WordPress launch checklistpost· BestStartBiz.com

WordPress Launch Checklist: 25 Things to Do Before Your First Post

Most blogging guides focus on what to write, how to rank in Google, and how to grow your audience. Almost none of them cover what to do before you publish your first word. Get the setup wrong, and you’ll spend months fixing a foundation that should have taken a single day to build correctly.

This checklist covers all 25 items — in the right order, across five phases — that every WordPress blog should have in place before going live. Six of them are flagged as critical: missing any one of them causes problems that are expensive or time-consuming to fix afterward. Work through this list once, and you’ll never need to revisit it.

Your Site’s Foundation

These five items need to be in place before WordPress is even installed. Skipping or rushing them creates problems that are difficult to fix once your site is live and indexed by Google.

• 
  
  
  
  
  

  Registered a custom domain name

  
  

  Use a .com extension where possible — it carries the most brand recognition and credibility. Keep it short (under 15 characters), memorable, and free of hyphens and numbers. Register via Namecheap (~$10/year) or get a free domain with your hosting plan. Your domain is your permanent address on the internet — choose it carefully.

  
  
  
  
• 
  
  
  
  
  

  Purchased self-hosted WordPress hosting Critical

  
  

  Choose a reputable host that supports one-click WordPress installation. Recommended options: Bluehost (~$3/month, beginner-friendly, free domain included), SiteGround (~$4/month, better performance, excellent support), or Cloudways (advanced, pay-as-you-go). WordPress.com’s free plan does not allow Google AdSense, most affiliate programs, or the plugins required for monetization — do not use it if earning income is your goal.

  
  
  
  
• 
  
  
  
  
  

  Connected the domain to hosting via nameservers

  
  

  If you registered your domain separately from your host (e.g., Namecheap domain + SiteGround hosting), you’ll need to update the nameservers in your domain registrar’s dashboard to point to your host. Your host provides the exact nameserver addresses. DNS propagation can take up to 48 hours — plan your setup accordingly, and don’t panic if the site doesn’t appear immediately.

  
  
  
  
• 
  
  
  
  
  

  Installed WordPress.org via one-click installer. Critical

  
  

  All major hosts offer Softaculous or a proprietary installer that sets up WordPress in under 5 minutes. Log in to your hosting control panel (cPanel or similar), find “WordPress Installer,” and follow the prompts. Set your admin username to something other than “admin” — it’s the first username hackers try. Store your login credentials somewhere secure before closing the installer window.

  
  
  
  
• 
  
  
  
  
  

  SSL certificate active — site loads as https:// Critical

  
  

  A free SSL certificate is included with most hosting plans. Activate it in your hosting dashboard (look for “SSL/TLS” or “Let’s Encrypt”). Once active, your site should load at https://yourdomain.com with a padlock icon in the browser. SSL is required for Google AdSense approval and most affiliate programs, and it is a confirmed Google ranking signal. Visitors also see a “Not Secure” browser warning on non-HTTPS sites, which immediately kills credibility.

  
  
  
  

→ Related: How to start a blog and make money: the complete beginner’s guide

Settings, Theme, and Structure

These seven items ensure WordPress is configured correctly before any content goes live. Several of them — particularly the permalink structure — cannot be changed safely after you’ve published posts.

• 
  
  
  
  
  

  Set permalink structure to “Post name” Critical.

  
  

  Go to Settings → Permalinks → Post name and save. This gives you clean, readable URLs like yourdomain.com/how-to-start-a-blog instead of the default yourdomain.com/?p=123. Do this before publishing a single post — changing your permalink structure after publishing breaks all your existing URLs, causes 404 errors, destroys any SEO ranking you’ve built, and breaks any external links pointing to your site. This is the single most consequential setting in WordPress. Set it in the first 5 minutes and never change it.

  
  
  
  
• 
  
  
  
  
  

  Set site title and tagline in Settings → General

  
  

  Your site title is your brand name — use it consistently. Your tagline should describe who your blog helps and how in one sentence. Both appear in browser tabs, search results, and social share previews. Also, confirm your site’s admin email address is one you actively check, as WordPress sends important notifications there.

  
  
  
  
• 
  
  
  
  
  

  Installed a fast, lightweight theme — Astra or Kadence

  
  

  Both Astra and Kadence are free, performance-optimized themes used by millions of WordPress sites. They load fast out of the box, are fully compatible with popular page builders and plugins, and look professional without requiring any design skills. After activating your chosen theme, delete the default themes that came pre-installed (Twenty Twenty-Four, Twenty Twenty-Three, etc.) — unused themes are a security vulnerability.

  
  
  
  
• 
  
  
  
  
  

  Removed all default placeholder content

  
  

  WordPress installs with a “Hello World” sample post and a “Sample Page.” Delete both from your dashboard. They look unprofessional, confuse Google’s indexing of your site, and signal an unconfigured blog to any visitor who sees them. Also, delete the “Hello Dolly” plugin from Plugins → Installed Plugins.

  
  
  
  
• 
  
  
  
  
  

  Configured comments to require approval or disabled them entirely

  
  

  Go to Settings → Discussion. Either disable comments entirely (check “Automatically close comments on posts older than 0 days” and uncheck new comment notifications) or set all comments to require manual approval before appearing. Spam comments accumulate on new blogs very quickly and are cited as a reason for AdSense application rejections. Choose your approach before you publish anything.

  
  
  
  
• 
  
  
  
  
  

  Uploaded a favicon (site icon)

  
  

  Go to Appearance → Customize → Site Identity → Site Icon. Upload a square image of at least 512×512px — your logo, your initials, or a simple brand symbol. The favicon appears in browser tabs, bookmarks, and search results on mobile. A missing favicon is a small but visible sign of an unconfigured site.

  
  
  
  
• 
  
  
  
  
  

  Set timezone correctly in Settings → General

  
  

  Your WordPress timezone determines when scheduled posts publish. If your timezone is set incorrectly, a post you schedule for 9:00 AM could publish at 2:00 AM or 2:00 PM. Set it to your local timezone before scheduling any content.

  
  
  
  

The 6 Plugins Every Monetized Blog Needs

Install only the plugins you genuinely need. Every plugin adds to page load time and potentially increases the security surface. The six below are the minimum required for a blog set up to earn money from AdSense, affiliate marketing, or digital products.

• 
  
  
  
  
  

  Rank Math is installed, and the setup wizard has been completed

  
  

  The Rank Math setup wizard connects to Google Search Console and configures your site’s schema type (set to “Blog” for a personal blog, “Organization” for a brand). Complete the wizard fully — don’t skip the Search Console step. Your sitemap URL will be yourdomain.com/sitemap_index.xml — note this for Phase 5.

  
  
  
  
• 
  
  
  
  
  

  Google Site Kit is installed and connected to your Google account

  
  

  Site Kit handles Analytics, Search Console, and AdSense code in one place — no manual header code edits required. Connect it to your Google account during setup, then verify that Analytics is receiving data (visit your own site and check the Real-time report in Google Analytics—you should see yourself as an active visitor).

  
  
  
  
• 
  
  
  
  
  

  Caching plugin installed and site speed tested

  
  

  Install WP Rocket or LiteSpeed Cache (not both). After activating, test your site speed at pagespeed.web.dev. Aim for a mobile score of 70 or above. If your score is under 50, check that your caching plugin is active and that Smush has compressed any images you’ve uploaded.

  
  
  
  
• 
  
  
  
  
  

  Smush is installed with automatic compression enabled

  
  After installing Smush, go to Smush → Bulk Smush and run it on any images that have already been

  uploaded. Enable automatic compression so every future image is compressed on upload without requiring manual action.

  
  
  
  
• 
  
  
  
  
  

  UpdraftPlus configured and first backup completed

  
  

  Connect UpdraftPlus to Google Drive or Dropbox and set a weekly automated backup schedule. Then run your first manual backup immediately — before adding any content. Confirm the backup files appear in your connected cloud storage before proceeding.

  
  
  
  

→ Related: How to get Google AdSense approved: the complete checklist

Pages Google and AdSense Check for

These pages are not optional. Google’s AdSense review process explicitly checks for them. Most affiliate programs require them. Privacy laws in the US (CCPA), EU (GDPR), and elsewhere legally mandate the Privacy Policy. Create and publish all four before applying for AdSense or joining any affiliate program.

• 
  
  
  
  
  

  Privacy Policy published and linked in the footer. Critical

  
  

  Generate your Privacy Policy at TermsFeed.com (free). During the generation wizard, select: Google Analytics (tracking), Google AdSense (advertising), and your email marketing platform (MailerLite or Kit). The generated policy must disclose that you use cookies, collect email addresses, and serve advertising. Paste the content into a new WordPress page titled “Privacy Policy” and publish it. Link it in your site footer so it’s accessible from every page — this is a specific AdSense requirement.

  
  
  
  
• 
  
  
  
  
  

  About page published with real, specific information. Critical

  
  

  Google’s AdSense review and many affiliate programs check that your About page contains genuine information about who runs the blog and why. Write 2–4 paragraphs covering: who you are, why you started this blog, who it’s for, and what readers can expect to learn. Avoid generic filler. A specific, personal About page builds trust with both Google’s review team and human readers visiting your site for the first time.

  
  
  
  
• 
  
  
  
  
  

  Contact page published with a working contact method

  
  

  A contact page signals legitimacy to both readers and advertisers. Use the free WPForms Lite plugin to add a simple contact form or display a dedicated contact email address. After publishing, submit a test message yourself to confirm submissions arrive in your inbox and don’t go to spam.

  
  
  
  
• 
  
  
  
  
  

  Affiliate disclaimer published and linked in footer Critical

  
  

  The FTC requires bloggers who earn affiliate commissions to clearly disclose that relationship. This means stating on your site (and ideally in each relevant post) that posts may contain affiliate links and that you earn a commission when readers click through and make a purchase. Create a short Disclaimer page and link it in your footer alongside your Privacy Policy. Amazon Associates’ program terms require a visible disclaimer on every page that contains Amazon affiliate links — many bloggers use a site-wide footer notice for this.

  
  
  
  

→ Related: The digital creator’s blueprint: starting your online business the right way

Connect Google Tools and Prepare for Income Before Post 1

These eight items connect your blog to Google’s infrastructure and put the monetization and audience-building systems in place before your first piece of content goes live. Every day you delay these is a day of potential data, traffic, and subscribers lost.

• 
  
  
  
  
  

  Search engine indexing turned ON in Settings → Reading Critical

  
  

  Go to Settings → Reading and confirm that “Discourage search engines from indexing this site” is unchecked. WordPress enables this option by default on new installations — which means Google will not index a single page of your blog until you turn it off. This is one of the most common reasons new blogs get zero organic traffic for months despite publishing consistently. Check it now.

  
  
  
  
• 
  
  
  
  
  

  Google Search Console account created and site verified

  
  

  Search Console shows you which keywords drive traffic to your site, which pages Google has indexed, and any crawl errors or manual penalties. Use Google Site Kit to verify your site — it handles the verification code automatically without requiring you to edit any files. Set up Search Console before your first post, so Google begins tracking your site’s search performance from day one.

  
  
  
  
• 
  
  
  
  
  

  XML sitemap submitted to Google Search Console

  
  

  Your Rank Math sitemap is located at yourdomain.com/sitemap_index.xml. In Search Console, go to Sitemaps → Add a new sitemap and paste the sitemap URL. This tells Google exactly which pages to crawl and index, dramatically speeding up the time until new posts appear in search results.

  
  
  
  
• 
  
  
  
  
  

  Google Analytics 4 connected and verified

  
  

  Connect via Google Site Kit. After connecting, verify it’s working by opening your blog in a browser tab and checking the Real-time report in your Analytics dashboard — you should see at least one active user (yourself). If you don’t see yourself, Analytics is not tracking correctly and needs troubleshooting before you start publishing.

  
  
  
  
• 
  
  
  
  
  

  Email marketing account set up with a lead magnet ready

  
  

  Create a free account at MailerLite or Kit (both free up to 1,000 subscribers). Create a simple lead magnet — a free checklist, PDF guide, or template related to your blog’s niche — and set up a sign-up form connected to it. Embed the form in your blog before your first post goes live. Every reader who visits without subscribing is a missed connection you cannot recover. Start capturing emails from visitor one.

  
  
  
  
• 
  
  
  
  
  

  Amazon Associates account applied for (if doing affiliate marketing)

  
  

  Amazon Associates approves sites with minimal existing traffic — unlike most affiliate programs. Apply early so your account is ready to use the moment your first relevant post goes live. Note: Amazon requires you to make 3 qualifying sales within 180 days of approval, or your account will be closed. Don’t apply until you have a publishing schedule in place.

  
  
  
  
• 
  
  
  
  
  

  Site tested on mobile — all pages load correctly

  
  

  Open every page linked in your navigation menu on a mobile phone. Check that text is readable, buttons are tappable, and images load without overflowing the screen. Use Google’s free Mobile-Friendly Test at search.google.com/test/mobile-friendly for a formal assessment. Over 60% of web traffic is now mobile — a broken mobile experience is invisible to you and immediately visible to everyone else.

  
  
  
  
• 
  
  
  
  
  

  PageSpeed score checked and above 70 on mobile

  
  

  Test your site at pagespeed.web.dev. Target a mobile score of 70 or above before publishing. If your score is below 50, check that your caching plugin is active, all images are compressed, and you haven’t installed any unnecessary plugins. PageSpeed is a confirmed Google ranking factor — a slow site actively works against your SEO from day one.

  
  
  
  

The 6 Critical Items — At a Glance

If you take nothing else from this checklist, complete these six items before publishing anything. Missing any one of them causes problems that are significantly harder to fix after the fact than before it.

“The bloggers who get AdSense approved quickly and rank in Google faster aren’t necessarily better writers. They’re the ones who got the setup right before they started publishing.”

→ Related: How to start a blog and make money: the complete beginner’s guide  ·  How to get Google AdSense approved: the complete checklist  ·  Keyword research for beginners: how to find topics people actually search for  ·  How to build an email list from zero  ·  The digital creator’s blueprint: starting your online business the right way