WordPress Installation Guide 2026: Complete Step-by-Step Setup

WordPress powers over 43% of all websites on the internet as of 2026 — making it the world's most popular content management system by a massive margin. Installing WordPress is straightforward, but doing it correctly — with a proper database user, correct file permissions, and a configured wp-config.php — makes a significant difference for security and performance from day one.

This guide covers both the recommended one-click installation via cPanel's Softaculous installer and the manual installation method, which gives you more control over configuration.

Method 1: One-Click Install via cPanel (Recommended for Beginners)

1Log into cPanel

Access your hosting account's cPanel dashboard, typically at yoursite.com/cpanel or via your hosting provider's "My Account" portal. You'll need your cPanel username and password from your welcome email.

2Find Softaculous or WordPress Installer

In cPanel, look for the "Softaculous Apps Installer" section, or search for "WordPress" in the search bar. Softaculous is the most common one-click installer. Click "WordPress" then "Install."

3Configure Installation Settings

Fill in the installation form:

Choose Protocol: Select https:// (requires SSL to be active)
Choose Domain: Select your domain from the dropdown
In Directory: Leave blank to install at root (recommended)
Site Name: Your website name
Admin Username: Do NOT use "admin" — choose a unique username
Admin Password: Generate a strong password (16+ characters)
Admin Email: Your email address

Security: Never use "admin" as your username. This is the first username attackers try. Choose something unique like your name or a random string.

4Click Install and Wait

Click "Install" and wait 1-2 minutes. Softaculous will automatically create the MySQL database, configure wp-config.php, upload WordPress files, and run the installation script. You'll receive a confirmation with your admin login URL (typically yoursite.com/wp-admin).

Method 2: Manual WordPress Installation

Manual installation gives you more control and is worth knowing even if you use Softaculous, since it demystifies what's happening under the hood.

1Download WordPress

Download the latest WordPress from wordpress.org/download. You'll get a .zip file containing the WordPress core files. Extract the zip — you'll have a wordpress/ directory.

2Create a MySQL Database

In cPanel, go to "MySQL Databases." Create a new database:

# In cPanel MySQL Databases:
Database name: mysite_wp
Username: mysite_user
Password: UseAStrongPassword123!
# Grant ALL PRIVILEGES to this user on the database
          

Note the database name, username, and password — you'll need these for wp-config.php. Your hosting server hostname is usually localhost.

3Upload WordPress Files via FTP/cPanel File Manager

Using an FTP client (FileZilla recommended) or cPanel's File Manager, upload the contents of the wordpress/ directory to your server's public_html directory (or a subdirectory if installing in a subfolder).

Upload the contents of the wordpress folder, not the folder itself. Files like wp-config-sample.php and wp-login.php should be directly inside public_html, not inside a wordpress/ subfolder inside it.

4Configure wp-config.php

Rename wp-config-sample.php to wp-config.php and edit it with your database details:

// Database configuration in wp-config.php
define( 'DB_NAME',     'mysite_wp' );
define( 'DB_USER',     'mysite_user' );
define( 'DB_PASSWORD', 'UseAStrongPassword123!' );
define( 'DB_HOST',     'localhost' );
define( 'DB_CHARSET',  'utf8mb4' );

// Generate unique keys from https://api.wordpress.org/secret-key/1.1/salt/
define('AUTH_KEY', 'paste-generated-key-here');
define('SECURE_AUTH_KEY', 'paste-generated-key-here');
// ... and the other 6 keys
          

Generate unique security keys at api.wordpress.org/secret-key/1.1/salt/ — never use default or blank values.

5Run the WordPress Installation Wizard

Navigate to yoursite.com/wp-admin/install.php in your browser. The WordPress installation wizard will walk you through setting your site title, admin username, password, and email. Click "Install WordPress" — done.

6Essential Post-Installation Steps

After WordPress is installed, do these immediately:

Install an SSL certificate (free via Let's Encrypt in cPanel or via Cloudflare) and enable HTTPS
Set WordPress Address and Site Address to https:// in Settings → General
Install a security plugin (Wordfence or iThemes Security)
Install a caching plugin (WP Super Cache, W3 Total Cache, or LiteSpeed Cache)
Configure automatic backups (UpdraftPlus is excellent)
Update WordPress Settings → Permalinks to "Post name" for SEO-friendly URLs
Delete the "Hello Dolly" and "Akismet" sample plugins if not using them
Change the sample "admin" user if you created it, or ensure your username is not "admin"

File Permissions: The Right Settings

Correct file permissions are critical for WordPress security. Wrong permissions either lock WordPress out of its own files or create security vulnerabilities.

# Correct WordPress file permissions (via SSH or cPanel File Manager)
find /public_html -type d -exec chmod 755 {} \;   # Directories: 755
find /public_html -type f -exec chmod 644 {} \;   # Files: 644
chmod 600 /public_html/wp-config.php             # wp-config.php: 600 (owner read/write only)
chmod 755 /public_html/wp-content/uploads        # Uploads dir needs write access
        

Performance Optimizations After Install

A freshly installed WordPress site can be slow out of the box. These steps make an immediate performance difference:

Enable page caching — reduces PHP execution on every request. WP Super Cache (free) is a solid choice. LiteSpeed Cache works best on LiteSpeed servers.
Optimize images — Smush or ShortPixel can auto-compress uploaded images. WebP conversion typically reduces image size 25-35%.
Use a CDN — Cloudflare's free plan serves static assets from 200+ edge locations globally, dramatically improving load times for visitors far from your server.
Minify CSS and JS — Autoptimize or your caching plugin can merge and minify CSS/JavaScript, reducing the number of HTTP requests.
Use PHP 8.2+ — Newer PHP versions are significantly faster. Ensure your hosting uses PHP 8.2 or 8.3 for best WordPress performance.

Related Guides

Hosting Types Guide Server Benchmarks Our Hosting Plans

Quick Reference

WordPress.org: wordpress.org/download

Key generator: api.wordpress.org/secret-key/1.1/salt/

PHP min version: 8.2+

MySQL min: 8.0+ or MariaDB 10.4+

Admin URL: yoursite.com/wp-admin

WordPress Installation Guide 2026