The host's job
- Patch the OS, web server, PHP and database
- Run a WAF with WordPress-aware rules
- Rate-limit and monitor login endpoints
- Isolate accounts from one another
- Keep off-server backups you can restore
Advertising disclosure. This article contains affiliate links. If you sign up with a hosting provider through one of them, RecordHosting.com may receive a commission at no extra cost to you. We only recommend services we would use ourselves, and compensation never buys a better rating. See our full affiliate disclosure and the FTC's Endorsement Guides: What People Are Asking.
WordPress powers a large share of the web, which means most hosts advertise “WordPress hosting” whether or not they have done anything to earn the phrase. This guide explains what genuinely optimised WordPress hosting looks like, and how to tell it apart from a shared plan with a logo on the sales page.
Why WordPress hosting is its own category
WordPress is a database-driven PHP application that assembles every page on request unless something stops it. Each visit can mean dozens of database queries and a stack of plugin code. That workload rewards a very specific server configuration: fast PHP, generous memory, an object cache in front of the database, and a page cache in front of everything.
It also rewards operational discipline. WordPress ships security releases regularly, plugins more often than that, and the overwhelming majority of compromised WordPress sites were running known-vulnerable, out-of-date code. Hosting that handles updates is not a luxury feature; it is the feature.
Managed vs generic hosting
Managed WordPress hosting is a hosting environment built specifically for WordPress. Think of it like a custom-tailored suit — everything is optimised to fit WordPress perfectly. It typically includes automatic updates, enhanced security, built-in caching, faster performance and WordPress-specialised support.
| Question | Generic hosting | Managed WordPress |
|---|---|---|
| Who applies core updates? | You | The host, usually with automatic rollback |
| Who configures caching? | You, via a plugin | Pre-configured at server level |
| What happens if you are hacked? | Your problem | Clean-up included on most plans |
| Staging site | Manual | One click, with push to live |
| Support knowledge | Server-level only | Application-level, plugin-aware |
| Plugin restrictions | None | Some banned (duplicate caching/backup) |
| Email included | Usually yes | Usually no |
| Cost | $3 – $15/mo | $9 – $60/mo |
Choose generic hosting if you are technically confident, run several unrelated things on one plan, and want email included. Choose managed if the site earns money, if nobody in the business enjoys maintenance, or if you have ever been hacked. See our WordPress hosting plan page for indicative pricing.
Server specifications WordPress cares about
- PHP 8.2 or newer — a substantial free speed increase over PHP 7.x.
- PHP memory limit 256 MB+ — page builders and WooCommerce need headroom; 128 MB is where white screens live.
- Object cache (Redis or Memcached) — this is the difference-maker for logged-in users, carts and the admin dashboard, none of which page caching helps.
- MariaDB 10.6+ or MySQL 8 on NVMe.
- OPcache enabled with a sensible memory allocation.
- HTTP/2 or HTTP/3, Brotli compression, and a CDN for anything with a geographically spread audience.
- WP-CLI and SSH access so a developer can do in one command what takes twenty clicks.
- max_execution_time of 60s+ and 64 MB uploads — otherwise imports and media uploads fail in irritating ways.
Sizing a plan by traffic
| Monthly visits | Sensible plan | Watch out for |
|---|---|---|
| Up to 10,000 | Shared or entry managed | Renewal pricing |
| 10,000 – 50,000 | Managed WordPress, mid tier | Object caching availability |
| 50,000 – 250,000 | Managed business tier or cloud | Overage charges on visit limits |
| 250,000+ | Cloud or VPS with a tuned stack | Database becoming the bottleneck |
| WooCommerce, any size | One tier above the equivalent blog | Cart and checkout cannot be page-cached |
Note how hosts count visits. Some exclude bots and some do not, and bot traffic is often a third of the total. Ask, and check whether overage throttles you or bills you.
Making WordPress fast, in order of impact
- Turn on page caching. Nothing else comes close for anonymous visitors.
- Compress and resize images. Serve WebP or AVIF, size them to their display dimensions, and lazy-load anything below the fold.
- Add an object cache. This is what makes wp-admin and WooCommerce feel quick.
- Remove plugins you do not use. Deactivated is not deleted, and every active plugin runs on every page load.
- Host close to your audience, or use a CDN. Latency is not a setting you can tune away.
- Only then consider minification and script deferral, which give smaller gains and break more things.
Security: what the host should do, and what you must
Your job
- Keep plugins and themes updated, or pay someone to
- Delete abandoned plugins and unused themes
- Use strong, unique passwords and enable two-factor authentication
- Give each person their own account, at the lowest role that works
- Remove accounts when people leave
Moving an existing site
Most decent hosts will migrate a WordPress site for you at no charge, and doing so is usually safer than a DIY plugin migration. If you are doing it yourself:
- Lower your DNS TTL to 300 seconds a day beforehand, so the cutover is quick.
- Copy files and database to the new host and test on a temporary URL or hosts-file entry.
- Check permalinks, media URLs, forms, checkout and any external integrations.
- Re-issue the TLS certificate on the new host before switching DNS.
- Switch DNS, watch both servers for 48 hours, then cancel the old plan — not before.
Buying checklist
- PHP 8.2+, 256 MB memory limit, OPcache on
- Server-side page caching and Redis/Memcached object caching
- Automatic core updates with rollback
- One-click staging with database push
- Daily (ideally hourly) backups with self-service restore
- Free auto-renewing TLS and an included CDN
- SSH and WP-CLI access
- Clear visit limits and overage terms
- Free migration of your existing site
- Support that will discuss plugins, not just ports
Compare WordPress hosting offers
View current plans WordPress plan details
Sponsored link. We may earn a commission if you buy through it, at no extra cost to you.