Skip to content
Aldrian

WordPress2 min read

A Monthly Website Maintenance Checklist

Twenty minutes a month keeps most small problems from becoming big ones. A simple routine for WordPress and other business websites.

Aldrian Loyola

Web developer

Abstract illustration of a calendar with a wrench

Websites don't break all at once. A plugin falls out of date, a contact form quietly stops sending, an old page starts returning an error. Each one is small, but together they make a site feel neglected.

This is the routine I recommend to clients who want to look after their own site. Put a reminder in your calendar for the same day each month.

1. Confirm your backups are working (5 minutes)

  • Check that automatic backups ran this month
  • Make sure at least one copy is stored somewhere other than your web server
  • Every few months, try restoring a backup to a test site so you know it actually works

A backup you've never tested is a hope, not a plan.

2. Update carefully (5 to 10 minutes)

For WordPress sites:

  1. Take a fresh backup first
  2. Update plugins one at a time, or in small groups
  3. Update your theme
  4. Update WordPress core when a new version is available
  5. Check the homepage, a key page, and your contact form after updating

Delete plugins and themes you no longer use. Deactivated plugins can still contain vulnerable code.

3. Test your forms (2 minutes)

Send a test message through every important form: contact, quote request, booking. Make sure it arrives in your inbox, not spam. Forms failing silently is one of the most common problems I see, and it costs real enquiries.

4. Check speed and errors (3 minutes)

  • Run your homepage through PageSpeed Insights and note the mobile score
  • If you use Google Search Console, check for new errors under Pages and Core Web Vitals
  • Look for any sudden change compared to last month

Click through your main navigation and footer. If your site has a lot of pages, a free broken link checker can scan it for you. Fix or redirect anything that returns a "page not found" error.

6. Review security basics (2 minutes)

  • Remove admin accounts for people who no longer need access
  • Make sure every admin uses a strong, unique password
  • Turn on two-factor authentication if it's available
  • Check that your SSL certificate is valid (the padlock in the browser)

7. Refresh your content (optional, 5 minutes)

  • Are your opening hours, prices, and team details still correct?
  • Is there an outdated announcement still on the homepage?
  • Could a recent project or review be added?

Fresh, accurate content helps visitors trust you, and it gives search engines a reason to revisit your site.

Keep a simple log

Write down the date, what you updated, and anything unusual. If something breaks later, the log tells you what changed and when. It's also handy if you hand maintenance over to someone else.

If this feels like more than you want to take on, that's normal. It's exactly the kind of routine work a maintenance plan covers.

Share

Keep reading

Abstract illustration of a shield over a server

WordPress4 min read

PHP2Shell: What WordPress Site Owners Need to Do Now

Two critical PHP flaws disclosed on October 21, 2026 can let attackers take over a server without logging in. Here's how to check if your WordPress site is affected and what to fix first.

Read article