WordPress Maintenance Checklist: What to Do Weekly, Monthly, Quarterly and Yearly

On this page

1. The WordPress maintenance schedule at a glance
2. One-time setup that makes the checklist quick
3. Weekly WordPress maintenance tasks
4. Monthly WordPress maintenance checklist
5. Quarterly tasks (every 3 months)
6. Yearly tasks
7. Adjust the schedule for your type of site
8. A sample monthly maintenance calendar
9. Doing it yourself or handing it over
10. Quick check: is your site overdue for maintenance?
11. When to get help
12. FAQs

A practical WordPress maintenance schedule looks like this: every week, take a backup, apply updates and test your contact form; every month, run a security scan, review admin users, check Site Health, Search Console and page speed, and tidy the database; every quarter, test a backup restore and audit your plugins and PHP version; and every year, renew your domain, hosting and licences and review the site as a whole. The table below puts every task on one page.

This post is the hands-on task list. If you'd rather know what a paid plan should cover, see what a monthly maintenance plan includes, and if you'd rather not do any of this yourself, it's what I do every month on my WordPress maintenance plans.

The WordPress maintenance schedule at a glance

Task	How often	Where to do it
Confirm backups ran and are stored off-site	Weekly	Your backup plugin or hosting panel
Update core, plugins and themes, after a backup	Weekly or fortnightly	Dashboard > Updates
Send a test enquiry through every form	Weekly	The live site and your inbox
Check uptime alerts and delete spam	Weekly	Uptime monitor, Comments
Security scan and admin user review	Monthly	Security plugin, Users > All Users
Site Health warnings	Monthly	Tools > Site Health
Indexing, security issues and Core Web Vitals	Monthly	Google Search Console
Speed check on key pages	Monthly	PageSpeed Insights
Broken links and 404s	Monthly	Search Console or a crawler
Database clean-up	Monthly or quarterly	A plugin such as WP-Optimize
Test restore a backup	Quarterly	Staging site
Plugin audit and PHP version check	Quarterly	Plugins screen, Site Health > Info
Domain, hosting and licence renewals	Yearly	Registrar, host and licence accounts
Full SEO, content and access review	Yearly	Search Console, analytics, all accounts

One-time setup that makes the checklist quick

Maintenance is fast when the basics are in place. Do these once:

• Automatic off-site backups. Daily for sites that change often, stored away from your hosting, for example in Google Drive or cloud storage. A backup on the same server disappears with the server. The backup and restore guide covers the options.
• An uptime monitor that emails or messages you when the site goes down; see uptime monitoring explained.
• A staging site, if your host offers one, so big updates can be tried away from visitors.
• A record of every login: registrar, hosting, WordPress, email, premium licences and Google accounts, kept in a password manager.
• Search Console and analytics connected, so you have something to check each month.

Weekly WordPress maintenance tasks

• Check the backup log. Make sure last night's backup actually finished and reached its off-site storage. Failed backups are often silent.
• Apply updates, backup first. In Dashboard > Updates, update plugins one at a time on a busy site, then themes, then core. Read the changelog for big version jumps of your page builder or WooCommerce. How to update WordPress safely walks through the order and what to do if something breaks.
• Check the site afterwards. Open the home page, a service or product page and the contact page on your phone.
• Send a test enquiry through each form and confirm the email arrives, not just the on-screen thank-you message.
• Glance at uptime alerts and spam. Delete spam comments and look for odd new user registrations.

Some updates can safely run on their own; WordPress auto-updates explains which. Even then, someone should check the site afterwards.

Monthly WordPress maintenance checklist

This is the heart of maintenance, and the list I'd hand to anyone looking after a business site once a month:

1. Take a full backup before you change anything.
2. Run a security scan with your security plugin, such as Wordfence or Solid Security, or your host's scanner, and act on anything it flags.
3. Review users. In Users > All Users, filter by Administrator and remove former staff, agencies and freelancers. Nobody should have more access than their work needs.
4. Check Site Health. Tools > Site Health lists critical issues and recommendations, such as an outdated PHP version, failed scheduled events or inactive plugins you could delete.
5. Open Search Console. Look at Indexing > Pages for new errors, Security & Manual Actions for warnings, and Core Web Vitals for pages that have slipped.
6. Test speed on your home page and two key pages in PageSpeed Insights, and compare with last month. A sudden drop usually follows a new plugin or a large image.
7. Find broken links and 404s. Search Console's not-found list or a free crawler will show them. Fix the link or add a redirect.
8. Clean the database after the backup: old revisions, spam and trashed comments, and expired transients. WP-Optimize and similar plugins do this in a few clicks.
9. Check renewals coming up in the next 60 days, so nothing expires by surprise.
10. Look at analytics: enquiries, calls and WhatsApp clicks against last month.
11. Write down what you did in a simple log: date, updates applied, issues found. It makes the next problem much faster to trace.

If you or your developer have SSH access, WP-CLI can do several checks in seconds:

wp core check-update
wp plugin list --update=available
wp core verify-checksums
wp plugin verify-checksums --all
wp user list --role=administrator --fields=user_login,user_email

For the hardening side of the monthly routine, see the WordPress security checklist.

Quarterly tasks (every 3 months)

• Test a backup restore on a staging site or a spare subdomain. A backup you've never restored is a hope, not a plan.
• Audit plugins. Delete anything deactivated, replace plugins that haven't been updated in a long time, and look for two plugins doing the same job.
• Check your PHP version in Tools > Site Health > Info > Server. Old versions stop getting security fixes; test on staging before switching.
• Check premium licences for themes, page builders and plugins. An expired licence quietly stops updates arriving.
• Refresh key content: prices, team, phone numbers, opening hours, offers and photos.
• Check form spam protection and the email settings that deliver your enquiries.

Yearly tasks

• Renew your domain and hosting early, with auto-renew on and a card that won't expire. Check the renewal price before it charges, because it's often higher than the first term; see why hosting renewals cost more.
• Review your hosting. Is it still fast enough, are backups and support adequate, and are you paying for add-ons you don't use?
• Review access to the registrar, hosting, Google accounts and email. Make sure they're in the business's name, not a former employee's or developer's.
• Do a full SEO and content review: pages to improve, merge or remove, and outdated posts to refresh.
• Check the privacy policy and cookie notice still match the tools the site uses.
• Decide on a refresh or redesign if the site looks dated or enquiries have dropped.

Adjust the schedule for your type of site

• Brochure site that rarely changes: fortnightly updates and the monthly list are usually enough.
• Busy blog or news site: daily backups, closer comment and spam checks, and a regular look at the database size.
• WooCommerce store: add test orders after updates, payment gateway and order email checks, and more frequent backups; see the WooCommerce maintenance checklist.
• Membership or booking site: test logins, sign-ups and bookings after every update.

A sample monthly maintenance calendar

A schedule only works if it lands on real dates. Here is one way to spread the tasks across a month so no single day takes long. Move the days to suit your business, but keep updates away from your busiest selling days and never run them just before a weekend or holiday when nobody is watching the site.

When	Tasks	Effort
Every Monday	Confirm last night's backup exists, apply plugin and theme updates on staging or after a fresh backup, check the homepage, a key page and the contact form	Short, once set up
Every Thursday	Read uptime and security alerts, glance at form entries and orders to confirm they are still arriving	A few minutes
First week of the month	Security scan, admin user review, Site Health, Search Console coverage and Core Web Vitals, spam and revision clean-up	Longer; block out time
Last week of the month	Check expiry dates for domain, hosting, SSL and licences due in the next 60 days, and note anything to fix next month	Short
Once a quarter	Restore a backup to staging, audit plugins, check the PHP version, test every form and the checkout end to end	The longest session

Keep a simple log of what you did and when, even a shared spreadsheet. When something breaks, the first question is always "what changed?", and the log answers it.

Doing it yourself or handing it over

A small brochure site with a handful of well-maintained plugins can be looked after by an owner who is comfortable in the dashboard and sticks to the routine. It gets harder with a store, custom code, a page builder with many add-ons, or a site nobody has updated for a year. If you hand it over, ask for a monthly report that lists updates, backups, uptime and issues found. Freelance plans in India typically cost about ₹1,500 to ₹6,000 a month; website maintenance cost in India explains what moves the price.

Detailed guides: database optimisation and updating PHP.

Quick check: is your site overdue for maintenance?

In the WordPress admin, open Dashboard, Updates and Tools, Site Health. Three things tell you how far behind the site is:

1. The number of plugin, theme and core updates waiting on the Updates screen.
2. Any "critical issues" on the Site Health Status tab, such as an outdated PHP version or inactive plugins left installed.
3. The date of your last backup in your backup plugin or hosting panel, and whether a copy is stored off the server.

If updates have piled up for months, take a backup before clicking anything.

When to get help

Get help when updates keep breaking something, when nobody checks backups, or when the site takes orders or enquiries you cannot afford to lose. WordPress maintenance plans cover updates with a backup first and testing afterwards, off-site backups, security checks, uptime monitoring and a short monthly report. To start, send your website address.

FAQs

How often should a WordPress site be maintained?

Check backups and updates weekly or fortnightly, run the fuller checklist monthly, test a restore and audit plugins quarterly, and handle renewals and a full review yearly. Stores and busy sites need closer attention.

What should a monthly WordPress maintenance checklist include?

A full backup, a security scan, a review of admin users, Site Health, Search Console errors, a speed check on key pages, broken links, a database clean-up, upcoming renewals and a short log of what was done.

Is turning on auto-updates enough?

No. Auto-updates apply changes, but they don't take a backup first or check the site afterwards, and they don't cover users, renewals, restores or Search Console. They're useful for minor core and trusted plugin updates if someone still checks the site.

What is a WordPress maintenance schedule?

It's a list of maintenance tasks with how often each one is done, like the table above. Writing it down, with a log of when each task was last done, is what makes maintenance consistent.

Can I maintain my WordPress site myself?

Yes, if the site is simple and you follow the schedule. Always back up before updating, and get help if an update breaks the layout, forms stop sending or Search Console reports a security issue.

What day of the week is best for WordPress updates?

Early in the working week, at a quiet hour, so someone is around for a few days to spot problems. Avoid Fridays, the day before a sale or festival, and your busiest trading hours.