

What is going wrong?

Press / to search from any page, Esc to close