Your Website Will Break One Day. Thirty Minutes a Month Decides How Badly.

Nothing happens for months, and then one morning it will not start

A website is like a scooter. Nothing dramatic happens for a long time, and then one day it will not start — and it turns out nobody had changed the oil. Thirty minutes a month is the difference between a routine and a crisis.

The thirty-minute monthly routine

0–5 minutes · SAVE

Take a full backup — files and database — and download it to your own computer or cloud drive. A backup that lives only on the same server is not a backup. Keep the last three months and delete the older ones.

Once a quarter, open your backup plugin’s restore screen and read the steps even if you do not run one. Knowing where that button is saves an hour on the worst day.

5–15 minutes · UPDATE

With the backup done, update in this order: plugins one at a time, then the theme, then WordPress core. After each plugin, open your home page in another tab and check it still looks right. This is how you find out which update broke something — not next week, when you have forgotten.

Then prune. Delete plugins you are not using; deactivated is not deleted, and an unused plugin is still a security hole. Most small sites need between five and eight.

15–22 minutes · SPEED

Run a free speed test on your home page. Then open your Media Library sorted by file size and fix anything above about three hundred kilobytes — resize to 1600 pixels wide, compress, re-upload. Empty the spam comments and trash, and clear your caching plugin.

22–28 minutes · SECURE

Confirm the site opens with https and a padlock, and that the http version redirects to it. Check your certificate is not expiring within the month. Then review your WordPress users and remove anybody who should no longer have access — the cousin who helped, the freelancer from last year. No account should be called “admin”, and two-step verification should be on.

28–30 minutes · CHECK

Send yourself one test enquiry from your phone and confirm it arrives, spam folder included. Press every phone number and the WhatsApp link. Click every menu item.

Then write four lines in a care log: the date, what you updated, anything odd, and where the backup is. Six months of those lines is worth more than any support plan when something eventually goes wrong.

The eight emergencies

White screen

Almost always a plugin or theme conflict straight after an update. Do not start deleting. Try yoursite.com/wp-admin — the dashboard often still works when the front end is white; if it does, deactivate the plugin you updated last. If you cannot reach the dashboard, use your hosting file manager to rename the wp-content/plugins folder to plugins-off, which deactivates everything at once and gets you back in.

Site down completely

Three causes, in order of likelihood: your domain expired, your hosting expired, or the server is having an outage. Check your email — including spam — for renewal notices before assuming anything technical. An expired domain must be renewed immediately: after the grace period domains can be sold to somebody else, and buying yours back is expensive if it is possible at all.

Hacked

Strange pages, redirects, Google warnings, posts you did not write. The cause is nearly always an outdated plugin or a reused password — almost never anything sophisticated. Change your WordPress, hosting and email passwords immediately, from another device if you can. Then restore the most recent backup from before the problem started, and update everything on the restored site.

Slow

Almost always oversized images. Open the Media Library sorted by file size and look at the top ten — if several are over a megabyte you have found it before running a single test. Never upload straight from a camera or WhatsApp.

Form not sending

Extremely common on shared hosting, and it fails silently — visitors think they wrote to you and nothing ever arrived. Send yourself a test right now. If nothing lands in ten minutes, assume it has been failing far longer than you think. The real fix is a free SMTP plugin connected to your email account, plus switching on your form plugin’s own entry storage so you always have a record.

Images broken

Open one broken image in a new tab. “Not found” means the file is gone from the server — restore the wp-content/uploads folder from your backup. This is exactly why files as well as the database go into every backup.

Locked out

Try “Lost your password” first. If the reset email never arrives, that is an email problem, not a password problem — see the form section above. Hosting support can reset your password directly in the database in a couple of minutes. Afterwards, create a second administrator account with a different email address and keep the details somewhere safe.

SSL error

Either the certificate expired, or the page is loading some content over http while the page itself is https — the mixed-content problem. Check the expiry date in your hosting panel first; most hosts have a one-click reissue. Then turn on automatic renewal.

The four calm rules

• Backup first, every time. A backup turns a disaster into an inconvenience. Its absence turns an inconvenience into a disaster.
• Change one thing at a time. Two changes at once and you will never know which one helped.
• Write down what you did. When you contact support, the first question is what changed. An accurate answer saves hours.
• Ask hosting support before internet forums. They can see your server, your logs and your backups, and you have already paid for them. Never paste code from a forum into a live site.

And one situation that is not technical at all

If nothing is broken but nothing is working — the site loads, the form sends, and still nobody enquires — no amount of support will help. That is not a server problem. That is a page that does not yet persuade, and it belongs with your weekly numbers instead.