Tutorials

Automattic's liberate.sh copies a Wix, Squarespace, Shopify or Webflow site and hands it back as a WordPress zip. Here is how it works and what to check.

Stop guessing which plugin is slow. Query Monitor attributes every query, hook and HTTP call to the code responsible. Here's how to read it.

Testing your cached homepage tells you nothing. Here's how to load test the paths that actually break, and why to tell your host first.

WordPress still has no built-in 2FA in 2026. Here's how to set it up properly, which method to pick, and what 2FA genuinely can't protect.

A practical guide to backing up a WordPress site, restoring it without breaking serialized data, and testing that your backups actually work.

Route WordPress email through a provider's API instead of PHP mail() or SMTP, with the domain authentication that actually keeps messages out of spam.

A step-by-step guide to configuring Cloudflare settings for WordPress: SSL/TLS, caching, rules, and security, without breaking your admin or login.

Stop scrapers, credential-stuffing bots, and xmlrpc abuse before they hit your server. A step-by-step guide to blocking WordPress bot traffic with Cloudflare.