Before we start: How the Site Health score works in WordPress<\/strong><\/div><\/summary>\nThe Site Health functionality in WordPress adds robust tools that help you identify potential issues that could affect your site’s performance or security, like outdated software or incorrect settings.<\/p>\n\n\n\n
The Site Health tool runs a series of tests and then shares results and recommendations with you based on what it finds.<\/p>\n\n\n\n
By using the Site Health screen, you can catch problems early and fix them, which helps keep your site safe and working well.<\/p>\n\n\n\n
In your WordPress dashboard, you’ll find two pages under Tools > Site Health<\/strong><\/em>.<\/p>\n\n\n\n![\"Tips](\"https:\/\/mllj2j8xvfl0.i.optimole.com\/cb:c5QE.37290\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/themeisle.com\/blog\/wp-content\/uploads\/2023\/10\/tools-site-health.png\")
<\/figure><\/div>\n\n\nThe first page displays your Site Health Status<\/strong> with results categorized as:<\/p>\n\n\n\n\n- Critical<\/li>\n\n\n\n
- Recommended<\/li>\n\n\n\n
- Good<\/li>\n<\/ul>\n\n\n\n
These tests are what WordPress uses to calculate your Site Health Score. Needless to say, the critical tests weigh more heavily, and not faring well in them can dampen your chances to get 100% Site Health score.<\/p>\n\n\n
\n![\"site](\"https:\/\/mllj2j8xvfl0.i.optimole.com\/cb:c5QE.37290\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/themeisle.com\/blog\/wp-content\/uploads\/2019\/05\/Site-health-score.jpg\")
<\/figure><\/div>\n\n\n\ud83d\udc49 The health check results show critical information pertaining to both performance and security<\/strong>. The performance checks include checking for:<\/p>\n\n\n\n\n- WordPress version<\/li>\n\n\n\n
- Latest PHP version<\/li>\n\n\n\n
- SQL server version<\/li>\n\n\n\n
- Installation of recommended PHP modules<\/li>\n\n\n\n
- UTF8MB4 support<\/li>\n\n\n\n
- Scheduled events<\/li>\n\n\n\n
- Working HTTP requests<\/li>\n\n\n\n
- REST API availability<\/li>\n\n\n\n
- Performing loopback requests<\/li>\n<\/ul>\n\n\n\n
\ud83d\udc49 The security checks include:<\/p>\n\n\n\n
\n- Active themes<\/li>\n\n\n\n
- Up to date plugins<\/li>\n\n\n\n
- HTTPS connection<\/li>\n\n\n\n
- Secure communication<\/li>\n\n\n\n
- Debug mode off<\/li>\n\n\n\n
- Communication with WordPress.org<\/li>\n\n\n\n
- Background updates enabled<\/li>\n<\/ul>\n\n\n\n
The second page is the Site Health Info page<\/strong> that contains a load of information related to your site health. There’s a convenient button here that can copy all the information to your clipboard so that you can share it with a developer who’s supporting you. For example, if you’re asking a plugin author for help, this gives you a convenient way to provide them with information about your site:<\/p>\n\n\n\n![\"SIte](\"https:\/\/mllj2j8xvfl0.i.optimole.com\/cb:c5QE.37290\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/themeisle.com\/blog\/wp-content\/uploads\/2019\/05\/Site-health-info.jpg\")
<\/figure><\/div><\/div><\/details>\n<\/div>\n\n\n<\/div><\/div>\n\t\t<\/div>\n\t\t\t\n\t\t \t\n\t\t \t\tLearn how to get a perfect Site Health score in #WordPress with this tutorial \ud83d\udcdd<\/a>\n\t\t \t<\/div>\n\t\t \t\n\t\t \tClick To Tweet \n\t\t \t\t<\/span>\n\t\t \t<\/a>\n\t\t <\/div>\n\t\t<\/div>\n\n\n<\/div>\n\n\n\nTen tips to get a 100% Site Health score in WordPress<\/h2>\n\n\n\n
Now that you know the checks that WordPress runs to assess your website, here's what you can do to get a 100% Site Health score.<\/p>\n\n\n\n
\ud83d\udcda Table of contents<\/strong>:<\/p>\n\n\n\n\n- Keep WordPress up to date<\/a><\/li>\n\n\n\n
- Keep themes and plugins up to date<\/a><\/li>\n\n\n\n
- Remove unused themes and plugins<\/a><\/li>\n\n\n\n
- Use the latest SQL server version<\/a><\/li>\n\n\n\n
- Upgrade to the latest PHP version<\/a><\/li>\n\n\n\n
- Make sure debug mode is turned off<\/a><\/li>\n\n\n\n
- Install SSL certificate and use HTTPS<\/a><\/li>\n\n\n\n
- Leave the REST API enabled<\/a><\/li>\n\n\n\n
- Make sure WP Cron is enabled<\/a><\/li>\n\n\n\n
- Install all the recommended PHP modules<\/a><\/li>\n<\/ol>\n\n\n<\/div>\n\n\n\n
1. Keep WordPress up to date<\/h3>\n\n\n\n
We've heard this often enough, but in practice, not many of us pay attention to the update notifications that appear with (annoying!) frequency on our dashboard for major updates. Fortunately, updating WordPress is now just a one-click affair. By default, minor changes happen automatically.<\/p>\n\n\n
\n![\"Update](\"https:\/\/mllj2j8xvfl0.i.optimole.com\/cb:c5QE.37290\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/themeisle.com\/blog\/wp-content\/uploads\/2023\/10\/wordpress-updates.png\")
<\/figure><\/div>\n\n\nAnd while it's possible to disable background updates, it's really better not to do so.<\/p>\n\n\n\n
The test results will let you know if your site is up to date and if it's communicating with WordPress.org. For the best way to run these updates, check out our guide on how to safely update WordPress<\/a>.<\/p>\n\n\n<\/div>\n\n\n\n2. Keep themes and plugins up to date<\/h3>\n\n\n\n
Don't stop with updating the WordPress core. Go the whole distance and update all the themes and plugins<\/a> as well. You can update these extensions from the regular WordPress updates area (Dashboard \u2192 Updates<\/strong>), as well as the respective Themes<\/strong> and Plugins<\/strong> areas:<\/p>\n\n\n\n![\"Update](\"https:\/\/mllj2j8xvfl0.i.optimole.com\/cb:c5QE.37290\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/themeisle.com\/blog\/wp-content\/uploads\/2019\/05\/Plugins-update.jpg\")
<\/figure><\/div>\n\n<\/div>\n\n\n\n3. Remove unused themes and plugins<\/h3>\n\n\n\n
Beyond updating themes and plugins that you are<\/em> using, you'll also want to remove any themes and plugins that you are not using. Themes and plugins that are not updated are a security risk, which is why it's safer to remove them.<\/p>\n\n\n\nThere is one exception, though - leave the latest default theme installed, even if you're not using it (e.g. Twenty Twenty-Three<\/strong>).<\/em><\/p>\n\n\n<\/div>\n\n\n\n4. Use the latest SQL server version<\/h3>\n\n\n\n
Your database server's software is what powers the database that WordPress uses to store your content and settings. There are two common options, depending on your host's configuration:<\/p>\n\n\n\n
\n- MySQL<\/li>\n\n\n\n
- MariaDB (a fork of MySQL)<\/li>\n<\/ol>\n\n\n\n
To improve your site's performance and security (and Site Health score), you'll want to make sure you're using the latest version - WordPress recommends running MySQL version 5.7+ or MariaDB version 10.4+.<\/p>\n\n\n\n
If you're not sure how to do this, the best way to get started is to reach out to your host's support.<\/p>\n\n\n
<\/div>\n\n\n\n5. Upgrade to the latest PHP version<\/h3>\n\n\n\n
PHP is the programming language that powers much of WordPress' functionality.<\/p>\n\n\n\n
Upgrading to the latest version offers big performance improvements, as well as better security (because older versions no longer receive security<\/em> updates).<\/p>\n\n\n\nCurrently, WordPress recommends that you use PHP 7.4+.<\/p>\n\n\n\n
Many WordPress hosts give you an option to choose your PHP version from your dashboard. Or, you can reach out to your host's support for help.<\/p>\n\n\n\n
Either way, we'd recommend you follow our guide on how to safely upgrade your PHP version<\/a>.<\/p>\n\n\n<\/div>\n\n\n\n6. Make sure debug mode is turned off<\/h3>\n\n\n\n
WordPress has a few built-in debugging tools that generate helpful messages to developers. The most important tool is WP_DEBUG in your WordPress install.<\/p>\n\n\n\n
However, on a live site, the debug mode<\/a> should not<\/strong> be turned on because it can reveal a load of information about your website to visitors and is, therefore, a security risk. That's why WordPress will ding your Site Health score if you still have debug mode turned on.<\/p>\n\n\n\nTo configure the debug mode, find this line in your wp-config.php<\/em> file:<\/p>\n\n\n\ndefine( 'WP_DEBUG', true );<\/code><\/p>\n\n\n\nTo turn it off, you can either change true<\/code> to false<\/code>, or just delete the entire line.<\/p>\n\n\n<\/div>\n\n\n\n7. Install SSL certificate and use HTTPS<\/h3>\n\n\n\n
HTTPS (Secure HTTP) is a method of encryption that secures the communication between your server and the browser of any user visiting your website, and it's what gets you that trust-building green padlock in web browsers.<\/p>\n\n\n\n
Google Chrome marks all non-HTTPS pages as \"Not Secure:\":<\/p>\n\n\n
\n![\"Insecure](\"https:\/\/mllj2j8xvfl0.i.optimole.com\/cb:c5QE.37290\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/themeisle.com\/blog\/wp-content\/uploads\/2019\/05\/Inseure-website.jpg\")
<\/figure><\/div>\n\n\nTo avoid this, and get your Site Health score up, you'll need to install an SSL certificate and then migrate your site to HTTPS.<\/p>\n\n\n\n
Many hosts now offer free SSL certificates via Let's Encrypt that you can install with a few clicks, or you can find other free and cheap SSL certificates<\/a>. Once you've installed your SSL certificate, follow our guide to safely move to HTTPS<\/a>.<\/p>\n\n\n<\/div>\n\n\n\n8. Leave the REST API enabled<\/h3>\n\n\n\n
The WP REST API<\/a> helps your WordPress core communicate with the various web, desktop, and mobile applications on the internet. This helps WordPress work effectively as a content management system<\/a>, storing and serving up content to be visible on the internet.<\/p>\n\n\n\nBy default, the WP REST API is enabled, but some plugins (especially security plugins<\/em>) and developers will disable it.<\/p>\n\n\n\nHowever, if you want to get a perfect WordPress Site Health score, you'll need to leave the WP REST API enabled. Most plugins or tools that disable the REST API<\/a> will also give you a setting to leave it enabled.<\/p>\n\n\n<\/div>\n\n\n\n9. Make sure WP Cron is enabled<\/h3>\n\n\n\n
Normally, WordPress handles a number of routine tasks such as backing up, publishing posts, or checking for updates. This function is handled by the cron job system<\/a>, a special technology used by servers to handle scheduled tasks or recurring events. Many plugins also rely on the WordPress cron system to carry out tasks, but sometimes they hog most of the resources.<\/p>\n\n\n\nTo check if WP Cron is working, you can use the free WP-Cron Status Checker plugin<\/strong> to get a new dashboard widget that tells you its status:<\/p>\n\n\n\n![\"WP](\"https:\/\/mllj2j8xvfl0.i.optimole.com\/cb:c5QE.37290\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/themeisle.com\/blog\/wp-content\/uploads\/2023\/10\/wp-cron-status-checker.png\")
<\/figure><\/div>\n\n\nIf it's not working, you can check if the following line is in your wp-config.php<\/em> file:<\/p>\n\n\n\ndefine('DISABLE_WP_CRON', true);<\/code><\/code><\/pre>\n\n\n\nTo re-enable WP Cron, you just need to remove that line. Or, if that's not the issue, you can reach out to your host's support for more help.<\/p>\n\n\n
<\/div><\/div><\/div><\/div>\n\n
The Site Health functionality in WordPress adds robust tools that help you identify potential issues that could affect your site’s performance or security, like outdated software or incorrect settings.<\/p>\n\n\n\n
The Site Health tool runs a series of tests and then shares results and recommendations with you based on what it finds.<\/p>\n\n\n\n
By using the Site Health screen, you can catch problems early and fix them, which helps keep your site safe and working well.<\/p>\n\n\n\n
In your WordPress dashboard, you’ll find two pages under Tools > Site Health<\/strong><\/em>.<\/p>\n\n\n The first page displays your Site Health Status<\/strong> with results categorized as:<\/p>\n\n\n\n These tests are what WordPress uses to calculate your Site Health Score. Needless to say, the critical tests weigh more heavily, and not faring well in them can dampen your chances to get 100% Site Health score.<\/p>\n\n\n \ud83d\udc49 The health check results show critical information pertaining to both performance and security<\/strong>. The performance checks include checking for:<\/p>\n\n\n\n \ud83d\udc49 The security checks include:<\/p>\n\n\n\n The second page is the Site Health Info page<\/strong> that contains a load of information related to your site health. There’s a convenient button here that can copy all the information to your clipboard so that you can share it with a developer who’s supporting you. For example, if you’re asking a plugin author for help, this gives you a convenient way to provide them with information about your site:<\/p>\n\n\n Now that you know the checks that WordPress runs to assess your website, here's what you can do to get a 100% Site Health score.<\/p>\n\n\n\n \ud83d\udcda Table of contents<\/strong>:<\/p>\n\n\n\n We've heard this often enough, but in practice, not many of us pay attention to the update notifications that appear with (annoying!) frequency on our dashboard for major updates. Fortunately, updating WordPress is now just a one-click affair. By default, minor changes happen automatically.<\/p>\n\n\n And while it's possible to disable background updates, it's really better not to do so.<\/p>\n\n\n\n The test results will let you know if your site is up to date and if it's communicating with WordPress.org. For the best way to run these updates, check out our guide on how to safely update WordPress<\/a>.<\/p>\n\n\n Don't stop with updating the WordPress core. Go the whole distance and update all the themes and plugins<\/a> as well. You can update these extensions from the regular WordPress updates area (Dashboard \u2192 Updates<\/strong>), as well as the respective Themes<\/strong> and Plugins<\/strong> areas:<\/p>\n\n\n Beyond updating themes and plugins that you are<\/em> using, you'll also want to remove any themes and plugins that you are not using. Themes and plugins that are not updated are a security risk, which is why it's safer to remove them.<\/p>\n\n\n\n There is one exception, though - leave the latest default theme installed, even if you're not using it (e.g. Twenty Twenty-Three<\/strong>).<\/em><\/p>\n\n\n Your database server's software is what powers the database that WordPress uses to store your content and settings. There are two common options, depending on your host's configuration:<\/p>\n\n\n\n To improve your site's performance and security (and Site Health score), you'll want to make sure you're using the latest version - WordPress recommends running MySQL version 5.7+ or MariaDB version 10.4+.<\/p>\n\n\n\n If you're not sure how to do this, the best way to get started is to reach out to your host's support.<\/p>\n\n\n PHP is the programming language that powers much of WordPress' functionality.<\/p>\n\n\n\n Upgrading to the latest version offers big performance improvements, as well as better security (because older versions no longer receive security<\/em> updates).<\/p>\n\n\n\n Currently, WordPress recommends that you use PHP 7.4+.<\/p>\n\n\n\n Many WordPress hosts give you an option to choose your PHP version from your dashboard. Or, you can reach out to your host's support for help.<\/p>\n\n\n\n Either way, we'd recommend you follow our guide on how to safely upgrade your PHP version<\/a>.<\/p>\n\n\n WordPress has a few built-in debugging tools that generate helpful messages to developers. The most important tool is WP_DEBUG in your WordPress install.<\/p>\n\n\n\n However, on a live site, the debug mode<\/a> should not<\/strong> be turned on because it can reveal a load of information about your website to visitors and is, therefore, a security risk. That's why WordPress will ding your Site Health score if you still have debug mode turned on.<\/p>\n\n\n\n To configure the debug mode, find this line in your wp-config.php<\/em> file:<\/p>\n\n\n\n To turn it off, you can either change HTTPS (Secure HTTP) is a method of encryption that secures the communication between your server and the browser of any user visiting your website, and it's what gets you that trust-building green padlock in web browsers.<\/p>\n\n\n\n Google Chrome marks all non-HTTPS pages as \"Not Secure:\":<\/p>\n\n\n To avoid this, and get your Site Health score up, you'll need to install an SSL certificate and then migrate your site to HTTPS.<\/p>\n\n\n\n Many hosts now offer free SSL certificates via Let's Encrypt that you can install with a few clicks, or you can find other free and cheap SSL certificates<\/a>. Once you've installed your SSL certificate, follow our guide to safely move to HTTPS<\/a>.<\/p>\n\n\n The WP REST API<\/a> helps your WordPress core communicate with the various web, desktop, and mobile applications on the internet. This helps WordPress work effectively as a content management system<\/a>, storing and serving up content to be visible on the internet.<\/p>\n\n\n\n By default, the WP REST API is enabled, but some plugins (especially security plugins<\/em>) and developers will disable it.<\/p>\n\n\n\n However, if you want to get a perfect WordPress Site Health score, you'll need to leave the WP REST API enabled. Most plugins or tools that disable the REST API<\/a> will also give you a setting to leave it enabled.<\/p>\n\n\n Normally, WordPress handles a number of routine tasks such as backing up, publishing posts, or checking for updates. This function is handled by the cron job system<\/a>, a special technology used by servers to handle scheduled tasks or recurring events. Many plugins also rely on the WordPress cron system to carry out tasks, but sometimes they hog most of the resources.<\/p>\n\n\n\n To check if WP Cron is working, you can use the free WP-Cron Status Checker plugin<\/strong> to get a new dashboard widget that tells you its status:<\/p>\n\n\n If it's not working, you can check if the following line is in your wp-config.php<\/em> file:<\/p>\n\n\n\n To re-enable WP Cron, you just need to remove that line. Or, if that's not the issue, you can reach out to your host's support for more help.<\/p>\n\n\n<\/figure><\/div>\n\n\n\n
<\/figure><\/div>\n\n\n\n
\n
<\/figure><\/div><\/div><\/details>\n<\/div>\n\n\nTen tips to get a 100% Site Health score in WordPress<\/h2>\n\n\n\n
\n
1. Keep WordPress up to date<\/h3>\n\n\n\n
<\/figure><\/div>\n\n\n2. Keep themes and plugins up to date<\/h3>\n\n\n\n
<\/figure><\/div>\n\n3. Remove unused themes and plugins<\/h3>\n\n\n\n
4. Use the latest SQL server version<\/h3>\n\n\n\n
\n
5. Upgrade to the latest PHP version<\/h3>\n\n\n\n
6. Make sure debug mode is turned off<\/h3>\n\n\n\n
define( 'WP_DEBUG', true );<\/code><\/p>\n\n\n\ntrue<\/code> to false<\/code>, or just delete the entire line.<\/p>\n\n\n7. Install SSL certificate and use HTTPS<\/h3>\n\n\n\n
<\/figure><\/div>\n\n\n8. Leave the REST API enabled<\/h3>\n\n\n\n
9. Make sure WP Cron is enabled<\/h3>\n\n\n\n
<\/figure><\/div>\n\n\ndefine('DISABLE_WP_CRON', true);<\/code><\/code><\/pre>\n\n\n\n