The Settings area of WordPress is where a site becomes yours rather than a generic default install. Every option buried in its sub-menus — from timezone to permalinks to privacy — affects how your site behaves, how Google sees it, how UK data-protection law applies, and how easy or painful future changes will be. Most of these settings only need to be touched once, which is why it pays to get them right before you start adding content. This guide walks through every essential setting in order, explains the sensible UK default for each, and flags the choices that are painful to reverse later.
Why settings matter from day one · Settings > General · Settings > Writing · Settings > Reading · Settings > Discussion · Settings > Permalinks · Settings > Privacy · Settings > Media · Recommended UK settings at a glance · Plesk Toolkit shortcuts · Frequently asked questions
When WordPress is first installed — whether through the Plesk WordPress Toolkit or manually — it ships with defaults tuned for a generic international audience running a blog. The timezone is UTC, the date format is American, search engines can index the site immediately, and the default permalink structure is a messy numeric string. None of that is wrong exactly, but none of it is right for a UK business either.
Taking thirty minutes at the start to configure settings correctly has a disproportionate payback. It prevents posts being timestamped at the wrong hour, avoids the embarrassment of a half-built site appearing in Google, keeps your URL structure clean and SEO-friendly, and gets the Privacy Policy in place before you collect the first piece of personal data.
All of the options below live in the left-hand dashboard menu under Settings. If WordPress was installed through the Plesk WordPress Toolkit on a smartxhosting.uk plan, you can jump straight into the dashboard using the single sign-on (SSO) button in Plesk without having to remember separate credentials.
Settings > General controls the identity of the site and its regional preferences. Get this right first, because it affects almost everything else.
The site title appears in browser tabs, Google search results, email notifications and — depending on your theme — in the site header. Use your business name as it is registered with Companies House, or the trading name you use publicly. Avoid clever abbreviations that visitors will not recognise. Site titles are also used by Matomo and Google Analytics as the default property name, so a clear title makes analytics tidier too.
The tagline is a short strapline. Themes vary in whether they display the tagline visually; even when they do not, search engines sometimes reference it, and screen readers read it on some templates. Keep it to seven or eight words describing what you do ("Independent accountants in Leeds", "Welsh language children's books", "Legal advice for small charities"). Avoid "Just another WordPress site", which is the WordPress default and appears on many neglected websites.
Both the WordPress Address (URL) and Site Address (URL) should begin with https://. On smartxhosting.uk plans a free Let's Encrypt SSL certificate is installed automatically, so there is no technical reason to run on plain HTTP. The two values should normally match exactly.
These two fields exist separately because advanced setups sometimes need them to differ — for example, when WordPress is installed in a subdirectory but the public URL is the root domain. For 99% of sites, just enter the same HTTPS URL in both fields.
Warning: editing these fields incorrectly can lock you out of the dashboard (the login page redirects to the wrong URL). If that happens, open Plesk > File Manager, edit wp-config.php and add the following lines near the top (above "That's all, stop editing!"):
define( 'WP_HOME', 'https://yourdomain.co.uk' ); define( 'WP_SITEURL', 'https://yourdomain.co.uk' );
That forces the correct URL at the PHP level and restores access. The dashboard URL fields will be disabled afterwards — that is deliberate and safe.
The admin email receives critical system notifications: new user registrations, automatic update results, comment moderation requests, some plugin alerts and — if you enable two-factor authentication — security codes. Use an address on your own business domain rather than a free mailbox. smartxhosting.uk customers get professional mailboxes on their domain included with hosting, and that mailbox is a safer choice than a personal Gmail or Hotmail account.
The Anyone can register checkbox controls whether the wp-login.php?action=register form is active. For a brochure website, a blog with no guest authors and a typical WooCommerce shop without customer accounts, leave this unticked. Public registration is a common vector for spam bots creating accounts; even if those accounts cannot post, they clutter your user list and inflate analytics numbers.
If you do need public registration (a membership site, a LearnDash-style course, a community site), set the New User Default Role to Subscriber. That is the lowest-privilege role and limits damage if a spam account gets through. You can always upgrade a specific user later.
Set Site Language to English (United Kingdom). That switches the dashboard, default theme strings, plugin translations (where they exist) and core messages to British English. Standard WordPress, WooCommerce and most major plugins have UK translations; some niche plugins default to US English regardless.
The language setting affects the dashboard for every user unless they override it on their own profile page. That is useful for agencies: each team member can have their own language preference while the public-facing strings stay in UK English.
The four most important regional values for a UK site:
Click Save Changes. Everything above takes effect immediately.
Settings > Writing controls defaults for new content. For most sites the factory defaults are acceptable, but two values are worth adjusting.
New posts without an explicit category go into this default. WordPress ships with a category called Uncategorised (or Uncategorized depending on version), which is clunky and shows up on the public site if you ever use the category archive. Rename the default category under Posts > Categories to something meaningful for your site — "News", "Articles", "Blog", "Case studies" — and then pick the renamed category here.
Leave as Standard unless your theme deliberately uses post formats (Aside, Gallery, Link, Image, Quote, Status, Video, Audio, Chat). Most modern block themes treat format-specific styling as redundant, since blocks themselves carry the visual variation.
An older feature that lets you publish posts by sending email to a mailbox WordPress monitors. It is mostly deprecated and presents a small security risk (the mailbox credentials live in the database in plain text). Leave empty unless you have a specific workflow that needs it.
Settings > Reading governs what visitors see when they arrive and how much content is loaded at once.
Two options:
Most UK small businesses want the static-page option. Create at least two pages first (typically Home and Blog), save them as drafts, then choose them in the dropdowns here.
How many posts appear per page on your blog archive and category pages. 10 is a good starting point. Push it higher if your posts are short; drop it lower if each post has large images or long intros.
RSS readers use your site's RSS feed to syndicate posts. Summary publishes only the post excerpt; Full text publishes the whole article. If you are concerned about content scrapers republishing your articles, Summary is a small deterrent, though scrapers can also fetch the full URL. For a UK blog with a small but engaged readership, Full text gives subscribers a better experience.
The Discourage search engines from indexing this site checkbox inserts a noindex meta tag on every page. Tick it while you are building the site on a development domain or staging subdomain; untick it before launch. Forgetting to untick it is one of the most common reasons a new WordPress site fails to rank in Google even months after launch.
If you use the Plesk WordPress Toolkit's staging feature on smartxhosting.uk, the staging clone lives on an isolated subdomain and does not need the checkbox — Plesk already keeps it separate from the production site.
WordPress was born as a blog engine, and its comment system is still capable of running a fully fledged discussion forum. For most UK small businesses that level of comment activity never materialises, and comments become a spam vector and moderation overhead rather than a feature.
Two honest questions:
If the answer to either is no, turn comments off entirely. Untick Allow people to submit comments on new posts, and use Bulk Edit on existing posts to set them all to "Comments closed". A site with no comments is perfectly valid and removes an entire category of spam risk.
WordPress ships with the Akismet plugin but you must activate and connect it. Under Plugins > Installed Plugins, activate Akismet, click Connect, and follow the prompts. Free personal plans are available; commercial use technically needs a paid plan (starting at GBP 8/month). Akismet reliably filters 95%+ of automated spam, which dramatically reduces moderation workload.
WordPress uses Gravatar-linked avatars for commenters. Gravatar is a service owned by Automattic that ties an email address to a profile image. If you allow comments and want visual variety, leave avatars enabled. If you have disabled comments altogether, this section has no effect.
There is a small UK GDPR consideration: Gravatar stores the commenter's email address hash with their profile. This is disclosed on the front end when a visitor hovers over an avatar. If in doubt, mention Gravatar in your Privacy Policy.
Permalinks are the structure of your URLs, and this is one of the most SEO-relevant settings in the whole admin. Permalinks should be configured once, before publishing content, and then left alone.
Select the Post name option, which gives URLs like yoursite.co.uk/about-us/. Reasons:
Other options (Plain, Numeric, Day and name, Month and name) exist mostly for legacy reasons. Day and name is fine for pure news sites that never update old articles, but Post name is safer for 99% of cases.
The Optional section at the bottom lets you override the URL prefix for category and tag archives. Defaults are /category/ and /tag/, which is fine. Some SEO guides suggest shortening to /c/ or dropping the base entirely, but the time saved by two characters in the URL is rarely worth the redirect complexity that follows.
If you need to change permalinks after publishing content — for example, migrating from Plain to Post name — every existing URL becomes a 404 unless you set up redirects. Tools like the free Redirection plugin, or Yoast's redirect module, can capture and rewrite the old URLs. Always back up first and test on staging.
Under UK GDPR and the Data Protection Act 2018, any website that collects personal data must publish a Privacy Policy. Personal data has a broader definition than most owners realise: it includes contact form submissions, comment details (name and email), WooCommerce customer information, analytics cookies that fingerprint visitors, email sign-up forms, and in some cases IP addresses.
WordPress makes compliance straightforward:
If your site targets EU customers in addition to UK ones, EU GDPR still applies alongside UK GDPR and your policy needs to cover both. The ICO and the European Data Protection Board publish aligned but not identical guidance.
A slightly less-discussed settings page but worth a minute.
WordPress generates thumbnail, medium and large versions of every uploaded image. Default sizes are sensible for most themes. If your theme is designed for large full-width hero images, you may want to increase Large to match.
Tick this (it is ticked by default). Uploads then go into /wp-content/uploads/2026/04/ rather than dumping thousands of files into a single folder. This helps file managers and backup tools behave better as the media library grows.
| Setting | Location | Recommended value |
|---|---|---|
| Site Language | Settings > General | English (United Kingdom) |
| Timezone | Settings > General | London |
| Date Format | Settings > General | d/m/Y or j F Y |
| Time Format | Settings > General | H:i (24-hour) or g:i a |
| Week Starts On | Settings > General | Monday |
| WordPress Address / Site Address | Settings > General | https:// (both) |
| Anyone can register | Settings > General | Unticked (for most sites) |
| Default Post Category | Settings > Writing | Renamed to "News" / "Articles" / similar |
| Homepage displays | Settings > Reading | A static page |
| Blog pages show at most | Settings > Reading | 10 posts |
| Search engine visibility | Settings > Reading | Unticked (on live site) |
| Comment must be manually approved | Settings > Discussion | Ticked |
| Automatically close comments | Settings > Discussion | After 60 days |
| Permalink Structure | Settings > Permalinks | Post name |
| Privacy Policy Page | Settings > Privacy | Published and selected |
| Organise uploads into folders | Settings > Media | Ticked |
The Plesk WordPress Toolkit sits above the WordPress dashboard and gives you shortcut access to several settings without logging in. Useful if you manage multiple WordPress sites from the same Plesk account.
WP_DEBUG for a site with one click (and turns it off again). Handy when diagnosing a plugin or theme issue on a client site.A staging clone is the right place to experiment with riskier settings (permalinks, URL fields, WordPress address changes). Break things there, reset, and only apply to production once you are confident.
Which timezone should I pick for a UK site?
Always select London from the city dropdown, not UTC+0 directly. London includes automatic handling of British Summer Time; UTC+0 does not, so you would end up an hour out between late March and late October every year.
Why is my date format wrong even after saving?
Some themes and page builders override the site-level date format inside their own blocks. If you set d/m/Y in Settings but an event listing still shows 04/22/2026, check the block or shortcode settings — they usually have their own date-format field that falls back to default if empty.
Do I have to publish a Privacy Policy even for a small brochure site?
Yes, if the site uses Google Analytics, embeds a contact form, accepts comments, sends email sign-ups or integrates with social media — essentially any normal website. The ICO has clarified that even basic analytics usually counts as processing personal data, which triggers the publication requirement. The Settings > Privacy helper gets you 80% of the way there.
What happens if I change the WordPress Address and lock myself out?
Open Plesk > File Manager, edit wp-config.php, and add the two WP_HOME and WP_SITEURL lines shown earlier in the article. Save, reload the dashboard URL, and the site is back. The General Settings fields will then be greyed out because wp-config.php takes precedence — that is safe and intentional.
Should I allow search engines to index a staging site?
No. Staging copies should never be indexed, because they create duplicate content that Google penalises and they sometimes expose unfinished pages. The Plesk Toolkit's staging clone automatically adds a noindex tag. If you run staging outside the Toolkit, tick the "Discourage search engines" checkbox on staging only.
Can I turn off comments site-wide without deleting existing comments?
Yes. Untick Allow people to submit comments on new posts, then go to Posts > All Posts, select all, choose Bulk Actions > Edit, set Comments to "Do not allow", and Update. Existing comments remain in the database but the comment form disappears from the front end. Repeat on Pages and Products if applicable.
What is the difference between WordPress Address and Site Address?
WordPress Address is where the WordPress files live (the physical location). Site Address is the URL visitors use. For 99% of installs they are identical. They only differ when WordPress is installed in a subdirectory but the public URL is the bare domain — an advanced configuration that needs the index.php trick described in the WordPress Codex.
Does changing permalinks break existing Google search listings?
Yes, unless you set up redirects. Every URL that Google has indexed under the old structure becomes a 404 and search ranking drops. Use the Redirection plugin or Yoast's redirects module to map old URLs to new ones before changing the structure. Do it on staging first, then export the redirect rules.
Which role should I use for a freelance contributor?
Contributor allows writing posts but not publishing them (an editor must approve). Author allows writing and publishing own posts but not editing others'. Editor can manage all content. For a UK freelance journalist submitting articles, Contributor is usually the right starting point; upgrade to Author once trust is established.
Is Akismet GDPR-compliant?
Akismet processes commenter IP addresses and email addresses on Automattic's US servers. The UK-EU adequacy decision covers transfers to the EU; the US data-transfer framework has been repeatedly challenged. If that matters for your site, mention Akismet explicitly in the Privacy Policy, or use a GDPR-friendlier alternative like Antispam Bee.
Launch your WordPress site on smartxhosting.uk
UK hosting with the Plesk WordPress Toolkit, LiteSpeed Cache, Redis object caching, free Let’s Encrypt SSL, free CDN and daily backups — from £2/month.
View WordPress hosting plans →