Lesson 3 of 3
Running your site safely
2 min
Most website disasters are preventable with a few routine habits.
Backups that actually work
- Keep automatic daily backups, and at least one copy off the server.
- Back up both files and the database. One without the other is often useless.
- Test a restore every few months. A backup you've never restored is a hope, not a plan.
Follow the 3-2-1 rule: three copies, on two kinds of storage, with one off-site.
Keep software updated
Outdated plugins, themes and CMS versions are the number one way sites get hacked. Turn on automatic minor updates, and remove plugins you don't use: unused code is still attackable code.
Always use HTTPS
A TLS certificate encrypts traffic and is free through providers like Let's Encrypt. Redirect all http:// traffic to https://.
Separate environments
Test big changes on a staging copy first, never directly on the live site.
Monitor
- Uptime monitoring tells you when the site goes down, ideally before your customers do.
- Check disk space: a full disk stops databases and email.
- Glance at error logs after any change.
Least privilege
Give each person their own account with only the access they need. Never share one admin password across a team.