01 Installing WordPress (Softaculous)
The fastest way to install WordPress on cPanel.
Step 1cPanel → Softaculous Apps Installer.
Step 2Click WordPress → Install Now.
Step 3Choose https://, your domain, leave directory blank.
Step 4Set Site Name, admin username (NOT "admin"), strong password, your email.
Step 5Tick Auto Upgrade and click Install.
Full Softaculous guide →
02 Manual install (advanced)
Step 2Upload the ZIP to public_html via cPanel File Manager and Extract.
Step 3Move all files out of the wordpress/ folder into public_html.
Step 5Visit https://yourdomain.com and follow the on-screen installer — fill in DB name, user, password, host = localhost.
03 Logging in & admin tour
Step 1Open https://yourdomain.com/wp-admin.
Step 2Enter the admin username & password from install.
Key admin areas
- Posts — blog articles
- Pages — static pages (About, Contact)
- Media — images & files
- Appearance — themes, customizer, menus, widgets
- Plugins — extend functionality
- Users — admin / editor / author accounts
- Settings — general, permalinks, reading
04 Installing a plugin
Step 1WP Admin → Plugins → Add New.
Step 2Search by name (e.g. Wordfence, Yoast SEO, WooCommerce).
Step 3Click Install Now → wait → click Activate.
To upload a paid plugin (.zip)
Step 1Plugins → Add New → Upload Plugin.
Step 2Choose your .zip, click Install Now → Activate.
05 Installing a theme
Step 1Appearance → Themes → Add New.
Step 2Search by name (e.g. Astra, GeneratePress) or upload a paid .zip.
Step 3Click Install → Activate.
Tip If your theme has demo templates, install the recommended Starter Templates plugin and import a one-click demo.
06 Migrating WordPress with All-in-One WP Migration
On the OLD site
Step 1Install & activate All-in-One WP Migration.
Step 2Plugin menu → Export → File → download the .wpress file.
On the NEW site (ServerBD)
Step 1Install fresh WordPress (Tutorial #1) and activate the same plugin.
Step 2Plugin menu → Import → drag & drop the .wpress file.
Step 3Confirm the overwrite. After import, log in again with the OLD credentials.
Warning Free version limits upload to 512MB. For larger sites, contact ServerBD support — we'll do the migration for free.
07 Speed optimisation (LiteSpeed Cache)
All ServerBD shared hosting runs on LiteSpeed — the fastest WordPress server stack.
Step 1Install & activate LiteSpeed Cache from Plugins → Add New.
Step 2Open LiteSpeed Cache → Cache tab → enable cache (already on by default).
Step 3Open Page Optimization → enable Minify CSS/JS, Combine CSS/JS, Lazy-load images.
Step 4Open Image Optimization → click Send Optimization Request for free WebP.
08 Backups with UpdraftPlus / Backuply
Step 1Plugins → Add New → install UpdraftPlus (or Backuply).
Step 2Settings → UpdraftPlus Backups → Settings tab.
Step 3Set Files backup schedule = Weekly, Database = Daily.
Step 4Choose remote storage — Google Drive or Dropbox recommended (free tier).
Step 5Click Save Changes. UpdraftPlus uploads automatically going forward.
Server-level JetBackup guide →
09 Security hardening checklist
- Don't use the username admin — create a custom one
- Set a 16+ character random admin password
- Install Wordfence or Solid Security firewall
- Enable 2FA on all admin accounts
- Hide the login URL — change /wp-login.php to /secret-login via WPS Hide Login
- Disable file editing — add define('DISALLOW_FILE_EDIT', true); to wp-config.php
- Keep WordPress core, plugins & themes updated
- Remove unused plugins/themes
- Use HTTPS on every page (Tutorial #10)
Server-side hardening with Imunify360 →
10 Force HTTPS & fix mixed content
Step 1Make sure SSL is installed (see
SSL guide).
Step 2WP Admin → Settings → General → set both URLs to start with https://.
Step 3Install Really Simple SSL plugin → activate → click Activate SSL.
Step 4Test the site in a private window — look for the padlock in the address bar.
If a padlock is missing (mixed content)
# In phpMyAdmin → SQL tab, run:
UPDATE wp_options SET option_value = REPLACE(option_value, 'http://', 'https://')
WHERE option_name IN ('siteurl', 'home');
UPDATE wp_posts SET post_content = REPLACE(post_content, 'http://yourdomain.com', 'https://yourdomain.com');