Prevention
Be prepared, not panicked.
Most website emergencies come from a short list of causes. These six habits take an afternoon to set up and turn most of them into a minor inconvenience.
Keep backups somewhere else
A backup stored on the same server as your site can disappear with it. If the server fails, the account is suspended or the site is hacked, you need a copy your host does not control.
Backup plan checklistDo this
- Back up files and the database, not just one.
- Keep at least one copy off the server, with 30 days of history.
- Test a restore to a staging copy every three months.
Test updates before they go live
Plugin, theme and PHP updates are the most common reason a working site suddenly breaks. A staging copy lets an update fail somewhere nobody sees it.
If an update already broke itDo this
- Take a backup right before each round of updates.
- Update one thing at a time so you know what changed.
- Delete plugins and themes you no longer use.
Know before your visitors do
Uptime and certificate monitoring warn you while there is still time to act, instead of a customer telling you the site has been down all weekend.
Run a free health checkDo this
- Turn on uptime monitoring that emails or texts you.
- Get an alert before the SSL certificate expires.
- Send alerts to an address that is not on the same domain.
Lock the front door
Most hacks start with a reused password or an old admin account. Strong, unique logins and two-factor sign-in stop the easy attacks.
Hack recovery checklistDo this
- One admin account per person, with two-factor sign-in.
- Use a password manager and a unique password everywhere.
- Remove accounts for people who no longer need access.
Own your domain and DNS
If the domain expires or you cannot log in to the registrar, nothing else matters. Know where the domain and DNS live, and who can change them.
Switching hosts checklistDo this
- Put the domain on auto-renew with a card that will not expire soon.
- Make sure the registrar login uses your own email address.
- Keep a copy of every DNS record, including email records.
Write down who to call
In an emergency, the slowest part is often finding the right login or support number. A one-page plan written on a calm day saves hours on a bad one.
All free checklistsDo this
- List your host, registrar, DNS and email provider, with support contacts.
- Note where backups live and how to restore one.
- Keep a printed copy somewhere other than your computer.