HF PanelDocsv1.0.0

Host your first WordPress site

Add a domain, point it at the server, install WordPress in one click, get free SSL and harden the site, all from the Control Panel.

This tutorial puts a new WordPress site live on example.com, with HTTPS, automatic updates and the security checklist done. It takes about 15 minutes plus the time DNS needs.

You need:

  • a hosting account (your own, or one your hosting provider made for you) and its Control Panel login
  • a domain, for example example.com, and access to the company you registered it with

1. Add the domain

Skip this step if example.com is already the account's main domain: it is listed under Domains › Domains.

  1. Open Control Panel › Domains › Domains.
  2. Click the Add a domain tab.
  3. Enter example.com (no http:// and no www). Leave Folder empty.
  4. Click Add domain.

The website folder web/example.com/public_html, the DNS zone and email for the domain are set up straight away. See Domains.

2. Point the domain at the server

  1. Open Domains › DNS setup and click example.com.
  2. Either set the nameservers shown at your registrar (easiest), or add every record marked ✘ where your domain's DNS is now.
  3. Click Check again until the records show ✔.

You can install WordPress while you wait. Full walk-through: Point a domain bought elsewhere.

3. Check the PHP version

  1. Open Software › PHP settings.
  2. In PHP version & web server per website, check that example.com uses a current version. PHP 8.3 (recommended) is a good choice.

If the version is outside what WordPress needs, the App installer tells you so in the next step. See PHP settings.

4. Install WordPress

  1. Open Websites › Apps and click the WordPress tile.

  2. Fill in the form:

    Field What to enter
    Domain example.com
    Folder leave empty to put WordPress on the main site
    Site title your site's name
    Admin username your own name, for example sarah. It can't be admin.
    Admin email your email address
    Admin password leave blank to generate a strong one

  3. Click Install WordPress and watch the live window.

Important: the success message shows the admin password once. Copy it into your password manager now.

The database is created for you. See Apps.

5. Get SSL

Nothing to do in most cases: AutoSSL adds a free Let's Encrypt certificate within minutes of the domain pointing at the server. To check, open Domains › SSL/TLS:

  • Let's Encrypt (free) in the Certificate column means it is done.
  • None with a note such as "the domain doesn't point here yet" means DNS is not ready. Wait, or click Get free SSL once step 2 shows ✔.

Make sure Always https:// is On. See Get free SSL on every domain.

6. Sign in to WordPress

  1. Open Websites › WordPress. Your new site is found by itself.
  2. Click Open WordPress admin and sign in with the admin login from step 4.

7. Harden the site

Still on Websites › WordPress, with the site chosen:

  1. In Security hardening, click Fix all. File editing in WordPress admin is switched off, wp-config.php is locked to your account and XML-RPC is blocked.
  2. Under Switches, set WordPress updates itself to Every version or keep Security only, and turn on Plugins update themselves if you want plugins kept up to date for you.

See WordPress.

8. Make it fast

  1. Open Software › PHP settings and set Page cache for example.com to On — 10 min. Logged-in users, carts and forms always get a fresh page.
  2. If your plan includes Redis, open Databases › Redis cache, click Turn on Redis, then click Use Redis next to the site.

More ideas: Speed up a slow website.

9. Take a first backup

Open Files › Backups and click Back up now. Your hosting provider usually also backs up every night. See Backups.

Your WordPress site is live.