A website can look complete in a page builder or staging environment and still be far from ready for the public. Broken forms, missing redirects, incorrect DNS records, staging URLs, and blocked search settings often remain hidden until launch day.
This guide explains how to publish a website without losing content, disrupting email, or creating preventable indexing problems. It is written for business owners, marketers, and project managers who need a practical launch process rather than a simple “click Publish” tutorial.
Key takeaways
- Publishing connects your finished website to a public domain and production hosting environment.
- You should back up the site and record the current DNS settings before making launch changes.
- Forms, payments, redirects, mobile layouts, analytics, and search settings need separate testing.
- A redesign requires a URL redirect map so old links do not lead to 404 pages.
- Search engines may take time to crawl a new site, but technical blocks should be checked immediately.
- The launch process should include a rollback plan and a named person responsible for post-launch monitoring.
What publishing a website actually requires
Publishing a website means moving it from a private building environment to a production environment that visitors can reach through your domain name.
That description sounds simple, but several systems must work together. Your domain must point to the correct server. The server must contain the right files and database. HTTPS must work. Forms must deliver messages. Search engines must be allowed to crawl the site. Analytics must record the correct activity.
A website can therefore be online without being properly published. For example, the homepage may load while contact forms fail, product images use staging URLs, or Google receives a noindex instruction.

The main parts of a website launch
| Launch component | Its role | Common failure |
| Domain name | Gives visitors a public address | The domain remains pointed at the old host |
| Web hosting | Stores the website files and database | The plan lacks the required resources or software |
| DNS records | Direct traffic, email, and verification services | Website changes accidentally disrupt business email |
| SSL certificate | Encrypts traffic and enables HTTPS | HTTP pages or assets create security warnings |
| Website files | Contain the design, content, scripts, and media | Files are uploaded to the wrong directory |
| Database | Stores WordPress content, products, users, or settings | Old URLs remain after migration |
| Redirects | Send old URLs to relevant new pages | Existing links lead to 404 errors |
| Analytics | Records visits and conversion activity | Tracking is missing or fires twice |
| Search settings | Control crawling, canonical URLs, and sitemaps | Staging restrictions remain active |
| Backups | Provide a recovery point | Backups exist but cannot be restored quickly |
The exact launch process depends on the platform. An all-in-one builder may handle hosting, SSL, and deployment automatically. A self-hosted WordPress site usually requires more control over migration, caching, plugins, and DNS. A custom application may also require environment variables, database migrations, build commands, and server configuration.
Decide who owns each launch task
Even a small launch needs clear ownership. One person may handle several tasks, but every responsibility should still have an assigned owner.
At minimum, identify who will:
- Approve the final content and design.
- Manage the domain registrar and DNS records.
- publish or migrate the website.
- Test forms, payments, bookings, and integrations.
- review analytics and search settings.
- Monitor the site after launch.
- Decide whether to roll back if a serious problem appears.
This prevents a common launch-day problem: everyone assumes someone else checked the important settings.
Businesses still planning their site structure may benefit from involving their web design agency before launch week. Hosting, content, redirects, tracking, and accessibility are easier to plan during the build than to repair after publication.
How to publish a website step by step
The following workflow applies to most business websites. Some tools and menu names will differ, but the order remains useful across WordPress, website builders, ecommerce platforms, and custom sites.

Step 1: Complete the pages needed for launch
Start by deciding which pages must be ready on day one.
A small service business will usually need:
- A homepage that clearly explains the business.
- Complete service or product pages.
- An about page with credible company information.
- A contact page with working contact details.
- Privacy, terms, and other required policy pages.
- Confirmation or thank-you pages for important forms.
- A useful 404 page.
- Navigation and footer links that match the final structure.
Do not publish placeholder service pages simply because they appear in the planned sitemap. Three complete pages are more useful than eight pages containing repeated summaries and “coming soon” messages.
Review every page on the staging site. Search for test text, sample products, stock contact details, empty buttons, temporary images, and links that still point to the staging domain.
Step 2: Confirm access before launch day
Collect access to every system involved in the launch:
- Domain registrar
- DNS provider
- Web hosting account
- Content management system
- Analytics account
- Google Search Console
- Business email provider
- Content delivery network
- Form, booking, or payment tools
- Plugin and theme licenses
- Third-party integrations
Do this several days before launch. Domain access is frequently tied to a former employee, an old agency, or an inbox nobody checks. Recovering access can delay publication even when the website itself is finished.
Store credentials in a password manager rather than placing them in an email thread or shared document.
Step 3: Create backups and a rollback plan
Back up both the current live site and the replacement site before making production changes.
For a WordPress website, a complete backup should include:
- WordPress files
- Uploads and media
- Themes and plugins
- The database
- Configuration files
- Custom code
- Plugin settings
- Server or DNS details needed for restoration
Confirm where the backups are stored and how they would be restored. A backup on the same server is less useful if the server becomes unavailable.
Your rollback plan should answer three questions:
- What problem would justify reversing the launch?
- Who has authority to make that decision?
- How will the previous website be restored?
For example, one styling problem on a low-traffic page may not justify a rollback. A broken checkout, inaccessible admin area, missing database records, or company-wide email failure probably does.
Step 4: Record the current DNS configuration
Domain Name System records determine where website traffic, email, and verification requests go.
Before editing them, export the DNS zone or capture clear screenshots of every record. Pay particular attention to:
- A records
- AAAA records
- CNAME records
- MX records
- TXT records
- SPF, DKIM, and DMARC records
- Subdomains
- Service verification records
Changing nameservers can replace the entire DNS zone, not just the website destination. A careless nameserver change may publish the new website while disconnecting Google Workspace, Microsoft 365, or another email system.
Confirm whether the launch requires a nameserver change, an A record change, or a CNAME update. Do not edit unrelated records.
Step 5: Move the website into production
The deployment method depends on the platform and hosting setup.
A WordPress migration commonly involves moving both the files and database from staging to production. The process may use a host migration tool, a trusted migration plugin, or a manual transfer. WordPress provides official documentation covering installation and site administration, but managed hosts may have their own preferred deployment process.
After a WordPress migration:
- Confirm the live site URL in the WordPress settings.
- Replace staging-domain references in the database.
- Resave the permalink settings.
- Clear the WordPress, server, and CDN caches.
- Check media URLs and background images.
- Review plugin licenses and API connections.
- Test the WordPress admin area.
- Remove development-only users and tools.
Static sites may be deployed through SFTP, a file manager, or a Git-based workflow. Confirm that the production build completed successfully and that files were placed in the correct public directory.
Custom applications may also require database migrations, environment variables, API keys, scheduled jobs, container settings, and error monitoring. These values should not be copied blindly from staging because production credentials often differ.
A complex WordPress build may warrant support from an experienced WordPress developer, especially when it includes custom themes, memberships, WooCommerce, multilingual content, or third-party APIs.
Step 6: Connect the domain to the production website
Once the production site is ready, update the required DNS record so the domain resolves to the new environment.
Allow time for DNS changes to propagate. During this period, different networks may temporarily display different versions of the site. Avoid making repeated DNS changes simply because one device still displays the old version.
Check the domain using more than one connection when possible. For example, test through office Wi-Fi and a mobile connection. Local caching may cause one network to display an outdated result.
Also confirm the preferred domain format:
- https://example.com/
- https://www.example.com/
Choose one version as canonical and redirect the others to it consistently.
Step 7: Enable HTTPS and remove mixed content
Install or activate the Secure Sockets Layer certificate before directing customers to the website.
Then test:
- The HTTP version redirects to HTTPS.
- The preferred www or non-www version loads correctly.
- Internal links use HTTPS.
- Images, fonts, scripts, and stylesheets use HTTPS.
- Forms submit correctly over HTTPS.
- Canonical tags use the secure live domain.
- The sitemap contains HTTPS URLs.
- No browser security warnings appear.
Mixed content occurs when an HTTPS page still requests an image, script, font, or stylesheet through HTTP. Browsers may block those assets or warn visitors that the page is not fully secure.
On WordPress, mixed content often comes from database entries, theme settings, custom CSS, or cached page files that still contain the old HTTP address.

Step 8: Map and test redirects
A brand-new domain may have few redirects. A redesign or migration needs a documented redirect map.
Create a spreadsheet with these columns:
| Old URL | New URL | Action | Reason |
| /old-service/ | /new-service/ | 301 redirect | Direct replacement |
| /team-member-name/ | /about/ | 301 redirect | Profile removed |
| /outdated-offer/ | None | Return 410 or redirect after review | Offer no longer exists |
| /old-contact/ | /contact/ | 301 redirect | Contact page renamed |
Each old URL should lead to the closest relevant replacement. Do not send every deleted page to the homepage. That leaves users without the information they expected and makes the redirect less meaningful.
Test redirects after the site is live. Check old URLs that have backlinks, traffic, bookmarked visits, or search visibility first.
Choose the right publishing method for your platform
The launch workflow changes depending on how the website was built.
WordPress websites
A self-hosted WordPress website normally gives you control over hosting, themes, plugins, databases, caching, and security. That flexibility also creates more launch dependencies.
Check the following before publication:
- WordPress core, theme, and plugin compatibility
- PHP version
- Database connection
- Site and home URLs
- Permalink structure
- Caching layers
- SMTP or transactional email
- Security plugin settings
- Backup schedules
- Search engine visibility
- Scheduled tasks and cron jobs
Do not update every plugin for the first time minutes before launch. Apply updates in staging, test the important functions, and then move the tested version to production.
Hosted website builders
Platforms such as Squarespace, Wix, Shopify, and Webflow usually combine the builder, hosting, SSL, and publishing controls.
The technical deployment may be easier, but you still need to test:
- Custom domain connection
- Navigation
- Mobile layouts
- Contact and signup forms
- Product and checkout settings
- Analytics
- Cookie or privacy tools
- Page titles and descriptions
- Redirects from old URLs
- Indexing settings
The platform may publish the website with one button, but it cannot confirm that your business details, customer journey, metadata, and conversion tracking are correct.
Static and custom-coded websites
A static site may consist of HTML, CSS, JavaScript, and media files deployed to a server or hosting platform. A custom web application may add databases, user accounts, APIs, and server-side processes.
Before deployment, confirm:
- The production build finishes without errors.
- Environment variables use production values.
- Secrets are not stored in the public code repository.
- API endpoints use the correct environment.
- Error logging is active.
- Database migrations have been tested.
- Caching and CDN rules are appropriate.
- Form handling works on the production domain.
- A previous working release can be restored.
A homepage loading successfully does not prove that the application is healthy. Test account creation, login, password reset, search, forms, scheduled jobs, and integrations separately.
Ecommerce websites
An ecommerce launch requires more than checking whether products appear.
Run a complete test order from product selection through confirmation. Check:
- Product variants
- Inventory changes
- Discount codes
- Shipping rates
- Tax calculations
- Payment gateway test mode
- Order emails
- Customer account creation
- Refund workflow
- Failed-payment behavior
- Mobile checkout
- Analytics and purchase events
Use test transactions before launch. Then place a controlled live order if the payment provider and business process allow it. This confirms that real payment, email, and order systems work together.
Test the live website before announcing the launch
Do not announce the new website as soon as the domain resolves. First run a production quality assurance review.
Staging tests are useful, but production adds real DNS, SSL, caching, analytics, email, and server conditions.

Use a launch checklist based on risk
| Priority | Test | Successful result |
| Critical | Domain and HTTPS | The preferred domain loads securely |
| Critical | Forms | Submissions arrive in the intended inbox or CRM |
| Critical | Checkout or booking | A user can complete the full transaction |
| Critical | Backups | A current backup and restoration method are available |
| High | Redirects | Important old URLs reach relevant new pages |
| High | Mobile navigation | Menus and buttons work on real phones |
| High | Search settings | Important pages are crawlable and indexable |
| High | Analytics | Visits and conversions record once |
| Medium | Performance | Important templates load without major delays or layout shifts |
| Medium | Accessibility | Keyboard, labels, headings, contrast, and alt text receive a basic review |
| Medium | Social sharing | Page previews use the intended title, description, and image |
| Low | Favicon and browser details | Icons and page titles display correctly |
The downloadable website launch checklist can provide a second reference during the final review, particularly when several people are checking different parts of the site.
Test complete visitor journeys
Testing isolated buttons is not enough. Follow the same path a customer would take.
For a service business:
- Open a service page from a mobile device.
- Review the service details.
- Tap the primary call to action.
- Complete the contact form.
- Confirm the success message.
- Check that the business receives the enquiry.
- Verify any confirmation email.
- Confirm the conversion appears in analytics.
For an ecommerce site, follow the path from product page to order confirmation. For a membership website, create an account, reset the password, sign in, and access protected content.
Check search engine access
Development sites often use passwords, noindex tags, or robots.txt restrictions. Remove the appropriate blocks from the live site without exposing private staging pages.
Check that:
- Important pages return a successful status code.
- Public pages do not contain an unintended noindex directive.
- Robots.txt does not block important site sections.
- Canonical tags point to the live preferred URLs.
- Internal links use the live domain.
- The XML sitemap contains only canonical public pages.
- Staging, test, search-result, and thank-you pages are excluded where appropriate.
Google explains how to build and submit a sitemap. Submitting one helps Google discover important URLs, but it does not guarantee that every submitted page will be indexed.
Test accessibility beyond an automated score
Automated tools can detect missing labels, contrast problems, and structural errors, but they cannot judge every usability barrier.
Complete a basic manual review:
- Navigate important pages using only a keyboard.
- Confirm that focus indicators remain visible.
- Check that form fields have understandable labels.
- Review heading order.
- Add useful alternative text to informative images.
- Make sure buttons describe their action.
- Check that errors explain how to correct the problem.
- Test text and controls at increased zoom.
The W3C Web Accessibility Initiative provides an overview of website accessibility evaluation and explains why automated tools should be combined with human review.
Common launch problems and likely causes
| Problem | Likely cause | First check |
| Website shows the old version | DNS or local cache | Check the DNS destination from another network |
| Images or styles are missing | Old URLs or mixed content | Inspect asset URLs and clear caches |
| Forms do not arrive | Mail configuration or spam filtering | Check SMTP logs and recipient settings |
| Website redirects repeatedly | Conflicting HTTPS or domain rules | Review server, CDN, and CMS redirects |
| Internal pages return 404 errors | Permalinks or deployment path | Resave routing settings and confirm files |
| Analytics records duplicate visits | Tracking installed twice | Inspect the theme, plugin, and tag manager |
| Google cannot index pages | noindex, robots.txt, or canonical issue | Inspect the live URL in Search Console |
| Email stops after launch | DNS zone or MX records changed | Restore the documented email records |
| Admin changes do not appear | Page, server, or CDN cache | Clear each cache layer separately |

Keep the website stable after it goes live
The first 72 hours should be treated as a stabilization period. Keep the project team available and avoid making unrelated design or feature changes unless they solve a real launch issue.
Check the site several times during this period. Review uptime, error logs, forms, payment activity, analytics, 404 reports, mobile behavior, and page performance.
Google Search Console can help verify whether important pages are crawlable and whether Google received the current version. You may also request a recrawl through URL Inspection, although crawling and indexing can still take time.
Do not request indexing repeatedly as a substitute for fixing the page. If a URL remains unindexed, review its technical accessibility, canonical signals, internal links, content usefulness, and similarity to other pages.
After the initial monitoring period, move the website into a recurring care schedule. That should cover backups, software updates, security checks, form tests, broken links, performance, content reviews, and analytics.
A documented website maintenance process keeps launch tasks from becoming one-time checks that nobody repeats. It also creates a clear owner for problems that appear weeks or months after publication.
The best way to publish a website is to treat launch as a controlled release, not a single button. Prepare the production environment, protect the existing site, test real customer journeys, and keep monitoring after the announcement. That process gives visitors a working website and gives your team a reliable foundation for future improvements.
FAQs
How much does it cost to publish a website?
The publishing action may cost nothing beyond your existing platform plan, but a professional website usually needs a paid domain and hosting. Additional costs may include development, premium software, migration support, security tools, and ongoing maintenance.
Can I publish a website without coding?
Yes. Hosted website builders and many WordPress setups allow you to design and publish pages without writing code. Technical support may still be needed for DNS, migrations, custom functionality, integrations, or troubleshooting.
How long does it take for a website to go live?
A simple builder website may become public within minutes after the domain is connected. WordPress migrations and business website launches often require more preparation because content, DNS, redirects, forms, analytics, and security must be tested.
Why does my domain still show the old website?
Your device, network, internet provider, or DNS resolver may still have the previous record cached. Confirm that the DNS record is correct, test from another network, and allow the expected propagation period before making further changes.
Why is my published website not appearing on Google?
Google may not have discovered or indexed the site yet. Check Search Console, internal links, the XML sitemap, robots.txt, noindex directives, canonical tags, and whether the pages provide complete and distinct information.
Should I delete the old website immediately after launch?
Keep a backup of the old website even after the replacement is live. You may need its content, files, database, settings, or URL list for troubleshooting, redirects, and recovery.
Can I publish an unfinished website?
You can launch with a smaller set of complete pages and add more later. Avoid publishing placeholder pages, broken conversion paths, repeated copy, test products, or sections that could mislead visitors.