Complete WordPress Hosting Guide for Israelis

WordPress is very flexible — it'll run on almost any shared hosting, but there are requirements you should verify to ensure a fast, stable site.

• PHP 8.0+: Preferably PHP 8.3 which is significantly faster than previous versions. Don't accept hosting that only supports PHP 7.4 in 2026.
• MySQL 5.7+ or MariaDB 10.4+: Modern databases with better performance and JSON handling.
• HTTPS with SSL: Essential for any WordPress site, especially WooCommerce stores.
• Disk space: Minimum 5 GB for a small blog, 20+ GB for an active e-commerce store.
• PHP memory: 256 MB suffices for most sites, 512 MB for complex sites with many plugins.
• Automatic backup: Mandatory. Should also have an external backup (UpdraftPlus/Jetpack Backup).

Three main options:

General shared hosting

Cheapest. Works fine for a small WordPress site or blog with modest traffic. Verify the provider supports one-click WordPress installation (Softaculous), updated PHP version, and free SSL.

Managed WordPress hosting

Specifically tailored for WordPress. Includes LiteSpeed with LSCache, automatic image optimization, security scans, and automatic core/plugin updates. Costs slightly more but saves management time and provides better performance.

VPS with WordPress

For large WordPress sites or high-traffic WooCommerce stores. Provides maximum performance and control, but requires maintenance. With managed VPS you get both the performance advantage and easy management.

More info: WordPress Hosting plans.

1. Access cPanel and find "WordPress Manager by Softaculous" or "WordPress Toolkit" — one-click install tool.
2. Choose domain and directory (leave blank for root folder).
3. Enter admin details — username (not admin!), strong password, and email.
4. Choose initial theme (you can change later).
5. Confirm installation — usually takes 30-60 seconds.
6. Visit /wp-admin/ and log in.
7. Set language if needed in Settings → General.
8. Permalinks: Settings → Permalinks → "Post name". Essential for SEO.
9. Upload theme structure or install a new theme.
10. Install essential plugins (see list below).

WordPress can be very fast or very slow — depends on optimization. Here are the important steps in order of importance.

1. Modern web server + caching

If your provider uses LiteSpeed, install LSCache (free). This alone can speed up the site 5-10×. Otherwise, use WP Rocket (paid) or W3 Total Cache (free).

2. Image optimization

Images are 60-80% of page weight. Use a plugin like ShortPixel, Smush, or Imagify for automatic compression. Enable lazy loading (built into WP since version 5.5).

3. CDN

Cloudflare CDN is free and enough for most sites. It accelerates static file delivery and protects against basic attacks.

4. Database cleanup

WP-Optimize or WP-Sweep clean old revisions, spam, expired transients. Run once a month.

5. Plugin reduction

Every plugin slows the site. Keep only what you actually use. Replace heavy plugins with lighter alternatives.

6. Fast theme

Themes like Astra, GeneratePress, and Kadence are 2-3× faster than "do-it-all" themes like Avada or Divi.

7. PHP 8.3

If your provider supports it, switch to PHP 8.3. Immediate 15-30% performance improvement.

WordPress is a popular target for attacks. The following steps prevent 95% of breaches.

• Username not admin: Use a unique username, not "admin" or "administrator".
• Strong password: 16+ characters, unique. Use a password manager.
• 2FA: Plugin like Wordfence, Two Factor Authentication, or iThemes Security.
• Login attempt limits: After 5 failed attempts — block.
• Regular updates: Core, plugins, themes. Most breaches exploit old versions.
• WAF (firewall): Cloudflare, Sucuri, or Wordfence Premium.
• Change wp-admin URL: WPS Hide Login plugin.
• Block xmlrpc.php: Unless you use it, block it.
• External backup: UpdraftPlus + Google Drive/Dropbox/S3.
• Disable file editing from wp-admin: Add to wp-config.php: define('DISALLOW_FILE_EDIT', true);

Essential

• LSCache (if LiteSpeed) or WP Rocket — caching
• Yoast SEO or Rank Math — SEO
• Wordfence or Sucuri — security
• UpdraftPlus — external backup
• ShortPixel or Smush — image optimization

Useful

• Contact Form 7 or WPForms — forms
• WP-Optimize — DB cleanup
• Akismet — anti-spam
• Redirection — redirect management (essential after slug changes)
• Site Kit by Google — GA + Search Console + AdSense in WP

For store (WooCommerce)

• WooCommerce — store itself
• WooCommerce Stripe Gateway — payments
• YITH WooCommerce Wishlist — wishlists

Rule of thumb: fewer plugins, better. Every unused plugin = unnecessary weight.

Someday you'll need a backup. Either a hack, an editing mistake, or an update that breaks something. Here's how to ensure you can restore.

Backup layers

• Provider backup: Most providers do daily backup. Verify you have self-restore access through cPanel.
• Plugin backup: UpdraftPlus, BackWPup, or BlogVault. Save to Google Drive, Dropbox, or S3.
• Backup before updates: Always backup before major core/plugin updates.

Backup frequency

• Blog with weekly new content: weekly backup + before changes
• WooCommerce store: daily or every few hours
• Static business card site: monthly + before changes

Restore testing

Once every two months, try restoring the backup to a staging environment. A backup that can't be restored isn't a backup.