Most people install WordPress and jump straight to picking a theme. It feels productive. But skipping your core settings first is like furnishing a house before fixing the plumbing. This WordPress settings guide walks you through every setting that actually matters, in the order you should tackle them, so your site is built on a solid foundation from day one.
Whether you just launched your first business website or you have had a site for a while and suspect something is misconfigured, this guide will help you get it right. We will cover what each setting does, why it matters for your SEO, security, speed, and user experience, and which ones you can safely skip for now.
Why This WordPress Settings Guide Matters More Than You Think
WordPress is powerful out of the box, but its default settings are not optimized for a business website. Some defaults actively hurt your SEO. Others leave security gaps. A few create a poor first impression for visitors.
The good news is that most of these settings take less than two minutes to change. The impact, though, is long-lasting. Configuring WordPress correctly at the start saves you from fixing broken links, poor search rankings, and trust issues down the road.
Here is what getting your settings right actually affects:
- SEO: Search engines read your site structure, URLs, and metadata to decide how to rank you.
- Speed: Certain settings control how WordPress caches and serves content.
- Security: Defaults like open user registration and file editing can expose vulnerabilities.
- Credibility: A site with the wrong title, tagline, or timezone looks unfinished to visitors and clients.
Section 1: General Settings (Start Here First)
Navigate to Settings > General in your WordPress dashboard. This is your starting point for any WordPress initial setup.
Site Title and Tagline
Your site title is not just a label. It appears in browser tabs, search results, and when your site is shared on social media. Use your business name exactly as you want it to appear publicly.
The tagline sits just below your title on many themes and in your site’s HTML metadata. The WordPress default is “Just another WordPress site.” That default has been indexed on thousands of websites and signals an unconfigured, unprofessional site.
Replace it with a short, clear description of what you do. For example: “Accounting Services for American Small Businesses” or “Handmade Leather Goods, Shipped Worldwide.” Keep it under 60 characters if possible.
WordPress Address vs. Site Address
These two fields should almost always be identical. The WordPress Address is where your core files live. The Site Address is what visitors type to reach you. If they differ, you can run into redirect loops or broken pages.
Unless your developer has specifically set them to be different for a technical reason, make sure both fields show the same URL, with the correct prefix, either http or https. If you have an SSL certificate installed (and you should), both addresses must begin with https, not http.
Using https tells browsers and search engines your site is secure. Without it, visitors may see a “Not Secure” warning in their browser, which immediately destroys trust.
Email Address
This is the address WordPress uses to send you admin notifications, password reset emails, and new comment alerts. Use an email address you actually check. A professional email using your domain name, like hello@yourbusiness.com, is far better than a personal Gmail account.
Membership and Default User Role
Unless you are building a membership site or a community platform, keep “Anyone can register” unchecked. Open registration is a common entry point for spam accounts and, in some cases, malicious users.
If you do need user registration, for example for a course site or client portal, set the Default Role to “Subscriber.” This gives new users the minimum access level. You can always upgrade individual users later.
For a deeper look at building gated communities, read our guide on No-Code Membership Sites: Create Gated Content Without Developers.
Timezone, Date Format, and Time Format
Set your timezone to match your business location. This affects when scheduled posts go live, when comments are timestamped, and how automated emails are timed. Getting this wrong can cause posts to publish at 3am instead of 9am.
Choose a date format that matches your audience. If you serve a primarily US audience, Month/Day/Year feels natural. For international or African audiences, Day/Month/Year is clearer and avoids confusion.
Key Takeaway: General settings define your site’s identity. Spend five minutes here to avoid looking unprofessional in search results and social previews.
Section 2: Writing Settings
Go to Settings > Writing.
Default Post Category
WordPress ships with a category called “Uncategorized.” If you never change this, every post you publish without manually selecting a category gets filed there. This category name often appears in your URLs and on your site, which looks sloppy and unprofessional.
Rename it to something relevant to your content. Go to Posts > Categories, edit Uncategorized, and change the name and slug to match your primary content topic, for example “Business Tips” or “Industry News.”
Post Format
For most business websites and blogs, the Standard post format is all you need. Leave the others alone unless your theme has specifically designed layouts for video or gallery posts.
Skip for Now
The “Post via Email” section lets you publish posts by sending an email to a special address. This is a legacy feature most business owners will never use. Skip it entirely.
Key Takeaway: Writing settings are mostly set-and-forget, but fixing the default category takes 60 seconds and prevents an SEO and presentation issue that trips up most beginners.
Section 3: Reading Settings
Go to Settings > Reading. This section contains one of the most dangerous default settings in all of WordPress.
Homepage Display
WordPress gives you two options for your homepage:
| Option | Best For |
| Your latest posts | Bloggers, content-first sites |
| A static page | Business websites, service providers |
If you are building a business website, set this to “A static page.” Then select the page you want as your homepage from the dropdown. This gives you full control over what visitors see first, rather than a reverse-chronological list of blog posts.
If you have not created your homepage yet, create a blank page called “Home” first, then come back here to assign it.
Blog Pages Show at Most
This controls how many posts appear on your blog listing page before a pagination link appears. Ten is the default. For most business blogs, five to seven posts per page is enough and loads faster.
Search Engine Visibility
There is a checkbox that reads: “Discourage search engines from indexing this site.” During WordPress installation, some setups check this box automatically so you can build privately before launch. The problem is that people forget to uncheck it.
If this box is checked, Google cannot index your site. You will not appear in search results at all, no matter how strong your SEO is.
Check right now that this box is unchecked. If your site is live and ready for visitors, it should never be checked.
Key Takeaway: The search engine visibility checkbox alone could be costing you all your organic traffic. Verify it is unchecked before anything else.
Section 4: Discussion Settings (Comments and Moderation)
Go to Settings > Discussion.
Comments can add value to a blog by building community and adding fresh content to your pages. They can also become a spam nightmare and a time sink for a new business owner.
Recommended Settings for Business Sites
For most new business websites, the smartest approach is controlled moderation:
- Check “Comment author must fill out name and email.”
- Check “Users must be registered and logged in to comment” if you want tighter control.
- Check “Comment must be manually approved” to prevent spam from appearing publicly.
- Set “Hold a comment in the queue if it contains 2 or more links” since spam comments almost always contain multiple links.
Notifications
You can choose to receive an email when someone posts a comment or when a comment is held for moderation. Turn these on if you check your email regularly. Turn them off if you prefer to review comments in bulk once a day via the Comments section in your dashboard.
Avatar Settings
Avatars are the small profile images that appear next to comments. WordPress uses a service called Gravatar to source them. You can set a default avatar for users who do not have one. “Mystery Person” is the most neutral and professional choice for a business site.
Key Takeaway: Enable manual comment moderation from day one. Spam comments hurt your credibility and can slip through if you rely on automatic filters alone.
Section 5: Media Settings
Go to Settings > Media.
When you upload an image to WordPress, it automatically creates multiple resized copies: thumbnail, medium, and large. These copies are used in different parts of your site so your theme always has an appropriately sized image to display without distortion.
Default Image Sizes
The WordPress defaults are:
- Thumbnail: 150 x 150 pixels
- Medium: 300 x 300 pixels
- Large: 1024 x 1024 pixels
These are fine for most sites. Only change them if your theme documentation specifically recommends different dimensions.
Organize Uploads Into Month and Year-Based Folders
This checkbox is checked by default. Leave it checked. It keeps your media library organized as your site grows, making it much easier to find images later.
Key Takeaway: Media settings rarely need changing for beginners. Review them briefly, confirm the defaults look reasonable, and move on.
Section 6: Permalinks, Your Most Important Setting in This WordPress Settings Guide
Go to Settings > Permalinks. This single setting has a bigger direct impact on your SEO than almost anything else you will configure.
Permalinks are the URL structure for every page and post on your site. WordPress offers several options:
| Option | Example URL | Verdict |
| Plain | /?p=123 | Never use this |
| Day and name | /2025/01/15/post-name/ | Avoid for business sites |
| Month and name | /2025/01/post-name/ | Avoid: dates feel outdated |
| Numeric | /archives/123 | Never use this |
| Post name | /post-name/ | Use this one |
| Custom structure | Define your own | Advanced users only |
Why “Post Name” Is the Right Choice
The Post Name structure gives you clean, readable URLs like yourdomain.com/about-us/ or yourdomain.com/WordPress-settings-guide/. These URLs are easy for humans to read and remember, they signal to Google what the page is about before it even crawls the content, and they look professional when shared on social media or in emails.
A URL like yourdomain.com/?p=123 tells nobody anything. It is harder to remember, impossible to optimize, and it signals to visitors that the site was rushed.
One Critical Warning Before You Switch
If your site is already live and you change your permalink structure, every existing URL on your site will change. This can break inbound links from other websites and confuse Google’s index of your pages.
If your site is brand new, change this immediately. If your site has been live for months with existing traffic, consult an SEO professional before making the switch.
Key Takeaway: Set your permalinks to “Post name” before you publish a single piece of content. This is the single highest-impact setting in the entire configure WordPress settings process.
For more on how your URL and site structure affects both users and search engines, read our guide on WordPress Navigation Menus: Set Up Your Site Structure for Users and SEO.
Section 7: Privacy Settings
Go to Settings > Privacy.
WordPress includes a built-in Privacy Policy page generator. If you have not set one up yet, click “Create” and WordPress will generate a starter page with common legal language you can customize to match your business.
A privacy policy is not optional if you collect any data from visitors, including email addresses, contact form submissions, or analytics tracking. In many regions, including across the EU and increasingly in Africa, it is a legal requirement.
Once you have a privacy policy page, come back here and assign it using the dropdown. WordPress then links to it automatically in some themes and plugins.
For a broader look at protecting yourself legally, our article on Terms of Service Explained: Protect Your Online Business Legally covers every document your site needs and why.
Key Takeaway: Assign a privacy policy page before you launch. It takes five minutes and protects you legally while building visitor trust.
Section 8: Settings You Can Skip Early On
Not everything in WordPress needs your attention on day one. Here are the areas you can safely ignore until you have a specific reason to change them:
- Customize > Additional CSS: Skip unless you know CSS and need custom styling.
- Tools > Import/Export: Only relevant if you are migrating content from another platform.
- Users > Your Profile: Set your display name and bio, but the rest is optional for now.
- Post via Email (Writing Settings): A legacy feature with no practical use for most businesses.
- Advanced media settings: Only relevant when your theme requires specific image dimensions.
Trying to configure everything at once leads to decision fatigue and mistakes. Lock in the essentials first and come back to the rest when you have a clear reason.
Section 9: Two Settings Outside the Settings Menu
These two items are not found under the Settings menu, but they belong in any complete WordPress initial setup process.
User Profile Display Name
Go to Users > Your Profile. Find the “Display name publicly as” dropdown. Make sure it does not show your login username. Use your real name or your business name instead.
Displaying your username publicly is a minor but real security risk. Usernames are half of the login credentials someone would need to access your admin account. Remove that advantage from potential attackers with one dropdown change.
Install Your Essential Plugins
WordPress settings alone do not complete your setup. Plugins extend your site’s functionality, and a handful are essential from the start: an SEO plugin like Yoast or Rank Math, a security plugin, a caching plugin for speed, and a contact form plugin.
For a curated list of exactly what you need, read our guide on Must-Have WordPress Plugins for New Business Websites.
Frequently Asked Questions
How often should I review my WordPress settings? Review your core settings when you first launch, then again when you make major changes such as adding a membership area, changing your domain, or switching themes. Most settings need no attention once correctly configured.
What to Do Next
You now have a complete wordpress settings guide to work from. Here is exactly what to do in the next 30 minutes:
- Work through each Settings section in order. Start with General, then Reading, then Permalinks. These three have the biggest immediate impact. Use this article as a checklist, marking each section complete as you go.
- Set up your site structure and navigation. Once your settings are locked in, the next step is building a navigation menu that serves both your visitors and search engines. Read our guide on WordPress Navigation Menus: Set Up Your Site Structure for Users and SEO.
- Install your essential plugins. Settings alone do not complete your configure WordPress settings process. Add the plugins that handle SEO, security, speed, and contact forms. Our guide on Must-Have WordPress Plugins for New Business Websites tells you exactly which ones to install and why.
- Verify your domain and branding are solid. If you are still working through your business identity, our complete resource From Idea to Domain: Complete Checklist for Launching Your Business Identity walks you through every step before you go live.
