- Article
- Beginner
- 5 minutes read
- Reviewed August 3, 2026
WordPress can be installed through a hosting control panel or manually by uploading the software, creating a database and completing the browser-based installer.
The hosting-assisted method is faster for most beginners. The manual method is useful when you need more control or want to understand how the installation is assembled.
Before You Begin
You need:
- A hosting environment that meets current WordPress requirements.
- A domain or temporary hostname.
- HTTPS support.
- Access to the hosting control panel or server.
- A MySQL or MariaDB database.
- Database credentials.
- An administrator email address.
- A backup if you are installing into an existing environment.
At the time this article was reviewed, WordPress.org recommended PHP 8.3 or later, MySQL 8.0 or later or MariaDB 10.11 or later, and HTTPS support. Check the official requirements page because recommendations change.
Choose the Installation Location
Decide where the website will be available.
Examples:
https://example.com/https://www.example.com/https://example.com/blog/https://staging.example.com/
Avoid installing WordPress in a directory selected accidentally by a hosting installer.
If replacing an existing website, plan the migration and launch rather than overwriting files without a rollback path.
Method 1: Hosting-Assisted Installation
Many hosting providers include an automated WordPress installer.
The exact interface differs, but the process commonly asks for:
- Domain or subdomain.
- Installation directory.
- Website title.
- Administrator username.
- Administrator password.
- Administrator email.
- Language.
- Database or advanced options.
- Automatic update preferences.
Review the Defaults
Automated installation is convenient, but review every option.
Pay attention to:
- Unexpected subdirectories.
- Automatically installed plugins or themes.
- Default administrator usernames.
- Search engine visibility on staging sites.
- Automatic update choices.
- Backup availability.
- PHP version.
Use a strong unique password and store it in a password manager.
Complete the Installation
After the installer finishes:
- Open the website.
- Sign in to the WordPress administration area.
- Confirm the site URL and HTTPS behavior.
- Review installed themes and plugins.
- Update all components.
- Continue with the essential settings checklist.
Method 2: Manual Installation
The manual process has five main stages:
- Download WordPress.
- Create a database and database user.
- Prepare the configuration.
- Upload files to the server.
- Run the installation script.
Step 1: Download WordPress
Download the current stable release from WordPress.org.
Extract the archive on your computer. It contains WordPress core directories and files.
Do not download WordPress from an unknown third-party website.
Step 2: Create the Database
Create a MySQL or MariaDB database and a database user with appropriate permissions for that database.
Record:
- Database name.
- Database username.
- Database password.
- Database host.
- Table prefix choice if customized.
The database host is often localhost, but your provider may use a different value.
Use unique credentials and do not expose them publicly.
Step 3: Configure wp-config.php
WordPress includes a sample configuration file named wp-config-sample.php.
You can copy it to wp-config.php and add the database values manually, or allow the installer to attempt to create the file.
The configuration contains sensitive information. Protect it through appropriate file permissions and server configuration.
WordPress security keys and salts should use strong unique values. The official secret-key service can generate them.
Step 4: Upload WordPress Files
Upload the files to the directory that should serve the website.
Common methods include:
- SFTP.
- SSH and command-line tools.
- Hosting file manager.
- Deployment automation.
Use secure access methods. Avoid plain FTP when a secure alternative is available.
Confirm that the files are in the intended document root or subdirectory and that ownership and permissions allow the server to run WordPress safely.
Step 5: Run the Installer
Open the intended website URL in a browser.
WordPress should start the installation process and ask for:
- Site title.
- Administrator username.
- Password.
- Email address.
- Search engine visibility preference.
Do not use an obvious administrator username such as admin when you can choose a unique account name.
Search engine visibility is only a request to search engines, not an access control. Use real authentication or network restrictions for private development and staging sites.
After Installation
Complete these tasks before publishing:
- Confirm HTTPS and canonical hostname.
- Review General settings.
- Set language and time zone.
- Configure permalinks.
- Review reading and discussion settings.
- Delete unused default content.
- Remove unnecessary themes and plugins.
- Create appropriate user accounts.
- Configure backups.
- Configure updates.
- Confirm email delivery.
- Set up staging if not already available.
- Review Site Health.
- Test restoration and critical workflows.
Installing WordPress Locally
A local installation runs on your computer and is useful for development and learning.
Local tools can package the web server, PHP and database into an easier setup.
A local site is not publicly available by default and does not replace production hosting. Integrations, email, caching and server behavior may differ from the live environment.
Common Installation Problems
Error Establishing a Database Connection
Check database name, username, password, host and user permissions.
wp-config.php Cannot Be Created
Create it manually from the sample file and upload it with appropriate permissions.
The Installer Shows Directory Files or a Server Error
The web server may not be configured to run PHP correctly, or the files may be in the wrong directory.
The Website Loads Without HTTPS
Confirm DNS, TLS certificate, WordPress URLs and server redirects.
The Administration Area Redirects Incorrectly
The Site Address, WordPress Address, proxy configuration or HTTPS detection may be inconsistent.
Frequently Asked Questions
Is automatic installation less secure than manual installation?
Not inherently. Security depends on configuration, credentials, hosting and maintenance. Review the installer’s defaults and remove unnecessary additions.
Can I reinstall WordPress without deleting content?
Replacing core files can be possible, but a full reinstall or reset can affect data. Create a backup and diagnose the actual problem first.
How long does installation take?
The basic installer can be completed quickly, but a production-ready website requires configuration, security, content, testing and maintenance setup.
Should I enable search engine visibility during development?
No for a private staging or unfinished website. Use access controls as well, because the visibility setting does not make the site private.