WordPress website deployment checklist

The deployment step is crucial to any web development project. You want this part of the project to run as smoothly as possible and not tarnish all the hard work that you’ve done up until this point.

This checklist covers both [[#Pre deployment checklist]] and [[#Post-launch Checklist]] so that you can fully prepare and do post launch due diligence ensuring the website you built optimally performs.

Pre deployment checklist

Before deploy

Prepare for deployment

  • Do a search for any absolute URLs used within internal site links. You want to use relative URLs for internal links. This will ensure when your site is pushed live that you’re internal links are not referring to the old staging site.
  • Ensure primary domain is set on live server (flywheel, wpengine, kinsta)
  • Ensure ssl is ready for the primary domain. Consider the correct vesion of the domain. www or without.
  • dns accesss is ready to go to update domaina details.
  • Get a working local copy of the existing site incase we need to refer to it again for data or otherwise
  • Check for 404 brokenlinks on screaming frog
  • Copy non wordpress folders from the old site to the new site
  • Lost password screen looks good and works - test it, ensure you get the email
  • 404 page template is good
  • Page redirects - check the redirects are working
  • In WordPress general settings site url is using HTTPS - These addresses can have effect on Canonical urls which can severely affect SEO
  • Check there is an XML sitemap on the website
  • Ensure all addresses on the site are hyperlinked to google maps and wrapped in html <address>
  • If using sengrid to send email client is using their own account
  • Ensure menus on mobile match menus of Desktop.
  • Search site for dummy content strings such as ‘Lorem ipsum dolor sit amet, consectetur adipiscing elit’
  • Search site for staging website urls such as ‘wpengine’


  • Scan site for Vulnerabilites with Wordfence cli or Wordfence Plugin.


  • Ensure all gravity forms use the international phone number.
  • All forms have a name on the from address. (otherwise it default to email address and looks ugly)
  • All forms have date in correct format (AU).

Post-launch Checklist

Update all stakeholders - Tell them to do updates on the live site from this point.. rather then then dev or staging sites.


  • Create wp user administrator level account for client.
  • Lost password screen looks good and works - please test you get the email.


  • Author pages are set appropriately on post content
  • Author bios have been written

Site Settings


  • Check for 404 brokenlinks on screaming frog
  • Http needs to redirect to https
  • Ensure both www redirects to non www work
  • Ensure non / urls redirects to urls with a /


  • Clean up plugins . Only leave plugins crucial to the production site. Remove any development plugins.


  • Ensure all plugin licenses are valid and relative to the client. Never deploy a premium plug-in without a license. Even if the plug-in is not asking to be updated. Plug-ins that cannot be updated represent a severe security risk.

Contact Forms

  • Test Forms go to the right email address and the reponses on the form are clear.
  • Mailchimp/activecampaign integrations with gravity forms are working.
  • Ensure forms are sent from noreply@……..

Spam proofing

Don’t launch anything into production without doing spam proofing due diligence. Just because staging was not getting spam doesn’t mean production will be the same.

  • add waf rules on server configuration
  • Google recapture v3
  • Disable comments of not needed


  • Set file permissions on wp-config.php to be chmod 440 wp-config.php
  • Add wordfence with 2fa enabled for clients and admins

SEO & tracking

  • Add Google analytics code
  • XML sitemap on the website
  • Robots file linking to sitemap
  • Check canonicals are self referencing
  • Configure yoast to ensure the crawl is crawling the main content. Found in appearence and content types.
  • Run semrush report for technical SEO errors. Create tasks to fix errors
  • Check exists and is allowing visitors to the site but not the wp-admin

WooCommerce website deployment Checklist

  • Check all email addresses are correct in woocommerce > settings > emails
  • Put current site in maintenance mode, create backup store locally then deploy new site.
  • Ensure Ecommerce integration is set to live not testing.
  • Order received emails are sent.
  • My Account / lost password / funcitonality is styled
  • Checkout error message is styled
  • Payment processing animated svg
  • Subscription orders appear in 3pl (shipbob, mainfrieght)
  • User can checkout as guest and also with an account.
  • Paypal, stripe and afterpay test orders
  • Currency is correct
  • Timezone is correct
  • Export / Import existing active subscription codes


  • Google maps are working. Sometimes they can stop working if not configured with the production url.
  • Google recapture is working
This post is licensed under CC BY 4.0 by the author.

Comments powered by Disqus.