Tim McGiven's Blog, page 3

3 Fresh Features We’ve Added to the ActivityPub Experience for WordPress

Imagine publishing once and instantly reaching engaged readers across dozens of platforms—without ads, algorithms, or corporate interference. That’s the power of the Fediverse. You can expand your reach to millions of potential readers while maintaining full control over your content and audience relationships. WordPress.com’s newest ActivityPub features make joining this thriving network of independent creators simpler than ever. 

A smoother start with the new onboarding experience

Trying something new can feel overwhelming, so we’ve added a step-by-step guide that walks you through everything ActivityPub can do. When you turn it on, you’ll get a quick tour of the basics: what ActivityPub is, how it helps you connect your blog with the wider Fediverse, and where to find all your new settings. We’ll even show you the special editor blocks you can use to highlight your Fediverse profile right on your site.

Customize your Fediverse presence

When your blog appears on other Fediverse platforms like Mastodon, these new settings help shape how your content and identity are presented. Each platform might display things a little differently, but customizing these options helps your blog stand out and feel more welcoming to potential followers.

Here’s what you can personalize:

Avatar: This is the small image that shows up next to your posts and comments across the Fediverse. By default, it’s your WordPress.com Site Icon. Want to change it? Just update your Site Icon in your General Settings—a clear, recognizable image works best.Header Image: The header is a big banner that sits at the top of your blog’s profile on Fediverse platforms. You can upload something that reflects your style or what your blog is about, or leave it blank if you prefer.Description: This is your blog’s short bio. By default, it uses your WordPress tagline, but you can write something custom to introduce your blog to new followers.Extra Fields: Add links to your homepage, social profiles, pronouns, or anything else you want people to see. You can edit, add, or organize these fields however you like.See and manage your followers

Curious about who’s following your blog from across the Fediverse? Now you can see a list of your followers, complete with profile details and the last time they interacted with your site. It’s a simple way to keep track of your growing audience.

Ready to try it out?

If you haven’t enabled ActivityPub yet, it’s easy to get started!

Just head to Tools → Marketing → Connections (or Hosting → Marketing → Connections in WP Admin) and activate the Fediverse feature. Once it’s on, you’ll find all the new settings under Settings > ActivityPub.

We can’t wait to see how you use these new features to connect with even more people across the Fediverse!

How to Fix a Hacked Website: A Step-by-Step Recovery Guide

How do you fix a hacked website? How can you tell if your website has been compromised? What can you do to prevent it from happening again in the future?

This guide will cover each of these questions in detail. So, if you are currently dealing with a website that’s been infiltrated by a hacker, you’ll know exactly what to do about it by the end of this article.

How websites get hacked

How do website hacks happen in the first place? Here are some of the most common ways ill-minded individuals gain access:

Poorly secured web hosting: For example, weak server configuration or a lack of separation between sites.Compromised login credentials: Typically through brute-force attacks, credentials leaked in another breach, or those obtained via phishing.Outdated WordPress core, plugins, or themes: They often contain known security flaws that hackers can easily exploit.Extensions from untrustworthy sources: Nulled or unofficial plugins or themes frequently contain hidden malware and backdoors.Injection attacks: A poorly secured site may allow hackers to execute scripts on your site to access your database, inject malicious code, or breach it.Why hackers target websites

You might think your site is safe because it’s small and unknown, but this is a common misconception.

Most website hacks aren’t personal or planned, but simply a matter of opportunity. Automated bots scan the internet for potential targets, and if your site is vulnerable, it may become subject to an attack.

Why do hackers do this? For various reasons:

Data theft: Hackers harvest emails, passwords, and customer info to resell or use in future attacks.Install malware: They use your site to infect your visitors’ devices with harmful software.Traffic redirection: Visitors are sent to shady, scammy, or fraudulent websites.Hijack server resources: Sometimes hackers secretly use your server’s processing power to mine cryptocurrency, send email spam, or carry out DDoS attacks.Phishing: Fake login or payment pages steal credentials from users.Ransom demands: Here, attackers lock you out of your site and ask for payment to get back in.Hacktivism: Some people disrupt services or deface websites to push a political or ideological message.Fun, practice, or testing: Hackers may just target you because they can, to improve their skills, or to test new attack methods in the wild.What happens when your site gets hacked?

Some attacks are obvious, like finding your homepage vandalized, your site filled with spam content, redirects to other websites, or pages you didn’t create. Others are more subtle:

Website unavailable: Your site shows a blank page or the “white screen of death.”Security warnings: Alerts from browsers, Google Search Console, or sites like Google Transparency Report, Norton Safe Web, or your hosting provider that indicate that your site is unsafe, contains malware, or has been blocked/suspended.Traffic changes: Unusual visitor patterns, like an influx from unexpected countries or a sudden drop in website traffic.Unknown admin users: Suspicious new user accounts in your dashboard or existing users whose privileges have been escalated.Strange files in your webspace: Files or scripts you don’t recognize, or server files containing unusual code.Suspicious activity: Login attempts, file edits, or plugin changes you didn’t make show up in your activity log.

In addition to these visible problems, a hacked website can have serious, long-term consequences for your business, site, and bottom line. It can result in a loss of revenue, traffic, and search rankings, as well as harm your brand reputation. Cleanup can be time and cost-intensive; you might run into legal issues, lose important data, and have to pay higher hosting and security fees in the future.

Overall, it’s a scenario best avoided, but what do you do if it’s too late for that?

Fixing a hacked website — Phase 1: Check site access

When dealing with a hacked website, the first step is to find out what level of access you still have to it.

1. See if you can log in

Try logging in to your WordPress admin dashboard. It’s usually located under yoursite.com/wp-admin.

If the login screen doesn’t appear or redirects elsewhere, skip ahead to downloading and cleaning up your website files first. Otherwise, try your normal username and password. Should that not work, try the password recovery.

In case neither of these steps is successful, you can access your database (e.g., via phpMyAdmin) and check the wp_users table to confirm your admin account still exists.

If it does, you can reset your password directly in the database or even create a new admin user to regain access. It’s also possible to reset your password using FTP and WP-CLI.

2. Switch your site to maintenance mode

Once you can access your backend, it’s best to make your site temporarily unavailable. This helps you protect your site visitors and reputation from further harm while you fix the hacked website. The best option for that is to put it into maintenance mode.

You can use a maintenance mode plugin or set up an HTML file for that. Some CDN providers also let you put up a maintenance mode screen, such as Cloudflare.

Phase 2: Secure the site

Next, it’s time to start regaining control of your site.

3. Talk to your hosting provider

Your host should be one of your first ports of call and also your strongest ally in case of a website hack. For example, at WordPress.com, you can trust our security features to the point that, should a site we host become compromised, we remove the hack for you. Just contact WordPress.com support, and we’ll help you right away.

Even if you host your site elsewhere, you should get in touch with your provider. On some types of hosting, such as shared hosting, the hack could have originated from another website on the same server. In that case, your site would likely just become compromised again, no matter what you do.

Speaking to your host will also let you know about any assistance they offer to fix your hacked website and if temporary account restrictions or suspensions are in place. They might also be able to give you an indication of when and how the hack happened via access and error logs.

4. Back up your site in its current state

Save a copy of your site — even if it’s compromised. It lets you preserve recent content, conserve evidence to analyze the source of the hack, and allows you to restore your site should something go wrong during recovery.

Make sure to back up both your site files and database. Use your hosting control panel, SFTP, or a backup plugin. Managed hosting providers like WordPress.com usually offer automatic backups. On our Business and Commerce plans, you can restore from backup with one click and also download site backups.

You can spin up your copied site in a local development environment, for example, using WordPress.com’s Studio, to analyze it later or perform your cleanup there.

5. Restore from a recent clean backup (if possible)

If you had the foresight to set up an automatic backup solution, restoring from a recent clean site copy is often the easiest way to fix your hacked website.

Make sure the backup predates the hack or suspicious activity. If possible, first load it on a staging site to run diagnostics before restoring.

Be aware that restoring doesn’t remove the original vulnerability. You’ll still need to investigate how the hack happened to prevent reinfection.

Phase 3: Lock it down

This phase is all about closing off common entry points into your site.

6. Go through your user accounts

Hackers who gain access to a website frequently create an admin user account for themselves. This gives them a quick way back into the site and is often easy to disguise.

Therefore, review all accounts in your WordPress User menu and/or database.

Look for unfamiliar usernames, especially with admin privileges and delete or downgrade them. Document any changes you make and do the same with other accounts associated with your site, like hosting, FTP, email, CDN, and third-party tool credentials.

7. Change all passwords

Next up, lock down the accounts you’ll keep by changing their passwords. On your site, you can reset passwords for all users and enforce strong passwords with plugins like Emergency Password Reset and Password Policy Manager.

Another step is to implement multi-factor authentication, so users have to confirm their login with a code sent to their email address or mobile phone. Again, do the same for other accounts associated with your site.

If you want to go a step further, reset your database username and password as well. Don’t forget to update wp-config.php to reflect the new values; otherwise, your site won’t work.

Lastly, replace the SALTs in wp-config.php. These are security keys used to encrypt login sessions and cookies, and look like this:

define( 'AUTH_KEY',     'put your unique phrase here' );define( 'SECURE_AUTH_KEY',  'put your unique phrase here' );define( 'LOGGED_IN_KEY', 'put your unique phrase here' );define( 'NONCE_KEY',    'put your unique phrase here' );define( 'AUTH_SALT',    'put your unique phrase here' );define( 'SECURE_AUTH_SALT', 'put your unique phrase here' );define( 'LOGGED_IN_SALT',   'put your unique phrase here' );define( 'NONCE_SALT',   'put your unique phrase here' );

Visit the official SALTs generator and copy a new set over the existing ones in your file, then save and re-upload it. This will force all users (including hackers) to be logged out immediately. The aforementioned Emergency Password Reset plugin can also do this for you.

8. Update all software

Your website hack might have happened via outdated and vulnerable files. Besides that, hackers like to modify core files to make reinfection easier.

That’s why an important step to fix your website after it’s been hacked is to update all its software to the latest version. This means WordPress core and all plugins and themes.

If you can’t access the admin dashboard or the automatic update isn’t working, download the files from WordPress.org and install them manually via FTP.

Be sure to preserve the wp-content folder and don’t overwrite wp-config.php. In addition, remove any unused, outdated, or unsupported plugins and themes, and consider updating server software like Apache or your PHP version.

By the way, WordPress.com keeps your WordPress version updated automatically, and you can activate the same for plugins and themes.

Phase 4: Remove hidden threats

This phase is about digging deeper to find hidden code snippets and backdoors. These are entry points hackers like to leave behind so they can regain access to your site even after you cleaned it up.

9. Check your website files

Hackers can include malicious code in many parts of your website. One common hiding place is the wp-content folder. It doesn’t get replaced during updates, so files added to it stay safe unless removed manually. Check it for hidden PHP files, especially in the uploads folder, child themes, inactive themes, and plugins. If you can’t access your site at all, try renaming folders, like the plugins directory.

In addition, examine your current theme’s files for unfamiliar code. Download a clean copy of your theme from the WordPress directory or your vendor (make sure to get the same version as your site) and use a tool like Diffchecker to see if there are any differences between files.

You can also do file comparisons via SSH.

Malicious code frequently appears at the top or bottom of files, often encoded or obfuscated using functions like:

base64_decode()eval()gzinflate()preg_replace()str_rot13()

You can use tools like Base64 Decode, UnPHP, or UnPacker to decode it.

Especially pay attention to files such as:

functions.phpheader.phpfooter.phpindex.phpwp-config.phpwp-load.php

In addition, look for oddly named or slightly misspelled files like wp-logon.php or wp-config1.php.

Additionally, open the .htaccess file and look for suspicious code and redirect rules that don’t belong there. Besides that, check for additional .htaccess files in wp-content and its subdirectories. You may also want to check your file permissions.

If this seems to be outside of your skill set, get professional help or use a security plugin or malware scanner like Jetpack, WordFence, MalCare, or Sucuri Security.

10. Clean up the database

The WordPress database is another place you need to examine after a website hack. Cleaning it up manually is a painstaking process, especially if your database is very large. Therefore, the easiest way is usually to scan it with a plugin like those mentioned above.

You can also access your database with the aforementioned phpMyAdmin or a similar tool and look for problems by hand, such as:

Hidden spam content in the wp_posts table.Keywords like eval, base64, gzinflate, preg_replace, or assert.Common spam terms like “gambling.”

Be sure to always back up your database before making any manual edits. If unsure, export it and compare the database to a clean version from a backup.

Phase 5: Recover and relaunch

After fixing your hacked website, it’s time to bring it back online.

11. Reupload clean site files

Upload your files and database from your local install or staging site (skip this part if you did the repairs on your live site).

Test your site’s main features: navigation, forms, checkout, login, etc. See if any content, including images, is missing. Visit your website in an incognito window to confirm it displays correctly for visitors.

Disable maintenance mode if it’s still active. Clear your site cache to ensure no cached malware or outdated pages are loading.

To be completely on the safe side, rescan your live site files and database tables for remaining threats. Use a malware scanner both from inside WordPress and outside.

12. Deal with the aftermath

Once the immediate problem is resolved, you need to deal with its fallout:

Communicate with your customers: If the hack affected your users through downtime, strange behavior, or a potential data breach, be transparent. Let them know what happened, what you’ve done to fix it, and what steps you’re taking to prevent the problem from occurring again.Submit requests to remove your website from Google’s blocklist: If Google Search Console flagged your site as dangerous, request a review via Security & Manual Actions → Security issues after the cleanup is complete. This helps restore search visibility and remove browser warnings. Do the same for other blocklists you may have appeared on.Restore any lost content from backups: If pages, images, or posts were damaged or deleted, recover them using your most recent clean backup. Double-check everything before re-publishing to ensure you don’t reintroduce malicious code.Analyze the hack: Document what happened, how your site was compromised, what actions you took, and what you plan to do going forward to strengthen future security.Keep monitoring: Set up ongoing monitoring tools, such as an activity log to track user logins, site changes, and system events. Monitor changes to files, regularly scan your site for malware, and keep an eye out for any of the signs of a website hack we discussed earlier.Prevent website hacks before you have to fix them

The final step is to make sure you never have to be in this situation again. First, follow security best practices:

Use strong passwords, change them regularly.Implement multi-factor authentication for all relevant accounts.Set up user roles with the minimum necessary privileges.

In addition, take steps to harden your website security:

Use SSL encryption.Keep WordPress Core, plugins, and themes updated.Put a backup solution in place.Set up automatic malware scans, brute force, and DDoS protection.Add a firewall to your site.

On WordPress.com, all of the above is included with every plan, together with additional security features. So, if you want a simplified and effective way to prevent being hacked, move your site to WordPress.com.

Move your site to WordPress.com

How to Add Schema Markup to WordPress Sites (And Why You Should)

Schema markup gives you a way to enhance how your website and its content are displayed in the search engine results pages (SERPS).

Examples of these enhancements include star ratings, event info, product pricing, and FAQs. When implemented correctly, they’re an effective way to make your content stand out in the SERPs and increase click-through rates. 

Adding schema markup to your WordPress site also helps search engines to understand your content better, increasing the chances of it being displayed where your target audience will find it.

By the end of this guide, you’ll better understand schema markup for WordPress and how to add it to your site.

What is schema markup?

Schema markup, sometimes called structured data, is code you add to your website. Its purpose is to help search engines understand your content better, such as its meaning and context. 

Similar to categories and tags in WordPress, schema markup can be used to add labels to your content that explain what each piece of content is about and its format. Some examples of these labels include products, recipes, reviews, and events.

Adding schema markup is also a way to enable rich results or rich snippets for your site and its content. 

You’ve probably seen rich results in the SERPs before. They include extra details about a page in the results, such as business information, star and average ratings, product details, FAQ, recipe information, and more. 

This additional information makes rich results-enabled content stand out and helps search engine users decide which result to click on.

Common Types of Schema Markup

Here are some widely used schema markup types and how they can generate rich results:

Review and Rating: Can display star rating and number of reviews in the SERPs.Articles: Includes headline, author, publication date, and a thumbnail image. Product: Price, availability, and rating can be displayed. FAQ: Collapsible questions and answers are displayed.Recipe: Cooking time, ingredients, and ratings can be displayed.Local Business: Name, address, phone, and business hours can be included.Event: The event’s date, location, and ticket availability can be displayed. 

Not everything that can be displayed in a rich result is displayed. Many factors control how and when they’re displayed, such as site settings, the user’s search term, and the search engine algorithm. 

However, adding schema markup is essential for enabling rich results for your site. 

While there are hundreds of types of schema, you must use the types supported by Google if you want your content to feature rich snippets when displayed in their search results. 

Benefits of adding schema markup to your WordPress site

One of the main benefits of adding schema markup to your WordPress site is that it can increase your content’s click-through rate when it’s displayed in the SERPS. 

For example, one study found that 58% of search engine users clicked on results enhanced with rich results while only 41% of users clicked on regular (non-rich) results.

This makes sense as rich results not only stand out but they also provide search engine users with more information when deciding which result to click on. 

For example, if a user is searching for a recipe, seeing the cooking time and user rating displayed in the SERPs demonstrates that the content is informative and whether or not it meets their requirements. 

The other main benefit is that search engines can use schema markup to better understand your content. This helps the search engines to know when to display your content in their results, sending more relevant traffic to your site. 

A further benefit of using schema markup is that it increases the chances of your content being displayed in more places in the SERPs. This includes the People Also Ask boxes and recipe carousels.

Key benefits of adding schema markup:

To summarise, the main benefits you could potentially unlock by adding schema markup to your WordPress site include: 

Increased visibility in the SERPs by enabling rich results.Improved click-through rates in the SERPs by making your content stand out.Increased traffic to your site without needing to improve your ranking. Help search engines understand your content and know where to display it.Make your content eligible for display in People Also Ask boxes and elsewhere on the results pages.

As we’re about to cover, adding schema markup to WordPress is relatively straightforward, making it something all site owners should consider. 

How to add schema markup to WordPress

You can add schema markup to your site manually, but this is another area where WordPress plugins can be used to simplify the task. 

Here are some recommended plugins as well as a guide to adding structured data to WordPress using one of the options. 

Schema markup WordPress plugins

There are lots of plugins that can add schema markup and structured data to WordPress. Some of these plugins include other useful functionality, such as search engine optimization features, while others are focused solely on implementing schema markup. 

Not all schema markup plugins for WordPress cover all the available schema types, so you must choose a plugin that supports the ones you need. For example, if you’re creating a food blog with WordPress, you could select a recipe-specific plugin that adds the relevant schema markup, such as WP Recipe Maker.

Just ensure that any plugin you’re considering supports the schema markup you want to use.

Rank Math SEO

Rank Math SEO is a popular and user-friendly option for adding schema markup to WordPress.

The free version of the plugin lets you add 13 schema types, making it suitable for most projects. The paid version supports six more types. 

Thanks to its broad range of SEO features, Rank Math SEO can also be used as your WordPress SEO plugin. 

The paid version has more schema-related features, including adding multiple schema types to a single page. This would let you add the Product Schema and Review Schema to an eCommerce product page to display pricing and rating information in the rich results.  

The paid version also includes a schema generator to help you choose the correct schema for each piece of content and a tool for importing schema markup from other websites so you can see how others are using structured data. However, the free version of Rank Math SEO can add a good range of schema markup to WordPress. 

Rank Math SEO is an excellent option if you’re looking for a powerful SEO and schema plugin that’s easy to use.

Yoast SEO

Like Rank Manth SEO, Yoast SEO is an SEO plugin for WordPress that can add schema markup to your site. It’s also one of the most popular plugins on WordPress.com. 

Like the other options covered here, you can set a default schema markup type for your site so you don’t have to select one each time you publish a new piece of content. This can be overridden at the post and page level if needed. 

Yoast SEO integrates with other schema markup plugins, including WP Recipe Maker, giving you more options for adding structured data to your site while maintaining access to the rest of the plugin’s features. 

Choose Yoast SEO if you want to install the most widely used SEO plugin for WordPress and add schema markup with the same plugin.

Schema & Structured Data for WP & AMP

Schema & Structured Data for WP & AMP was built specifically for adding schema markup to WordPress rather than also being an SEO plugin. The free version supports an impressive 46 schema types.

The developers claim that users can request additional schema types, and they will add them to the plugin. This makes Schema & Structured Data for WP & AMP ideal for anyone creating content types not covered by other plugins. 

Schema & Structured Data for WP & AMP isn’t quite as user-friendly as the other plugins covered here. However, I’ve included it as it supports many schema types, making it a good option if it covers the schema types you want to use that other plugins don’t. It’s also a suitable option if you’re already using an SEO plugin you’re happy with and are looking for a schema markup plugin to use alongside it.

Using Rank Math SEO to add schema markup to WordPress 

Here’s a walkthrough of using the Rank Math SEO plugin to demonstrate how you can add schema markup to WordPress.

You’ll need the Business plan or above if WordPress.com hosts your site and you want to install this plugin. 

Rank Math SEO is a good option as it has a user-friendly setup wizard to help you optimize your site for search engines and add structured data to WordPress. 

To get started, go to Plugins → Add New in WP Admin.

Next, search for “Rank Math SEO” and click the “Install Now” and then Activate buttons. 

The optional setup wizard will launch after activating the plugin. The wizard walks you through setting up the SEO features of the plugin and gives you the option of importing the settings from an SEO plugin you might already be using on your site.

To configure the schema markup capabilities of the plugin, go to Rank Math SEO → Titles & Meta from the WP Admin sidebar menu.

Then, click on Posts under Post Types on the Rank Math SEO panel. 

Now you can set the default schema markup type for all posts. Choose Article from the Schema Type dropdown menu if you’re primarily creating blog posts.

You can override the default settings from the WordPress editor when you’re creating a piece of content that will use a different schema markup type.

To do so, click on Schema Generator from the Rank Math panel in the WordPress editor.

One instance where this would be necessary is if you’re publishing a recipe where the default schema type for the site was set to Article. 

You can then add the additional information for the schema type you’ve selected. 

For example, if you selected the recipe type, you can add the preparation time, cooking time, and other details that will be displayed in the rich results in the SERPs.

Click the “Save for this Post” button when you’ve finished.

You can then repeat the above to add structured data to any new and existing content on your site. 

The Titles & Meta section of the Rank Math SEO documentation has the full details on adding structured data to WordPress with this plugin. 

Testing your schema markup

Once you’ve added the schema markup via your choice for plugin, rich results should be displayed for your content in search engines. 

However, it’s recommended that you test your site to ensure that everything is working as expected. While the best schema markup plugins for WordPress do an effective job of adding structured data to your site, checking and testing can highlight any issues, such as missing required fields.

There are a few tools you can use to test your site’s schema markup, including:

Schema.org Validator : Enter the URL of a page to find out if the structured data has been added correctly. Any errors will be highlighted to help you resolve them.  Google Rich Results Test: Validate your schema markup to check which rich results can be generated by its structured data. 

Correctly adding schema markup to your site is no guarantee that search engines like Google will display rich results for your content. 

However, by using a reliable plugin or correctly adding the structured data manually, you will have done all you can to activate rich results for your site. 

Ready to add schema markup to WordPress?

Adding schema markup to WordPress makes it possible for your site to start benefiting from rich results, such as improved click-through rates from the SERPs and more traffic.

The easiest and most convenient way to add structured data to WordPress is to use a schema markup plugin. 

Before you choose a plugin, ensure it supports the type of schema markup you’d like to use on your site. 

Plugins like Rank Math SEO and Yoast SEO are easy to use and include many useful features. However, they don’t cover all the schema markup types, so be sure to choose the right plugin for your goals. 

If WordPress.com hosts your site or you’d like it to, you can install plugins on the Business and Commerce plans and benefit from fast load times, enhanced security, and many other valuable features. 

Move your site to WordPress.com

Introducing Selective Push and Pull in WordPress Studio

Picture this: You’re working on a client’s website, fine-tuning a new theme you’ve been developing for weeks in WordPress Studio. The design is perfect in your local environment, and you’re ready to push it live using Studio’s sync feature.

But there’s a catch. You only want to deploy the theme. You don’t want to overwrite the plugins already running smoothly in production, and you definitely don’t want your local test content affecting the live database.

If that sounds familiar, you’re not alone. Until now, Studio’s sync feature was all or nothing; you could easily push or pull entire sites between your local environment and WordPress.com or Pressable, but there was no way to sync just part of a site, like a single theme.

That changes today with the release of Selective Sync in WordPress Studio 1.5.5.

Adding granular control

Selective Sync gives you precise control over what gets transferred between WordPress Studio and any connected production or staging sites. You can now choose exactly what to sync, whether it’s a single theme, a specific plugin, only the database, or the entire wp-content folder. 

The reality of WordPress development is that production sites are constantly changing. While you’re working on new features locally, your live site continues to serve visitors, process orders, and collect user data. A full sync in either direction could result in lost changes or disruptions for active users.

Here are a few scenarios where Selective Sync really shines:

Plugin development: When building a new plugin feature, you often work with test data that shouldn’t make its way into production. Selective Sync lets you push only the plugin files, keeping your local database separate. Your live site’s data stays intact, and your new feature goes live without disruption.Theme updates: Theme developers face similar challenges. You might spend days fine-tuning layouts and testing block patterns with sample content. When it’s time to deploy, you want to push only the theme files, not placeholder posts or demo images. Selective Sync makes that easy.Privacy and scale: If you’re working with a WooCommerce store that has hundreds of products and thousands of customers, cloning the full site locally can be risky or unnecessary. Selective Sync allows you to pull down only the code you need to work on, such as the theme or a specific plugin, without syncing sensitive customer data to your local environment.Focused environments: Some developers prefer to separate concerns by using different local Studio sites for different types of work. You might maintain one environment for plugin development and another for theme design. With Selective Sync, each can connect to the same production site and push changes independently, without affecting unrelated parts of the project.

Since full-site sync launched in January 2025, developers, designers, and site builders have asked for more flexibility. Selective Sync was built in direct response, making it easier to adapt Studio to the needs of real-world projects.

How Selective Sync works

If you’re new to WordPress Studio, this is a great time to explore what the tool offers beyond its new syncing features. Studio is free, open source, and built to make building WordPress plugins, themes, and full sites more efficient and enjoyable.

Download WordPress Studio for free

Already using Studio? Selective Sync is available now. Just update to the latest version when prompted in the app, then follow the steps below to get started.

TIP: Keep in mind that while WordPress Studio is free to use, the sync feature requires a WordPress.com site on a Business or Commerce plan, or a Pressable site with the Jetpack Security plugin active. For more information, check the official documentation.

Connect a live site

The first step is to connect a local Studio site to an existing production or staging site on WordPress.com or Pressable. You can also create a new site on WordPress.com from the Studio interface:

Select the site you wish to connect from the Studio sidebar.Open the Sync tab.Log in to WordPress.com if you haven’t already.Click the “Connect site” button to see available sites. Select the site you want to connect to and confirm by clicking the Connect button.(Optional) Create a new site by clicking “Create a new WordPress.com site.”Pull content into Studio

Once your live site is connected in Studio, you can either pull content from the connected site into Studio or push content from your local environment back to the connected site.

Let’s start with pulling content:

Open the Sync tab for the site you want to synchronize (if you’re not already there).Locate the connected WordPress.com or Pressable site you want to pull content from.Click Pull to open the sync modal.Choose to sync “All files and folders” or “Specific files and folders,” then use the checkboxes to select what you want to include.Decide whether to include the Database in the sync.Click Pull to confirm and begin syncing.

The process may take some time, as a full backup of your live site will be created. Once complete, you’ll be ready to start working locally in Studio.

Push content to a live site

Pushing content from Studio to a connected site follows a similar process to pulling, but with more control. You can choose individual plugins, themes, and other files to sync.

Open the Sync tab for the site you want to synchronize (if you’re not already there).Locate the connected WordPress.com or Pressable site you want to pull content from.Click Push to open the sync modal.Choose to sync “All files and folders” or “Specific files and folders,” then use the checkboxes to select what you want to include. You can expand the plugins, themes, and uploads folders to select individual items.Decide whether to include the Database in the sync.Click Push to confirm and begin syncing.

As with pulling content, the process may take some time. A full backup of the connected site will be created before your local changes are applied. Once the sync is complete, you’ll receive an email confirmation with a summary of what was transferred.

Pro tips for using Selective Sync

Selective Sync is built to streamline development, but there are a few key details to understand before getting started.

When pushing from Studio to a production or staging site, development-only files such as .git directories and node_modules folders are automatically excluded. These files remain local, keeping your live site clean and efficient.

As noted earlier, when pulling content into Studio, you can sync entire folders, such as all themes or all plugins, rather than selecting individual items. In contrast, when pushing to a live site, you can choose specific themes and plugins. We found this setup reflects the needs of most workflows, but we’re always listening to feedback for future enhancements.

While Selective Sync covers many common scenarios, some projects may still require a more advanced deployment workflow. For those cases, GitHub Deployments on WordPress.com offers more control and works well alongside Studio for complex setups.

What’s next for Studio?

Selective Sync is part of a broader effort to support the variety of workflows developers use every day. That work continues, especially within WordPress Playground, the foundation that powers Studio. 

Upcoming enhancements include:

XDebug support: One of the most requested additions, this will bring professional debugging capabilities to WordPress Studio. Follow along on GitHub.Performance improvements: Upcoming enhancements in WordPress Playground will make Studio even faster and more responsive.

Community feedback drives these priorities. The WordPress Studio GitHub repository is the central place to suggest features, report bugs, and contribute directly to the project. Every issue, comment, and pull request helps shape the future of Studio.

If this is your first time exploring WordPress Studio, or if it has been a while since you last tried it, now is a great time to take another look. Alongside Selective Sync, dozens of improvements have rolled out this year, with more still to come.

Try WordPress Studio now

7 Popular WordPress Backup Plugins to Keep Your Site Safe

It’s important to back up your website before a crisis occurs. Backups come in many forms, from full site downloads to smaller incremental backups. Your backup needs will depend on what kind of site you own and how frequently your data changes.

Below, we’ll dive into some popular plugin options and discuss their ideal use cases.

Editor’s note: WordPress.com websites on the Business plan and above include built-in backups via Jetpack VaultPress Backup at no extra charge.

If you are a WordPress.com user and you’re interested in other third-party plugins, you can install them from the plugin library. All plugins listed in this article are compatible with WordPress.com, but you may find backup plugins that are not compatible; see all incompatible plugins here.

What exactly is a backup plugin?

Backup plugins are additional software you can install through the WordPress Plugin library to create backup copies of your site template and data. If something goes wrong with your website, you can restore it using these backup files.

Backup plugins are critical if you “break” your site, which can happen when installing a new plugin, updating WordPress core software, or changing your site template or styling. If things go awry, a backup makes it easy to revert your site to an earlier (working) version.

Backups are also useful when migrating your WordPress site from one hosting provider to another — a full site backup transfers all of your site code and content in one go.

10 WordPress backup plugin options for all use cases

Once you’ve answered the questions above, you can start to evaluate different plugin options. Below are our top plugin picks with recommended use cases.

1. For easy, real-time backups: Jetpack VaultPress

Jetpack VaultPress offers real-time backups at an unbeatable price. VaultPress is a great choice for sites that need regular, reliable updates, like e-commerce stores, online businesses, news organizations, and online communities. It’s included with all WordPress.com websites on the Business plan and above; if you’re a WordPress.com user, you can learn more about it here.

Price: Included with WordPress.com on the Business plan and above at no extra charge; $59.40 for the first year for other hosts

User friendliness: There is no configuration required for VaultPress, and you can restore previous versions of your website in the WordPress admin with just one click.

Backup configuration: VaultPress will automatically create a full site backup (including WooCommerce databases) upon installation, and continues to create real-time, incremental backups every time you edit your site. Backups are stored on a secure network of servers around the globe.

Performance: The incremental backup system means that Jetpack doesn’t require many server resources, and a distributed network of servers ensures backups are always available. For multi-site installations, each website needs its own Jetpack installation.

User review: The ability to restore to automatically-created restore points is invaluable. Every time you hit the save or publish button, a restore point is created. This makes it easy to restore to a point, say, just before the last page you updated. This is much more flexible than just restoring a previous full backup. Highly recommended! –@bobfalk 

Install Jetpack VaultPress (Included With WordPress.com)2. For free, local backups: Backup Migration

Small sites looking for affordable, easy-to-use backups created daily, weekly, or monthly will love Backup Migration’s free tool and competitive annual pricing for their paid personal and commercial plugin, Backup Bliss.

Price: Free, up to 4GB of storage; Backup Bliss less than $40 a year (non-commercial sites) or $60/year (commercial sites)

User friendliness: Backup Migration does a good job of walking users through setup with accessible language that avoids technical lingo. It also offers one-click restore.

Backup configuration: You can set your backup frequency to hourly, daily, or weekly, and choose which parts of your site to back up, with advanced rules and triggers on premium plans. Backup Migration’s free tool focuses on local backups and does not offer cloud backups, though they recently started offering cloud backups on paid plans.

Performance: Depending on whether you choose to back up your full site or only a partial backup, server performance may be reduced during the backup period.

User review: I gave this a go and it worked flawlessly and restored my site to the exact condition it was prior. While I can do server backups it’s good to have one of your entire WP site just in case. In my case, I changed servers, so this helped. –@uniqf0x

Install Backup Migration3. For fast-scaling websites: UpdraftPlus

UpdraftPlus offers a solid, free backup plan that allows users to create backups as frequently as every two hours. We like that Updraft offers incremental backups to paid users, which is a great upgrade as your site grows.

Price: Free; $70/year for Personal (up to two sites) or $95/year for Business (up to 10 sites)

User friendliness: Updraft Plus tries to compensate for a busy and complicated user interface with tooltips that point non-technical users to the right buttons and settings. Logging into cloud-based storage systems with Updraft and finalizing backup locations can be unintuitive, but the restore process is fairly simple and only requires a few clicks.

Backup configuration: Users on every level, including the free tier, can automatically back up their site as frequently as every two hours. Paid plans also enable you to utilize incremental backups on a separate schedule and back up database content. While free users can only backup to one location, they can save to popular services like Google Drive, Dropbox, and Amazon S3. Paid users have additional location options, like Microsoft OneDrive and Google Cloud.

Performance: Full backups, the only option on the free plan, can strain server resources and slow down your site. Paid plans benefit from less intensive incremental backups, which only back up the changed sections, leaving more resources available for site traffic. Encryption and premium support are only available on paid plans. Multi-sites are also supported on the paid plans.

User review: I maintain other people’s websites for a living, and when I get a new client, I always install Updraft if it’s not already there. It is, far and away, the most no-nonsense, reliable, powerful backup solution for a WordPress site that is out there. A lot of hosting services provide backups, but almost none of them will bring a site back as quickly as you can with a click or two in Updraft… – @cmkl

Install Updraft Plus4. For a one-time site migration: All-in-One WP Migration

All-in-One is our favorite tool for full-site migrations from one web host to another. It’s also an option for ongoing backups.

Price: Free up to 128MB; $69+ for larger sites and cloud extensions

User friendliness: We love All-In-One for its one-click export and import options, which make it easy for any user to download and move their site from one host to another. Just be sure to download the plugin on both sites.

Backup configuration: All-In-One creates full site backups for site migration. By default, backups are stored locally to your computer or hard drive, but you can purchase extensions to send the backups to popular cloud storage services like Dropbox, GDrive, and Amazon S3 (for $99).

Performance: Because All-In-One creates a full site backup for local download, it may temporarily slow down your website. Premium extensions come with dedicated support.

User review: I haven’t found anything better for backing up your entire WordPress yet. – @milan574

Install All-in-One WP Migration5. For multi-site backups: ManageWP Backups

If you manage multiple websites, you may benefit from ManageWP’s separate multi-site dashboard, where you can review and restore all of your sites from one place. However, ManageWP only runs backups at most every hour, which can lead to data loss on extremely active sites.

Price: ManageWP pricing is based on the number of websites you manage. Backup add-ons are $2/month for each website and $75/month for 100 bundled websites.

User friendliness: ManageWP offers a separate dashboard on its website for multi-site management.

Backup configuration: ManageWP allows individual site backups and backups for a whole multi-site network. It offers hourly, incremental backups stored in US/EU-approved cloud storage or locally (for paid plans only).

Performance: ManageWP’s incremental backups reduce server load because less data needs to be saved on each update. Additionally, ManageWP claims that 95% of the backups are done on their servers to reduce server load. ManageWP backups are automatically encrypted. 

User review: We use ManageWP as a simple dashboard to oversee all our companies websites. Currently it is only being used by our web development department as an easy interface to login to our websites (as it bypasses 2FA requirements), update our websites plugins & themes, and watch or any issues on our sites. –Darian Chaffart

Install ManageWP6. For staging backups: WPVivid Backup and Migration

If you want to use your existing website while working on a new version of the site behind the scenes, you’ll need to use a staging website. Like a live website, it’s important to create backups for staging sites to avoid any data loss. WPVivid is a great tool for managing staging site backups.

Price: Free; $49+/year

User friendliness: WPVivid has an easy-to-use staging environment built into your WordPress dashboard, making it easy to back up and migrate staging sites. However, if you want to push your staging site live, you’ll need to upgrade to the paid version.

Backup configuration: The free plan includes monthly scheduled backups saved to popular cloud services, while the paid version offers incremental backups and additional cloud options. If you are actively working on your staging site and making frequent updates, you may want to opt for the more robust incremental updates. WPVivid also allows you to make multiple cloud-based backups on the paid plan. 

Performance: Because WPVivid backups are stored on your server, this can impact server speed during your backup period. Encryption is available on paid plans, but must be configured in your settings.

User review: I really appreciate that, when my website homepage turned up inexplicably broken today, the restore process — including the instructions (since I’d never had to do a WPVivid restore before) … simply worked perfectly. – @jrgeek

Install WPVivid Backup and Migration7. For tried-and-true results: Solid Backups (formerly Backup Buddy)

Solid Backups is one of the oldest backup plugins still in use today and maintains a solid reputation. It is one of the most expensive options on this list, but you are paying for a reliable and established tool with a robust feature set.

Price: $99+/year

User friendliness: Solid Backups is feature-rich, which may be overwhelming for first-time users. If offers good walkthroughs and documentation on both setup and restore processes, but there is no one-click option for restores — you have to run a separate script called ImportBuddy to retrieve a backup.

Backup configuration: Solid Backups is highly customizable in terms of backup storage frequency and backup location. In addition to other popular storage options, it offers a proprietary storage option called Stash Live. Incremental backups are also available.

Performance: Thanks to its incremental backup feature, Solid Backups is less resource-intensive than some other options after the initial full-site backup. All backups are encrypted with SSL and password encryption.

User review: When trying to restore a client’s website, I learned that SolidWP’s legacy backup product, Backup Buddy, has been replaced by a more reliable one. As a non-technical, 14-year subscriber to the original product, that caused tremendous complications. (OK, so I was panicked.) The committed customer service techs held my hand with step-by-step instructions in personalized videos and helped me accomplish the mission within about three days. – William Alexander

Install Solid BackupsHow often should I back up my site?

You should run backups whenever you change your website’s design or content. If you have a backend customer database or e-commerce store, that information should also be backed up.

Some websites, like informational websites for small businesses, rarely change and don’t need frequent backups. Sites with regular content additions, like blogs, need backups when new content is added.

Busy e-commerce sites and community websites can benefit from automated, real-time backups to ensure every order and comment is accounted for.

Do I need a backup plugin if my hosting provider includes 30-day backups? 

A common rule of thumb is the 3-2-1 rule: three copies of your data stored in two different storage locations (like a local computer and a hard drive) and one “offsite” copy at another physical location or on the cloud. Your hosting provider counts as one of your three copies, but we highly recommend a dedicated backup tool for your website.

Considerations when choosing a backup plugin

There are a variety of backup plugins available, ranging from free, basic plugins to robust subscription plans. There is no one-size-fits-all approach to backup plugins, but you should consider:

User friendlinessBackup configurationPerformance

The number of its active users and its last update date are good indicators of whether the plugin is reliable and being maintained.

User friendliness

Investigate how easy it will be to use your backups when you need them. Some backup plugins work within the WordPress interface, while others require a separate platform. While flexibility benefits advanced users, it can create unnecessary confusion for everyday users.

Key considerations include:

Setup process: Do you need to configure your backup schedule or storage locations before you can start backing up your website?Restore processes: Some plugins have one-click options while others use wizards that walk you through more complex restore processes.Support: Check when the plugin was last updated and whether their team has an active and helpful support option available for users.Backup configuration

There are different types of backups and storage locations available. Not every site needs complex backup configurations, so consider what factors are necessary for your site.

Things to look for:

Frequency: More frequent backups are useful when your site changes frequently, but they can also slow your site down and require a lot of file storage.Automation: Some backups happen automatically, while others must be manually started. Manual tools are generally cheaper and may be sufficient for sites that don’t have frequent updates.Storage locations: Consider storing multiple copies of your data in different locations, such as locally on your computer, on an external hard drive, or in the cloud.Backup types: Consider what data gets updated regularly. Full-site backups take longer and require more storage. Some plugins solve this problem by allowing you to manually select the content to back up, or use “incremental” backups that only save the changed component.Backup content: What site content is included in your backup? If you have backend databases, ensure your plugin supports backups of that data.Performance

Backups can impact server capacity and site speed. If your backups are stored directly on your server and you create frequent backups, this could take up a significant amount of bandwidth and slow down your website.

Other things to be aware of include:

Compatibility: Some plugins are optimized for specific hosting providers, or are incompatible with a host because they offer identical functionality to built-in tools. If you have multiple sites to back up, look for a plugin that supports multisite backups.Security: Does your site store sensitive data, like customer information? If so, you want to ensure your backups are encrypted. You can also check WordFence to evaluate your plugin for any vulnerabilities.Get JetPack VaultPress with WordPress

If you’re interested in getting real-time site updates with Jetpack VaultPress, consider hosting your website with WordPress.com. Since WordPress’ parent brand Automattic also owns Jetpack, many Jetpack security features — like spam protection, site activity logs, and automatic updates — are included on all WordPress plans (including the free ones). VaultPress and one-click restores are included on the Business plan and above. 

At just $25/month, WordPress Business plans offer exceptional bundled value with built-in backup features and more. Plus, you don’t have to download or install anything additional — Jetpack plugins are pre-integrated in our software.

The best backup strategy starts with the right host

If you’re ready for top-of-the-line backup features, you can get started building (and backing up) your website today with WordPress.com.

Move your site to WordPress.comBuild your site with WordPress.com

How to Back Up Your WordPress Site So You Can Rest Easy

Keeping your WordPress site backed up is essential. Imagine how you’d feel if your website was gone one day and there was no way to get it back.

While there are many ways to back up your WordPress site, choosing the right one can be difficult. Each option has its own features and user experience. 

This guide covers the important features to look for in a backup tool. It also looks at some of the best backup tools available and includes a quick walkthrough of how to back up a WordPress site. 

What are WordPress backups?

 A WordPress backup is a copy of your website’s files and database. The backup lets you restore the whole site if something goes wrong. There are two types of backups:

A full backup restores the entire site to the state it was in when the backup file was created.An incremental backup only restores new or recently modified items, such as updated pages, new plugin settings, or altered media files.

While the WordPress editor autosaves your posts and pages, giving you a way to restore earlier versions of your content, this isn’t the same as backing up an entire WordPress site, including its files and database.

A database backup includes your site’s content, such as all posts and pages, the site settings, user information, and comments.A file backup typically includes the themes, plugins, media uploads, and core WordPress files of your site.A partial backup only includes some files or parts of the database and its tables.Partial backups

If you want to restore the site’s content, without overwriting any changes you’ve made to the site’s files since the backup was created, you can make a partial backup.

For example, maybe you want to restore a deleted blog post, but you’ve changed your site’s theme since the post was deleted. Restoring just the database will restore the post (and other database contents) without affecting the site’s files.

Manual vs. automatic backups

Backups can be created manually or automatically, depending on the features of your backup tool.

Basic WordPress backup solutions often don’t back up your site in real time, necessitating a manual backup prior to changing your site. While a manual backup offers more control, the downsides include:

Not always knowing when to make a backupHaving to remember when you should make a backupRole-based restrictions on who can make the backup

Automatic backups happen on a regular schedule, such as once per day, or as changes are made to your site. Due to the importance of having a recent backup, it’s a good idea to choose a solution that automatically creates backups. 

Why WordPress backups are important

Reasons you might need to use a backup to restore your site include:

Hacking or malware: Although WordPress is a secure platform, a clean backup allows you to quickly recover your site if it gets hacked or infected.Server crashes or hosting failures: If your host loses data or has a server error, a backup can help you get your site online again quickly.Accidental data loss or deletion: We all make mistakes, and whether you’ve accidentally edited a blog post, deleted an image file, or changed a key setting, a recent backup lets you undo those changes.Plugin or theme conflicts: Installing or updating a plugin or theme may introduce errors to your site or cause a conflict. A backup enables you to return your site to how it was before the issue arose.WordPress software updates: New WordPress releases are thoroughly tested, but you might need to roll back to a previous version due to a conflict or introduction of a new feature you’re not ready for.

To mitigate against the above situations, backups must have been recently created, safely stored, and be easy to restore. 

Some websites need more robust backup solutions than others. For example, if you have a site that rarely changes, making a manual backup on a daily or weekly cadence should suffice. 

However, you’ll need a more feature-rich, automatic backup solution if you’re regularly making changes to your site, such as frequently publishing new blog posts, or you often receive comments or messages via your site’s forms. 

Those selling items or subscriptions through their WordPress site will also need robust backup solutions to prevent the loss of orders and other key data.

Additionally, if you have multiple users working on your site, there’s a higher chance of mistakes being made. This means you’ll need to create backups more frequently than once daily.

What to look for in a WordPress backup tool

Your main options as a WordPress site owner are using the backup service provided by your web host or a plugin.

The quality of the available plugins and options provided by hosts vary considerably. Some solutions are very robust, feature-rich, and comprehensive, while others are basic and challenging to use.

Some key points to consider when choosing a way to back up your WordPress site include:

Automation: Can backups be automatically created on a set schedule, such as daily, or in real-time whenever a change is made?Frequency: How often are automatic backups created, and can backups be created manually on demand?Breadth: Is your entire site backed up, including the files, database, and email provision? Restoration options: Can you restore part of the backup, such as the database or a specific post, or do you have to restore and overwrite your entire site each time?E-commerce-friendly: Is the solution compatible with online stores and does it give you the option of keeping order details while restoring other parts of your store?Storage: Are the backups stored separately from your website, such as on another server or in your cloud storage? Can you download the backups to your computer? Are multiple copies of the backup files created for redundancy, and how long are they available?Security features: Are the backups encrypted and stored securely?Ease of use: How easy is it to access and restore the backups? Is the interface user-friendly?. Use your host’s backup solution

Most web hosts provide a backup solution. However, the functionality of the system varies significantly between hosts. Some might have a powerful in-house tool, while others rely on the cPanel backup functionality.

If your host provides a backup solution, try it out and see how easy it is to restore your site. Check its features and how useful they’d be if there’s a problem. If your host’s backup solution isn’t good enough, you should be able to switch to a plugin.

Use a WordPress backup plugin

There are many backup plugins for WordPress. The best options automatically back up your site on a custom schedule or in real time. 

Make sure you closely check out the features and test any plugin you install to see if it works as expected, especially the free options. 

Top WordPress backup plugins

Here’s a quick overview of some popular free and paid plugins you can use to back up your WordPress site:

Jetpack VaultPress Backup

Jetpack VaultPress Backup is a paid service available as a stand-alone WordPress plugin or as part of the WordPress.com Business and Commerce hosting plans, at no extra cost. 

The service includes key backup-related features such as real-time backups, full and partial restoration, and an activity log that makes it easy to undo site changes. 

Jetpack VaultPress Backup has good support for WooCommerce, so you can safely restore your site to any past state while keeping all order and product data.

UpdraftPlus

UpdraftPlus is a very popular plugin available in free and paid options. 

The free version covers all the essentials, including automatically creating backups, saving them to cloud storage, and the ability to easily restore them. However, incremental backups, automatic backup creation before installing WordPress updates, and database encryption are paid features.

Using UpdraftPlus is straightforward, but like most other WordPress backup plugins, it lacks the useful Activity Log feature of Jetpack VaultPress Backup.

BackWPup

BackWPup is another popular plugin with free and paid versions. 

The free version lets you choose exactly what parts of your site to back up. Backups can be automatically created as frequently as every hour. Saving backups to a selection of cloud storage services is another free feature. 

However, restoring backups with the free version isn’t as user-friendly as UpdraftPlus and JetPack VaultPress Backup.

BlogVault WordPress Backup Plugin

The BlogVault WordPress Backup Plugin connects your site to the BlogVault backup service rather than integrating a backup tool into your WordPress dashboard. 

Once set up, all backup and restore actions take place in your account area on the BlogVault website. 

The free version allows you to create backups, but you can only restore them with the relatively expensive paid plans.

Which WordPress backup plugin should you choose?

Out of the above options, the free version of UpdraftPlus is an excellent choice. Frequent automatic backups are included, and you can restore them without upgrading to a paid plan. 

If you’d like a more robust backup solution and don’t mind paying for it, the ease of use and Activity Log feature of Jetpack VaultPress Backup make it an appealing option. 

Whichever one you choose, be sure to thoroughly test the backup and restore functionality now, rather than waiting until it’s needed.

How WordPress.com handles backups

If you host your site with WordPress.com and choose the Business or Commerce plan, you have access to real-time backups powered by Jetpack VaultPress Backup.

Once you’ve signed up for either the Business or Commerce plan, Jetpack VaultPress Backup automatically starts backing up your site in real time. Manually creating a backup at any time is possible, too. 

Backups are available for up to six months while you’re subscribed to an eligible plan. They’re also kept for 30 days after your subscription expires. 

Let’s walk through how to use Jetpack VaultPress Backup with WordPress.com hosting.

Accessing your backups

You can view your backups from your WordPress dashboard. 

Once logged in, go to Jetpack → VaultPress via the sidebar menu.

The last time a backup was created is shown on the Jetpack VaultPress Backup page.

Restoring a WordPress backup

You can restore a backup from your WordPress dashboard or download the file for safekeeping.

You can also view and restore the individual components of the backup, for example if you need to restore an image file that was accidentally deleted.

You can also use the staging site feature available on the Business and Commerce plans to handle more complicated restoration of a backup. 

This is handy if, for instance, you created many blog posts after your last backup, and don’t want to lose those blog posts. You can restore the backup to the staging site, then restore the specific content to the live site.

Although the above is an advanced aspect of Jetpack VaultPress Backup, you never know when you might need it.

Using the Jetpack Activity Log

The Jetpack Activity Log is another way to access your backups. The log displays a detailed list of activities on your site from the past 30 days.

You can undo a change or restore your site to a specific point in the log, if needed.

Jetpack also has a mobile app so you can easily access the Activity Log and restore backups on the go.

As you can see, backing up and restoring your WordPress site can be very straightforward, depending on the tool you choose. 

WordPress site backup best practices

To get the most out of your WordPress site backups, consider the following:

Frequency: Set a frequency that covers the important changes to your site, such as form submissions, content publication, and customer orders. Even better, opt for real-time backups.Storage: Make sure the backups are securely stored and not on the same server as your website. Retention: Ensure enough backups are retained for long enough that you can recover a specific version of your site, rather than only being able to restore to when it was last backed up.Test restoring backups: Test your backups occasionally to ensure they are easy to restore when needed. 

If you follow the above advice, you’ll never have to lose sleep over whether or not your WordPress site is backed up sufficiently.

Is your WordPress site backed up?

You don’t want to wait until you need a backup to find out whether or not your site is backed up. 

If your site is being backed up, make sure everything is functioning as expected and that you can successfully restore a backup. If you’re not backing up your site, now is the time to choose a solution.

If you don’t yet have a website, WordPress.com’s managed hosting makes it easy to start one. Depending on your chosen plan, you get access to feature-rich backups, premium themes, and a fast, secure hosting environment. Ready to bring your site home? Start your site migration to WordPress.com here.

Web Hosting vs. Website Builder: A Beginner Guide

If you’re thinking about building a website for the first time, you’re likely to run into a question: do you need web hosting or a website builder?

The quick answer: you don’t necessarily have to choose one or the other. Web hosting companies host your site’s files so they are accessible online, while website builders are software services for creating websites. For most new users, the best solution is to choose a hosting company and a website builder.

In this post, we’ll dive into what the terms website hosting and website builder mean in more detail, explain how they work together, and help you choose the best services and options for you based on your skills, budget, and long-term goals.

What is web hosting?

Web hosting is a service that stores your website’s files, such as code, images, and content, on a server. When someone types in your , this server sends the files to their browser, allowing them to view your site.

How web hosting works

Think of web hosting like renting an empty apartment. This server is your space, and you can use it to store your site’s files, images, text, design elements, and more.

You also get full control over how you build your site. You can install a free tool like WordPress or write code using HTML, CSS, and JavaScript to create your website. You’re not locked into a single system.

Tip: Different hosting providers offer different types of hosting plans — shared, VPS, cloud, and dedicated. Learn more about each option and explore which one suits your site’s size, budget, and technical needs.

What is a website builder?

A website builder is an all-in-one platform for building, customizing, and hosting a website. You get a drag-and-drop editor, pre-designed themes, technical support, and built-in hosting in a single subscription.

How does a website builder work?

A website builder offers a more user-friendly interface for creating a website. 

Log in to your platform of choice and pick a theme for your site. Then, use the visual editor to design each page with text, images, buttons, custom code, and other features. 

Note: A website builder isn’t the same as a content management system (CMS). A CMS gives you a flexible backend to manage your website’s content, themes, and plugins, but you’re responsible for setup, hosting, updates, and security. In contrast, a website builder manages everything automatically. In short, a CMS offers more control and customization, while a website builder offers more convenience and ease of use.

Common website builders to explore

Here are three platforms to see how a website builder works:

WordPress.com: Offers managed WordPress hosting and a website builder functionality, all under one roof.Squarespace: Design your website with clean templates using built-in tools for blogging, ecommerce, and scheduling. Wix: This website builder offers many templates and AI tools to build your site quickly. It’s suitable for small businesses, freelancers, and personal brands for designing websites without coding.

Now that we’ve discussed the basics of website hosting and builders, let’s discuss how they’re similar and where they differ. 

Similarities between website hosting and builders

At first glance, web hosting and website builders seem totally different, but they share a lot of common ground. Before we discuss what sets them apart, let’s look at what both options help you do behind the scenes.

Store and manage all your website files

Your website is made up of many files like text, images, code, a database, and more. All this content has to be stored somewhere.

Website hosting stores these files on a server and gives you direct control over managing them. You can access folders, upload assets, and organize everything the way you want.

Website builders, on the other hand, store these files on their own server. You can’t access or organize them directly, but they’re stored safely and displayed to visitors when they land on your site.

Handle secure domain connections

Your domain name (like example.com) should be linked to the server where your website’s files are stored. You can do this through DNS settings. 

With traditional hosting, you can connect your domain manually by updating DNS records through the registrar. Website builders simplify the process. They often guide you step-by-step or handle it automatically if you purchase the domain through them.

Either way, hosting services and builders ensure your website shows up when someone visits your domain.

Keep your site secure 

Uptime, backups, and updates are critical to your website’s maintenance and security.

Whether you’re using a hosting provider or a website builder, the platform you choose is responsible for keeping your website running smoothly and securely.

Most hosting services offer tools like SSL certificates, regular backups, malware scanning, DDoS protection, and server firewalls. Website builders also offer similar protections, but you don’t need to configure anything manually. 

Web hosting vs. website builder: how are they different

Both of these approaches have a similar end goal — getting your website online, but the way they work is quite different. 

Let’s break down where web hosting and website builders go their separate ways, and what those differences mean for you.

Level of control

Quick answer: Web hosting lets you modify anything, like plugins, code, and more. Website builders limit changes and customizations to what the platform offers.

Web hosting gives you complete control over how your website works behind the scenes. 

You can choose a hosting software like WordPress, set up your website, add plugins or themes, and customize your code. This setup works well for developers and teams looking to build custom features on their sites. 

With web hosting, you can decide on different aspects like speed, security, and how much server power your site gets.

On the other hand, website builders give you a closed environment. 

You can change the design and use the add-ons available on the platform, however, it limits the extent to which you can tweak your site. Basically, you can’t customize the underlying code of your site. 

With this approach, it’s much easier to design a website. However, if you need a feature that the platform doesn’t offer, you can’t add it yourself.

Ease of use

Quick answer: Web hosting can require multiple steps to complete the setup. Website builders provide a quick workflow to get started.

With a hosting service, you need to manage multiple systems manually. You have to:

Set up your hosting account.Install a CMS like WordPress. Back up your site manually. Manage files through FTP. 

This approach requires more technical involvement at every step. It’s more suited for developers who can manage these tasks independently, but it can be frustrating for those who don’t have the necessary technical expertise.

That’s where website builders offer convenience to anyone who doesn’t know the technical side of web development. 

A website builder gives you everything in one place: 

Themes and templates. Design tools. Security. Hosting. 

It requires a shorter learning curve, and you don’t need to write code.

Speed to launch

Quick answer: It can take more time to launch a website if your web hosting doesn’t include a website builder or CMS. Choosing a hosting option with an included website builder make it easier to design and publish websites.

Launching your site takes many steps when you use a hosting service.

You have to pick a hosting platform, buy a domain, install software, and customize your site. It can take a few days to finish your design, especially if you’re figuring everything out as you go forward. 

In contrast, website builders are made for fast results.

Most builders offer a user-friendly interface and guide you through the process of designing a site. Pick a template, add your copy and images, and publish when you’re ready. For one-pager sites, you can even go live the same day. 

Cost structure

Quick answer: Web hosting alone can look cheap up front, but you pay extra as your website grows. Website builders roll everything into one bill: higher entry price, simpler bookkeeping.

Using a hosting service means you pay separately for different elements — themes, plugins, extra storage, and more. While basic hosting plans seem cheap at first, the total cost can add up once you factor in upgrades or outside help.

Website builders charge a bundled price inclusive of hosting, design tools, support, and security. Choose from tiered plans based on your requirements.

While builders look pricier upfront, they simplify your billing process. Plus, the cost of hosting plans can add up when you factor in upgrades in the long term. 

can be tough because you might have to rebuild your site from scratch.

Make the right choice 

Choosing web hosting is ideal when you:

Need complete control over your site’s code, plugins, and server settings to work with a custom tech stack.Want to create a one-of-a-kind design or special features that off-the-shelf templates can’t deliver.Expect to see significant traffic spikes or reach international audiences, and need the flexibility to adjust your site’s bandwidth.Have in-house technical expertise to manage updates and troubleshoot issues.

Website builders are ideal when you:

Want to go live with your site quickly with a minimal setup (for side hustles, portfolios, or small businesses).Prefer a simplified billing process with fewer moving parts and everything like hosting, analytics, and CMS in one package.Have limited technical knowledge and no time to learn web development and maintenance tasks, WordPress.com offers the best of both worlds 

With WordPress.com, you don’t have to worry about choosing one or the other option.

WordPress.com uses the same powerful WordPress engine that powers 40% of all websites globally. This means you get the familiarity, flexibility, and plugin support of open-source WordPress, without too much manual effort.

Here’s what you can do with WordPress.com:

Easy design with block editor and themes

Use the block editor to design pages by simply dragging and dropping elements. Create custom block styles to build visual consistency across your site.

Plus, you can access hundreds of professionally designed themes for multiple industries and use cases. These themes automatically adapt to different screen sizes and don’t require any coding.

Thousands of plugins for added features

Pick tools from the WordPress plugin marketplace to improve your site and expand its functionality. You can add plugins to:

Improve SEO.Create forms.Connect to CRM.Build a multilingual site. Fully managed hosting and security

Unlike the self-hosting approach, you don’t need to worry about setting up servers, installing SSL certificates, or handling updates.

WordPress.com takes care of all the maintenance tasks, like site security, uptime monitoring, automatic backups, and performance optimization. You can focus entirely on your website design and business growth.

All WordPress.com websites also come with built-in security features like SSL certificates, domain privacy, spam protection, malware detection, DDoS protection and mitigation, and more.

24/7 support and safe testing tools

WordPress.com offers real human support around the clock on every paid plan. Or get free advice from experts in the active user community.

Plus, you can experiment within your site in staging environments to test changes privately before going live. 

Built to grow with your website

Whether you’re building a small website or have big dreams for the future, WordPress.com grows with your goals. 

You don’t need to switch platforms even if you want to switch your approach from no-code to code. The platform has everything you need to customize and enhance your site. 

Pick the best path forward

Rather than pitting website hosting against website builders, now you know you can have both together (and WordPress.com delivers both with one platform). You get a builder’s ease and a hosting provider’s flexibility without the hassle of migrating your site to a different platform.

Ready to get started? Build and host your site WordPress.com today. 

How to Make a Favicon for Your Website (And Why You Should)

When you’re sifting through a sea of open tabs, how do you quickly find the one you need? I bet it’s by using favicons — the small icon that appears next to a site’s title in your browser tab.

Short for “favorite icons,” favicons don’t just appear in browser tabs; you’ll also find them next to bookmarks, history results, search bars, mobile browser screens, home screen shortcuts, and SERPs.

Favicons are often overlooked when creating a website, but they can make a big impact on how polished your website feels. In this article, we’ll cover why you need a custom favicon, how to create one, and how to add it to your website.

Why should you add a favicon to your website?

Favicons are one of those small things that make a big difference. Here’s why:

Favicons improve the user experience: Favicons help people quickly navigate to your website when they have multiple tabs open. It also allows visitors to recognize your site in search results. This instantly elevates the website experience and enables people to find your website easily whenever they need.Favicons boost brand recognition: Favicons make your website instantly recognizable in a jungle of tabs or SERPs. Visitors will soon start associating and remembering your website with your custom favicon, regardless of the device they’re on. If you’ve used an iteration of your logo, favicons will also reinforce your brand identity and allow you to maintain consistent branding across marketing channels.Favicons lend your website some credibility: Generic favicons (like the globe sign) can make a website look unfinished or poorly maintained. Custom favicons, on the other hand, can instantly make a site look more reliable and professional.

Now you know why favicons are an essential addition to elevate any website. WordPress makes connecting them to your site easy, too — more on that in the upcoming sections.

Do favicons impact your website’s SEO efforts?

Not directly, no, but favicons still influence SEO. How? Google crawls your website and looks for the favicon file to identify your website. Your website visitors do the same thing — they spot familiar favicons in search results, leading to a better click-through rate.

Don’t take my word for it: a blogger shared on Reddit that they witnessed a drop in organic traffic because Google wasn’t showing their favicon in SERPs.

How to create a favicon for your website in three steps

There’s a lot of conflicting and confusing advice about creating a favicon — should you use SVG or PNG? Is 16×16 the right size or 48×48? Here’s a step-by-step guide that cuts through the noise and clears up what you really need to know:

Step 1: Design your favicon

Ideally, your favicon is a variant of your logo. This ensures your brand identity remains consistent and memorable. If your website doesn’t have a logo, you can either hire a graphic designer to create one for you or DIY it using graphic design tools like Canva or Photoshop.

Once you have a logo, you can export it in the right size (512×512) directly from Canva or Photoshop. Or you can also upload your logo to a favicon generator tool to convert it into a favicon. Here’s a list of five useful favicon generators:

RealFaviconGeneratorIonos Favicon GeneratorFavicons generatorFavicon.ccFavicon.io

These tools provide your favicon icons in both PNG and ICO formats. For example, in RealFaviconGenerator, you can upload your image, see how your favicon appears across different devices, and download your favicon package. You can also customize how your favicon appears on browsers with dark themes enabled.

Tip: Use a transparent background for your favicons so they blend seamlessly with browser backgrounds. If your logo isn’t already transparent, a tool like Remove.bg can help you make the background disappear in seconds.

Step 2: Optimize your favicon size and format

If you have built your website using WordPress, you need to ensure that you meet the site icon image guidelines.

Aspect ratio: Your favicon should be a square image.Dimensions: For WordPress websites, your favicon size needs to be at least 512×512 pixels.File type: WordPress supports any valid favicon format — the most common file types are PNG and SVG.

Should you use PNG or SVG? It depends.

SVG stands for “Scalable Vector Graphics,” meaning your favicon in SVG format will be made of paths and shapes, not pixels. This feature makes it infinitely scalable, without losing your favicon’s crisp quality. The issue is that SVG isn’t fully supported for favicons by all browsers.On the other hand, PNG is not only widely supported by all browsers and devices, it’s also easier to use since most of us have already used this format.

If you want to understand which browsers support which favicon formats, head over to Can I Use to resolve all your doubts instantly. You can see which browser versions are compatible with PNG and SVG formats.

Note: Depending on a user’s browser and device, your favicon will appear in different sizes. For example, favicons usually appear in 96×96 dimensions in a desktop shortcut. The shortest dimension is 16×16. Choose a favicon that remains in good shape once it’s shrunk to those dimensions. It’s also a good idea to stay up-to-date with Google’s guidelines to ensure your favicon displays optimally in SERPs and browser tabs.

Step 3: Add your favicon file to your website

If you are using WordPress, there are two easy ways to add your favicon to your website:

Using the WordPress general settings.Using the WordPress customizer.

Let’s cover each method.

Using the WordPress general settings

This is the fastest and most straightforward method to add a favicon to your WordPress website. All you have to do is ensure you have a square 512×512 pixels favicon — WordPress will take care of the rest.

In your site’s dashboard, navigate to Settings → General.Click on the “Choose a Site Icon” button.Upload a new file or choose one from your existing media library.Click the “Set as Site Icon” button after choosing your image. If your favicon needs cropping, WordPress will ask you to adjust the dimensions of the image.

You can see a preview of your favicon after saving changes:

Using the WordPress customizer

Similar to the previous method, using the WordPress customizer is a pretty simple way to upload your favicon.

In your site’s dashboard, navigate to Appearance → Customize.Click on “Site Identity.”At the bottom, you’ll find the “Select Site Icon” button to upload your favicon.You can also crop your image if you need to after uploading.

Another way to add a favicon to any site (regardless of whether it’s on WordPress or not) is to edit your theme code files. Follow these steps:

Upload your favicon file to your website builder’s media manager or library.Copy the URL of the uploaded file.Insert the following piece of code inside the of your HTML:……

However, I wouldn’t recommend using this method because most website builders have easier ways to upload the favicon, and messing with the code can disturb your website’s functionality and appearance if you’re not careful.

Three best practices for designing a great favicon for your website

Here are a few best practices you should follow to ensure your favicon looks professional and loads reliably:

1. Keep it simple

Don’t use overly detailed logos that contain too much text or elements. If you have a big company name, for example, don’t spell out the whole name. Keep it concise and limit it to a letter or an acronym. Why? A favicon is a small icon — you want to make sure it’s clearly visible across all browsers and devices. Use a bold symbol that’s crisp and easily recognizable.

2. Color-check your favicon

With the new variety of browsers and increasing popularity of dark mode, ensure your favicon looks great against all types of backgrounds. Test it on white, gray, and black backgrounds. Keeping your favicon transparent by removing the background also helps here.

3. Test your favicon after uploading

Check how your favicon appears on various browsers, mobile devices, iPads, bookmarks, and pinned tabs. If it is warped in any device or browser, troubleshoot and reset the dimension to the right measure.

Small but mighty

A favicon is a small detail that can make a big impact on the brand identity and user experience of your website. Hopefully, this article helped you understand how to create them quickly and give your website the polish it deserves.

Favicons aren’t the only thing that elevate your website experience, though. A fast speed and a clean user interface also go a long way. Get started with WordPress.com (or migrate your existing website) for excellent website performance, maintenance, managed hosting, security, and much more.

WordCamp Europe 2025 Recap: Connecting and Learning in Basel, Switzerland

Ever wish you could just walk into a room and immediately feel like you belong? That’s what going to WordCamp is like. A large part of the magic of WordPress isn’t the software—it’s the community.

WordCamp Europe 2025, one of three WordPress flagship events, took place in Basel, Switzerland from June 5th to June 7th. Close to 2,000 attendees came to listen to talks, learn, connect, and contribute to the WordPress project.

If you couldn’t make it, don’t worry. While nothing beats the experience of actually being there, this post will give you a detailed summary of some of the most impactful presentations held at the conference. That way, you can stay in the loop with what’s happening in WordPress until you can go yourself.

By the way, all of the presentations from this year’s schedule are also available on Youtube:

Day 1 (Track 1)Day 1 (Track 2)Day 2 (Track 1)Day 2 (Track 2)Opening Remarks

Lead organizers Laura Sacco, Steve Mosby, and Uros Tasic greeted 1700+ attendees from 84 countries with a message of unity and connectedness.

Photo source: https://www.flickr.com/photos/wceu/54571195040/in/album-72177720326409156

Something that stood out this year was the number of newcomers. 26% of attendees had never been to the event before.

After a quick introduction and thanks to the sponsors (WordPress.com and Jetpack supported the event as Super Admin sponsors), the first presentations started right away.

WordPress without borders — The fight for digital freedom

In the very first presentation, Human Made founder Noel Tock discussed the important role of open-source software in humanitarian challenges. He currently lives in Kharkiv, Ukraine where his charity helps evacuate dogs from the frontlines.

Tock explained how WordPress, open-source software, and global collaboration have played a significant role in past crises:

Arab Spring (2010): People shared ideas and reported on events on the ground through blogging and other online channels.Earthquake in Nepal (2015): Contributors around the globe analyzed satellite data to help first responders know where to focus their efforts.COVID (2020): Scientists exchanged genome data, open-source dashboards kept track of important statistics, and helpers around the world provided 3D-printing models for medical equipment.

In short, the open-source ethos helps people find each other, have a voice, and work together. At the same time, they stay available when proprietary solutions close up to de-risk themselves.

WordPress in Ukraine

The important role WordPress plays in Ukraine is best exemplified by comparing the number of global new WordPress sites per quarter to new Ukrainian sites based on WordPress.

Furthermore, half of Forbes’ top 50 Ukrainian charities are on WordPress and the platform has enabled them to raise more than half a billion dollars in donations in one year.

These charities include:

East SOS: Helps people on the frontlines, especially women, children, and people with disabilities.To Ukraine With Love: Builds new homes for those who have lost them in the conflict.Superhumans: Provides prosthetics and rehabilitation to Ukrainian military personnel and volunteers who have lost limbs in the war.Repair Together: Organizes music events during which they clean up and rebuild homes.Caritas: Provides shelter, food, and water to Ukrainians.Save Ukraine: Works to bring back Ukrainian children who have been separated from their parents.Dog Help Kharkiv: Noel’s own charity.

According to Tock, WordPress provides a mature and stable starting point for anyone to begin working and publishing online. Through that, it helps create real human outcomes.

If you contribute to WordPress, this is where your efforts go and where they make a difference. Keep that in mind. As Noel said, “you should all be incredibly proud of your work.”

How to make your website more sustainable

The Internet has an enormous environmental footprint. Information and communication technology (ICT) was responsible for 10% of electricity consumption in 2023. Charlotte Bax, a sustainable web designer at Digihobbit, focused her presentation on what website owners can do to mitigate that.

Photo source: https://www.flickr.com/photos/wceu/54571191230/in/album-72177720326409156&sa=D&source=docs&ust=1749826746333088&usg=AOvVaw37Xc8bV6MjVk2nlKjdtRNK
Estimating website emissions

Websites create emissions both from server-side processing (data traffic) and client side processing (rendering websites in the browser). The open-source sustainable web design model provides a digital carbon rating scale to estimate the impact of individual websites.

The short version is that, if you want a page to be rated A+ to B, it needs to be smaller than 1MB.

Use these tools to understand where your website stands:

Green Web FoundationWebsite Carbon CalculatorBeaconEcograderAre my third parties green?Sustainable choices you can make

Besides testing, there are concrete steps you can take to improve your website’s carbon footprint:

Pick a sustainable hosting provider: Some hosters power their data centers with green energy, re-use the waste heat from servers, or run on refurbished hardware to reduce e-waste.Improve the site architecture : Reduce elements on your pages, use simple and clean architecture, and correct semantic code.Streamline site design: Choose a lightweight theme, for example, Astra or Kadence. Add simple functionality with code rather than plugins, limit plugins on your site, don’t use unnecessary animation.Set up caching: Every bit of data your visitors don’t have to re-download from the server for repeat visits saves energy. (By the way, all WordPress.com plans come with caching built in.)Optimize your content: Use images only when they are valuable, resize and convert them to WebP/AVIF, choose vector graphics whenever possible. More image optimization tips here.Use media mindfully: Only use functional and valuable graphics. Include preload=”none” into your header. Include image thumbnails that open embedded videos in a modal to prevent unneceesary preloading.Improve font usage: Use system fonts for body text and custom fonts only for headings. Include single icons instead of entire icon fonts and convert any fonts you use to woff/woff2Grid awareness: Cater your website experience to the local energy grid of your visitor. Fershad Irani is working on this currently together with the Green Web Foundation

If you’re interested in this topic, Charlotte also recommended this 2022 WordCamp Nederland talk from Joost de Valk.

Modernizing WordPress with new web platform features Photo source: https://www.flickr.com/photos/wceu/54570871211/in/album-72177720326409156&sa=D&source=docs&ust=1749826746333373&usg=AOvVaw0Bro4l0o3hl2Gv_QVKbzpg

Google developer relations engineer Adam Silverstein used his presentation at WordCamp Europe 2025 to report on new features already available or coming soon to Baseline.

In case you don’t know, Baseline is an initiative started by the Google Chrome team to share information about which web platform features are supported by all browsers. This includes features and technologies you can use on all websites, including sites built with WordPress.

Some of the examples below are not yet part of Baseline but likely coming soon. If you want to know what web platform features are currently being worked on and their state of implementation, visit the Interop Project.

Features for helping developers

All the following features are native browser functionality and CSS driven without the need for JavaScript:

Popover API : Newly landed in baseline, it allows developers to easily implement popovers, dialogues, lightboxes, tooltips, and dialogues.Scroll animations API: You can use it to trigger scroll-driven animations. Find many examples here. CSS carousels : Create many different kinds of sliders without JavaScript.

Want to see in-progress demos of the features Adam shared? Watch his video or check out his presentation slides.

Improve user experience

The next set of features are aimed to make the user experience better:

Customizable select: Allows you to use HTML directly in select elements to make them easier to use and interact with.Speculative loading API: Adds the ability to tell browsers to pre-fetch a resource before the user navigates to it. That way, it appears faster when someone clicks on it. A version of this shipped in WordPress 6.8.View transitions API: Offers CSS animations for navigating from page to page, which allows for an app-like experience.Modern image formats: There is work being done to convert HDR images taken by phones and other devices to SDR image displaying on websites without loss of quality.Opening up new experiences

The following features open up website experiences that weren’t possible before:

Passkeys: Allows you to log into WordPress sites using biometrics like fingerprints. This is already widely available across browsers.Web assembly: Makes it possible to run programming languages like C or C++ in the browser. This enables using software that’s not present on the server, for example, the latest version of image libraries. It’s part of what powers WordPress Playground.AI in the browser: Thanks to web assembly, it’s possible to run AI models directly in the browser for an offline and privacy-friendly solution Transformers.js is a good place to start.AI as a helper: Assistants and agents can help with coding, tuning website performance, site building, onboarding, and more. A new AI Team has been formed to steer the integration of AI into WordPress.Tips for hosting a successful WP meetup in your city

Héctor de Prada, a meetup organizer in León, Spain, a city with just 120,000 inhabitants, shared how his city runs one of the most well-attended WordPress meetup groups in the world:

On average 60 attendees per meetup.85% attendance rate.Biggest ever meetup had 100+ people.

What’s even more impressive? This meetup had been abandoned for three years and used to only attract around 15 people per meeting. Here’s how they turned it around:

1. Meet the community

Come to WordCamps, go to meetups, learn what the community is like and how these meetings are supposed to feel. This also helps meet potential sponsors, mentors, and speakers.

2. Create an organizing team

Don’t do it by yourself, but with a team. Try to find people with complementary skills and who are motivated and committed. Divide responsibilities among the team, that way, nobody is indispensable. Rotate responsibilities, so if one person is missing, the meetup can still happen.

3. Get local partners

One of the hardest things is to get a venue. In León they have always managed to get free space from the city, universities, or private companies. Reach out to universities and schools to get young people to the meetups, but reach out to the teachers, not the students directly. In addition, do collaborations with business organizations, content partners, and media.

4. Find sponsors

Try to land both a local sponsor and WordPress community sponsors, there are many companies looking to support events. Make good use of the money and invest it in food, it’s what everyone wants.

5. Speak to everyone

Don’t only make the meetings about WordPress. WordPress covers so much of the digital world, you can pretty much talk about anything. Know your audience and what they want. Include talks that allow people to both learn and be inspired. In addition, cover trending topics.

6. Make it fun

Make sure you feature interesting talks and cultivate a casual vibe. Offer food and drinks to make networking easier.

There are 660 active meetup groups in the world. Find yours or organize the next one!

Client-side Web AI agents for building smarter user experiences of the future Photo source: https://www.flickr.com/photos/wceu/54573806460/in/album-72177720326409161&sa=D&source=docs&ust=1749826746333635&usg=AOvVaw1xwnPztrdTSF39eikGK_EJ

Jason Mayes, Web AI lead at Google, explained how to run machine learning models in the browser to allow “agentic behavior” while interacting with web applications. He predicts that this will be the future of the internet.

What is an agent?

An agent is a system that autonomously performs tasks on behalf of the user. It’s basically one or more large language models (LLMs) with access to tools that allow it to complete its objective.

A tool can be a function, an API, or another source of data. They can be available directly on a website or application or outside of it.

Thanks to the underlying models, agents can:

Break down tasks into steps.Delegate subtasks to the best model to get the job done.Access necessary information to complete the work.Remember contextual information for follow-up tasks.

They can do all of the above without the need for human intervention and, if needed, can repeat the cycle as often as necessary.

Using web AI agents

In the future, you will be able to talk to a website naturally through an AI running in your browser in order to achieve your objectives. You don’t have to learn a new user interface of each site, it all happens through an agent. Here’s a video of the example travel site from the presentation:

This may become the new SEO. Websites will likely contain a file that tells agents exactly what users can do there so they can achieve it faster. Websites that aren’t AI compatible may have a hard time competing on the web.

For this to work, a website has to make the necessary information available to the agent. Because it’s based on JavaScript, you can use website functions you’ve already written and existing logic. There’s a detailed data-flow diagram and explanation in the video of the talk.

Agents run locally on the machine of the user. As a consequence, they are more privacy-friendly than cloud AI. As hardware improves, more and better models will become available. Plus, browsers may already contain their own models—Chrome is already working on this.

It’s the start of a new era, an agentic internet. Start exploring it today.

Fireside chat with Mary Hubbard & Matt Mullenweg

No recap of WordCamp Europe 2025 would be complete without the traditional Q&A with Automattic CEO and WordPress co-founder Matt Mullenweg. He was joined by WordPress Executive Director Mary Hubbard.

Photo source: https://www.flickr.com/photos/wceu/54579226377/in/album-72177720326409161&sa=D&source=docs&ust=1749826746333888&usg=AOvVaw00TRjUsYxwHmDDxd5SI4Y0

The lively discussion addressed both prepared topics from the organizer crew as well as live questions from the audience, among them:

European data protection regulationsWhether the WordPress foundation should establish a presence in the EUThe announcement of the FAIR projectThe future of the Five for the Future initiativeBringing back the WordPress Sustainability teamThe development of a new ticketing system for WordCampsA possible WordPress 6.9 release in 2025Replacing Meetup.com as the tool for organizing WordPress meetupsThe short and long-term plans for WooCommerceCreating a dashboard with community analyticsThe allocation of funds left over from WordCampsDifferences between managing a private company and an open source organization

Two important announcements were made during the session: the launch of WordPress Campus Connect and the establishment of the WordPress AI team.

WordPress Campus Connect

WordPress Campus Connect is a global community program that aims to help students learn about WordPress and its many possibilities through workshops, classes, and training. The program will launch a pilot project in collaboration with the University of Pisa on June 25, 2025. In it, 5000 students will do 150 contribution hours to the WordPress project worth six credits to graduate college.

This opens up great opportunities to bring younger people on board, provide mentorship and internships, foster new ideas, rejuvenate WordCamp demographics, and win long-term members of the WordPress community. It’s also very scalable, with opportunities to expand the program to other majors and universities.

AI in WordPress (and beyond)

The WordPress project recently established an AI team. One of the things the team will figure out is where to apply its initial efforts. AI is already being used to automate testing for the plugin directory. 

Aside from that, it’s hard to imagine a screen in WordPress that couldn’t be enhanced with AI:

Text, image, and video creationA chat interfaceProgrammatic ways for AI to interact with Core functionality

In addition, it’s great for developer productivity and project administration. We’re also seeing a lot of hosting providers integrating AI, such as the WordPress.com AI Website Builder.

The influx of AI plugins in the WordPress directory is also huge. A search for “AI” already turns up more than 1500 results. What’s helped is that the plugin review team has cut down the approval backlog. It’s now at about a week instead of six to eight months. As a consequence, plugin submissions have doubled since last year.

Generally, AI represents a major revolution. And we are just at the beginning. Matt called the current state of AI its “command-line phase.” Other ways of interacting with it are already on the way, including hardware versions such as wearables or materialized AI like robots and self-driving cars.

See you in Krakow in 2026!

WordCamp Europe 2025 was a success and I had a blast as a visitor—just like every year. If you’ve never been to a WordCamp before, it’s one of the best ways to meet other people from the community, make friends, and learn.

If you are interested in joining, you can find all the info at WordCamp Central. Besides the flagship events, there are also many meetups and smaller camps happening all the time. They’re a great first step. Hope to see you at one of them!

Building Pride: Supporting LGBTQ+ Organizations with Out in Tech

WordPress.com’s parent company, Automattic, has partnered with Out in Tech, the world’s largest community of LGBTQ+ tech leaders and professionals, since 2017. We’re proud to have helped build over 250 websites for nonprofit organizations that support and advocate for LGBTQ+ communities worldwide. 

Just in time for Pride Month 2025, a small group of Automatticians, including me, participated in the Out in Tech Digital Corps Hackathon, held in our office in New York City a few weeks ago. 

During a Digital Corps Hackathon, groups with 8-10 volunteers spend the day building a full, multilingual website for the nonprofit to which they’re assigned. My group was assigned a youth advocacy group in West Africa.

A few days before the event, we were added to a shared Google Drive and a dedicated Slack channel, giving us a clear picture of what would be needed before we even arrived. We even connected with the organization’s executive director over video early on the day of the Hackathon.

My group consisted of UX designers, illustrators, marketers, digital strategists, copywriters, and expert site builders. Honestly, I felt like I was back in college working feverishly on a class assignment, and I loved every minute of it. The camaraderie, intense collaboration, and our shared sense of mission all contributed to a joyful experience, complete with inside jokes and new friendships.

At the end of the day, each group presented their finished website during the closing showcase, and then we celebrated with snacks and lively conversations. By the time I’d left later that evening, I’d already made a mental note to volunteer for the next Hackathon in September. It’s incredibly meaningful to use our skills to amplify the missions of LGBTQ+ organizations worldwide.

Interested in volunteering or learning more about Out in Tech? Head to their website to find out how you can get involved and attend an event near you.