How to install WordPress: one-click with Softaculous, manually, and the first settings

Get these ready first

WordPress needs PHP and a MySQL or MariaDB database, which is why a Linux plan with cPanel is the natural home for it. Our Linux hosting has a one-click installer, and our WordPress plans have a 1-click install of their own. Before you begin, register your domain, point it at the hosting server, and check that it has an SSL certificate, so that WordPress is set up on its secure https:// address from the start. If DNS has not updated yet, wait: changing addresses later is more work than waiting an hour.

If an old site is running at the same address, take a backup and move it out of the way, since files in the same folder can conflict with the installation.

Method 1: One-click install with Softaculous

This is the right choice for almost everyone, and it takes a few minutes. Softaculous creates the database, fills in the configuration and sets up your admin login:

• Sign in to cPanel and open WordPress under Softaculous Apps Installer, then click Install Now
• Choose the https:// version of your domain, using the one with or without www that you want as your main address
• Clear the “In Directory” box, or WordPress will be placed in a subfolder such as /wp
• Enter your site name and a short description; you can change these later
• Choose an admin username other than “admin”, a long unique password and an email address you read
• Select your language, leave extra plugin suggestions unticked if you are unsure, and click Install
• Open the admin address it gives you, which is normally yourdomain.in/wp-admin, and sign in

Method 2: Manual install in cPanel

A manual install is useful when you want full control, when one-click is not available, or to understand how WordPress fits together. Note the database name, username and password as you go. cPanel adds your account name as a prefix, such as acct_wp, and you must use the complete prefixed names in the wizard.

• Download the latest ZIP file from wordpress.org
• In File Manager, upload it to public_html and extract it
• Move everything out of the new wordpress folder into public_html, then delete the empty folder and the ZIP
• In MySQL Databases, create a new database and a new user with a strong password
• Add that user to the database and grant ALL PRIVILEGES
• Visit your domain in a browser, which starts the setup wizard, and choose your language
• Enter the database name, username and password, leave the host as localhost, and change the table prefix from wp_ if you wish
• Click Run the installation, then enter the site title, admin username, password and email

First settings, in this order

Do these before adding any content, since some of them are harder to change later:

• Settings, General: check that both address fields start with https://, then set the title, the tagline and the timezone to Kolkata (UTC+5:30)
• Settings, Permalinks: choose “Post name”, so addresses read yourdomain.in/about rather than ?p=123
• Settings, Reading: while you are building, you can tick “Discourage search engines”, but write a reminder to untick it on launch day
• Settings, Discussion: turn comments off if you do not plan to use them, or hold them for approval
• Users, Profile: set a display name, so your login name does not appear on posts
• Delete the sample post, sample page and comment, and remove themes you will not use, keeping one default theme as a fallback

Security and updates

Most hacked WordPress sites are running out-of-date plugins or a weak password. Update WordPress, the theme and all plugins right after installing, and turn on automatic updates for plugins you trust. Install only well-maintained plugins, and delete those you deactivate. Add two-factor sign-in for every admin account through a reputable plugin. On our WordPress plans, updates are managed and a web application firewall is included, but plugin choices and passwords remain with you.

Backups and email from your site

Set up scheduled backups before you begin real work. Softaculous can include backups in its installation options, cPanel has its own Backup tool, and our Backup add-on keeps scheduled copies of files and database. Whichever you use, keep at least one copy away from the server and try a restore once.

WordPress sends mail from your site, such as password resets and form submissions, and mail sent directly from the web server often goes to spam. Install an SMTP plugin and connect it to a real mailbox on your domain. Then send yourself a test message and check that your SPF and DKIM records are in place.

If something goes wrong

Most first-time problems have a simple cause:

• “Error establishing a database connection”: the database name, username or password in wp-config.php is wrong, or the user has not been added to the database
• A default hosting page still shows: an old index.html is in public_html, so remove or rename it
• Padlock warning or redirect loop: the addresses in Settings, General do not match the SSL setup, or the certificate has not been issued yet
• White screen after installing a plugin: rename that plugin’s folder in File Manager to disable it, then sign in again