WordPress.com has come a long way since its early days of offering a simple way to get into blogging without having to worry about how to set up a self-hosted WordPress site.
I know some people use WordPress.com as a stepping stone to a self-hosted site. I did. I wanted to host my own site because I wanted to be free of restrictions. What that meant in those days (this is back in 2007) is that I could put Google Adsense adverts on my blog.
And I was attracted to the idea of getting to grips with how to do it at all – how to set up a database, how to set up the config file, and all the other bits that go to making a web site. It was nerve-wracking at first. I was afraid that everything I did would break the site and leave me lost in a maze.
It didn’t happen, but what I did get into were the twin notions of ‘optimisation’ and ‘security’.
Optimisation includes using keywords that accurately reflect what the site is about. That way, when someone searches in a search engine such as Google or Bing, your site is likely to be tagged because your keywords fit well with what the page on your site is about.
But optimisation also meant making the site fast to load. As search engine optimisation experts said – it didn’t matter how attractive your site looked, or how perfectly apt the keywords were, no one was going to hang around long enough to see your site if it took a long time to load.
Security meant long and complex login passwords, and it meant keeping themes and plugins up to date. I had to destroy one site when it got infected with a virus that I introduced when I tried out a theme from a dubious source.
I tried to clean up the infection but in the end I nuked the site. That meant first extracting the xml file with the text of the blog posts, then deleting the database, the themes, and the plugins, and starting from scratch.
Not something I would recommend, but I learned from it. One thing I learned was to put a security system in place to prevent it happening again.
Oh yes, and to take regular backups. And store at least one copy off-site.
Later, much later, I built a WooCommerce store. I didn’t have a product in mind, just the desire to build a store with WooCommerce. That’s another thing that has got easier over the years. The setup wizard is good and the explainer videos are excellent.
But it also means that security has got to be nailed down because customers will be signing up, creating accounts, giving their credit card details, and expecting to receive stuff.
And backups becomes a much bigger issue. It’s one thing if your blog posts go missing – sad, but only sad for you. If your customers’ data goes missing, you are going to be responsible for cleaning up the mess.
Some of the front runners for taking payments on WooCommerce stores don’t take any sensitive details on your site. For example, Stripe puts a little popup on your site at the payment stage, and the information your customer puts in is encrypted and sent straight to Stripe.
So you would think that takes care of credit card security. Not so. If your site is hacked, the hacker can, for example, execute a ‘man in the middle’ attack. Your customer thinks they are going to Paypal or Stripe, but secretly they are being led off to something that looks like them but really it is giving your customers details to the hacker who has put a lookalike page over the real page.
That’s just one issue. They are not impossible to overcome – after all, WooCommerce powers an awful lot of stores both big and small – but you have to take steps to keep your site secure.
A Good Web Host
A good web host will complement the hard work you put into making your site load fast. A bad web host will overstretch resources, fail to guard your site from having its resources hogged by another site on the same server. It can even let in a hacker via the level above your site on the server.
A good web host will take regular backups. And they will make extra backups available to you so you can store them somewhere else – a copy on your hard drive and a copy with something like Amazon AWS, for example.
Managed shared hosting is an option, where they take care of optimisation, backups, and security – with a bigger monthly cost.
A virtual private server (VPS) is the next step up, but that requires a lot more technical skill. There are services that will act as a kind of intermediary or control panel to help set up your site on a VPS, but if it is already starting to give you a headache, it’s something to think about further down the line.
It takes a lot of reading to find accurate data on good versus bad web hosts. I generally look at Review Signal’s benchmarks as a starting point.
A fast web host on shared hosting with cPanel should be around $20/month. Access to top-notch WordPress themes that show off your store to its best advantage will be, let’s say, $100/year. WooCommerce itself is free, but you might need some extensions to get your store to do exactly what you want. Or maybe not. So that’s $300/year or more.
WordPress.com has a business plan that enables you to use your own domain name, use any of their premium themes, add plugins, change the CSS, set up WooCommerce, and set up Google Analytics. It also offers unlimited storage, but I can’t see that being an issue because it would take a huge store with many thousands of products to make storage an issue.
I have the Premium plan here on WordPress.com. It’s one step down from the business plan, which I haven’t tried. I haven’t tried the business plan because my partner and I already have our e-commerce store set up on a self-hosted site and I can’t see any reason to change.
But if I was starting again I would look at the WordPress.com business plan option (affiliate link) because the two big things that are taken care of – optimisation and security.
Here’s the list of what the business plan offers for £20/month in the UK (not sure what the cost is in other parts of the world – click the link and find out – it should geolocate to wherever you are).
- Google Analytics support
- Unlimited storage
- Remove WordPress.com branding
- Custom Domain Name
- Jetpack Essentials
- Email & Live Chat Support
- Unlimited Premium Themes
- Advanced Design Customization
- monetisation (WordAds, Adsense and affiliate ads)
- add plugins
Squarespace (£21/month in the UK) and Shopify ($29/month) are the front runners.
I think the biggest reason I would choose WordPress.com over either of these is that if at some point I wanted to self-host my store, I could export all my settings/database information/themes/etc . I don’t think you can do this with Squarespace or Shopify.