I once broke one of my own websites while using FileZilla.
FileZilla allowed me to access the website files stored on the hosting server. I was following a tutorial about removing folders left behind by plugins that had not deleted properly.
The idea was to remove a few unwanted folders. Instead, I deleted important plugin and other website files. The site stopped working.
It is difficult to describe the sinking feeling when you think months or years of work might have disappeared because of one mistake. That is not the moment when you want to start asking whether a backup exists, what it contains or how you are supposed to restore it.
I contacted Wealthy Affiliate’s SiteSupport through its ticket system. They restored the website to an earlier working version, and I recovered from my mistake.
That experience changed how I think about hosting.
Storage, processing capacity and traffic limits matter. But for a new hobby website owner, a backup that can actually be restored may matter much sooner.
The short answer: cheap hosting can be good enough
A reputable low-cost shared or managed WordPress hosting plan will normally be adequate for a new content-based hobby website.
Your first site will probably have:
- relatively few visitors;
- ordinary articles and images;
- little simultaneous activity;
- no complicated shop or membership system;
- time to monitor its growth and upgrade later.
You do not need to buy hosting for thousands of imaginary visitors before publishing anything. You do need to protect the work you are about to create.
That means checking that an affordable plan includes usable backups, security, SSL, accessible support and a way to move or upgrade the site. A cheap plan providing those things can be perfectly sensible. One that cannot recover your website may be false economy.
Which type of hosting should you choose?
For most beginners, the realistic choice is between ordinary shared WordPress hosting, managed WordPress hosting and an all-in-one platform. You are unlikely to need a virtual private server or dedicated server.
1. Choose inexpensive shared WordPress hosting if:
- you are comfortable handling routine WordPress updates;
- the plan includes proper backups, security and support;
- your initial website will mainly contain articles and images;
- keeping the cost low is important.
2. Choose managed WordPress hosting if:
- you want the provider to handle more of the updates, security, caching and recovery;
- you value support that specialises in WordPress;
- you are prepared to pay more for convenience.
3. Choose an all-in-one website platform if:
- you want hosting, training, research tools and support together;
- dealing with several providers would discourage or confuse you;
- you have compared its total cost with buying the services separately.
4. Consider cloud, VPS or specialist hosting later if:
- you introduce a busy shop, membership system or interactive application;
- the website develops sustained performance problems;
- monitoring or your provider shows that real resource limits are being reached.
My default recommendation: begin with reputable shared or managed WordPress hosting. Choose managed hosting or an all-in-one platform when the extra help is worth its additional cost to you. Do not pay for a VPS merely because it sounds more professional.
For a closer comparison of the third option, read All-in-One Website Platform or Separate Hosting: Which Is Better for a Beginner?. The rest of this article explains how to judge the hosting included in any of these choices.
Protect today’s work before buying for tomorrow’s traffic
New website owners often compare the wrong risk.
Limited processing resources might eventually make a busy website slow or cause temporary errors. Missing backups or poor recovery can cause the permanent loss of work now.
That gives us a useful priority order.
Care about these immediately
Backups and restoration: If the site is damaged, can it be returned to a working version?
Website security: Does the provider protect its systems, monitor threats and help if malicious files are discovered?
WordPress updates: Are WordPress, themes and plugins kept current, or are you clearly shown what you need to update?
SSL: Does the site use HTTPS, with a free certificate that renews automatically?
Account security: Can you use strong passwords and two-factor authentication?
Support: Is there a clear route to somebody who can help when you do not know whether the problem is WordPress or the server?
Check these, but do not obsess over them
Storage: Is there enough space for a growing collection of pages and sensibly optimised images?
Bandwidth: Is ordinary website traffic included, subject to reasonable use?
Plugin rules: Can you install the normal WordPress functions you are likely to need?
Visitor guidance: What type of website is the plan intended to support?
Monitoring: Can you see whether storage or processing limits are being approached?
These are more likely to matter later
CPU and RAM: The processing and working memory available when WordPress performs tasks.
PHP workers: The number of uncached WordPress requests that can be handled simultaneously.
Database and input/output limits: Restrictions that become more relevant as a site becomes larger, busier or more complicated.
VPS or dedicated resources: More control and capacity than an ordinary new hobby site will normally require.
The distinction is not absolute. A badly designed plugin can consume processing power when hardly anyone is visiting. But the general principle remains useful:
Security and backup failures threaten the website itself. Resource limits normally threaten its performance.
Website security means more than antivirus
We are familiar with antivirus software on a computer, but website providers normally use terms such as malware scanning, firewall protection and threat monitoring.
A beginner-friendly hosting plan should help with several layers of security.
Malware scanning
Scanning looks for suspicious or altered files, but detection is not repair. Ask whether the provider will remove malicious code or restore a clean copy and whether that help costs extra.
Server security and firewalls
The host should use measures such as firewalls, malicious-traffic filtering and monitoring. You need not understand the internal design, but security should be actively managed and supported by a response process.
SSL and HTTPS
SSL encrypts the connection between the visitor and the website. It produces the https:// address and browser padlock.
WordPress strongly recommends HTTPS to protect logins and visitors. A free, automatically renewed SSL certificate should now be considered a basic hosting feature, not an expensive extra. WordPress HTTPS guidance
WordPress, theme and plugin updates
The host cannot protect a website from every problem if the owner uses abandoned plugins, weak passwords or untrusted themes.
WordPress says the most important security action is keeping WordPress itself and all installed plugins and themes updated. It also recommends choosing software that is actively maintained. WordPress security guidance
Some hosts apply updates automatically; others provide controls or alerts. Either can work, but responsibility must be clear.
Your account
A secure server cannot compensate for somebody gaining access through a reused password. Use a unique password, protect the email account connected to WordPress and enable two-factor authentication where available.
I have never personally experienced a malware infection or successful attack on any of the websites I have worked on. That is reassuring, but it is my experience—not evidence that any platform or website is impossible to compromise.
“Daily backups” is not a complete answer
The phrase sounds reassuring, but it leaves several important questions unanswered.
What is included?
A WordPress website contains files—software, themes, plugins and media—and a database holding content, users, comments and settings. A complete restoration normally needs both.
How frequently are backups created?
Daily backups may suit a hobby blog that changes occasionally; a busy shop may need them more often. The frequency reveals how much recent work—such as a new article, comments, submissions, orders or settings—could disappear after restoration.
How long are they retained?
Retention is the number of days or versions kept. If damage goes unnoticed, the latest copy may already contain it, so several restore points provide more choice.
Can you see and download them?
Some hosts let you see restore points and download a complete copy. Others keep backups mainly for their own recovery processes.
WordPress recommends keeping your own copies even when the host backs up its servers. WordPress file-backup guidance
A downloadable copy protects you outside the hosting account and can help with a later move.
Who performs the restoration?
Some people want a self-service button. Others would prefer support to restore the website rather than risk making the problem worse.
I am comfortable outsourcing that job to WA SiteSupport. When I accidentally deleted important files, submitting a ticket worked for me. I did not need to understand how the backup system restored the files and database.
That support route has value. Another reader may prefer immediate self-service control. Neither preference is automatically wrong.
Is restoration included?
Check whether restoring an ordinary active website is included in the plan. Also distinguish it from recovering an account that was deleted, suspended or cancelled, which may involve different terms or fees.
The minimum backup questions are:
- Are both files and database included?
- How often is the backup created?
- How long are restore points retained?
- Can I download a copy?
- Can I restore it myself?
- If not, will support restore it?
- Is restoration included in the price?
- What happens to backups if the hosting ends?
The existence of a backup matters. Knowing how recovery works matters just as much.
My WordPress export protects content, not the complete website
I rely on WA for complete website backups and restoration, but I also use WordPress’s built-in Tools → Export function. Selecting All content creates a WXR or XML file containing content such as posts, pages, comments, categories, tags, users and menu items. It can be imported into another WordPress installation. WordPress export documentation
I do this because the articles feel like the most irreplaceable part of the site. However, a WXR file is not a complete copy of WordPress, its themes and plugins, the full database, every setting, server configuration or the uploaded media itself. An import can try to retrieve media from the original website, but that will not help if the original files are no longer accessible.
The most accurate description is:
A WXR export is a useful content escape route, not a full disaster-recovery backup.
My current protection therefore has three layers:
- WA’s managed security and the normal precautions I take inside WordPress.
- WA’s provider backups and support-assisted restoration.
- My separate WXR exports of the content I would least want to recreate.
An occasional downloadable full-site backup stored elsewhere would add another layer. The export is useful, but it should not be mistaken for one.
Shared, managed, cloud and VPS hosting in simple language
Hosting companies use several labels. They can make the choice sound more complicated than it needs to be.
Shared hosting
Shared hosting means several customers use the provider’s underlying server infrastructure.
An apartment-building analogy can help: each customer has their own space, while the broader facilities are shared. A good provider uses limits and separation so that one account cannot consume everything. Shared hosting is normally suitable for a new hobby website, although its quality depends on how the provider manages it.
“Shared” does not automatically mean slow or unsafe.
Managed WordPress hosting
Managed WordPress hosting means the provider handles more of the WordPress-specific work, which might include installation, updates, backups, security, caching, migration and specialist support.
The word managed has no universal definition. One provider may manage only updates and installation; another may include restoration and malware removal. Check the actual service rather than relying on the label.
Cloud hosting
Cloud hosting draws on pooled or networked computing infrastructure, which can make allocation and scaling more flexible. It does not make your individual plan unlimited or automatically faster than every shared plan.
VPS hosting
A virtual private server provides a more clearly allocated virtual portion of a server and greater control. It can suit larger or specialised projects but may create more technical responsibility unless it is managed. An ordinary new hobby website will rarely need one.
Dedicated hosting
Dedicated hosting gives one customer control of an entire physical server. It is far beyond what most new hobby websites need.
Hosting terms translated into actual decisions
You do not need to memorise a technical glossary. You need to understand what a term might change about your choice.
Storage
Simple meaning: Space for website files, images, themes and plugins. Some providers also count email or backups against it.
Beginner decision: A normal article-based site using resized WebP images may need relatively little. Do not choose a host merely because it advertises the largest number, and avoid storing video on basic hosting.
Also check whether the plan has a separate inode limit.
Inodes
Simple meaning: A count of files and folders rather than their total size. Plugins, caches, backups and email can create thousands of small files.
Beginner decision: Check that the allowance is not unusually low and that you will be warned before reaching it.
Bandwidth or data transfer
Simple meaning: The data sent to visitors when they load text, images, styles and scripts.
Beginner decision: Ordinary early traffic is unlikely to be the first constraint. “Unlimited bandwidth” remains subject to acceptable-use and processing limits.
CPU
Simple meaning: Processing power used when WordPress builds pages, searches, imports content, resizes images or runs plugins and automated jobs.
Beginner decision: You do not need the largest figure. Look for usage monitoring, helpful diagnosis and a straightforward upgrade route. A faulty plugin can cause high demand even without much traffic.
RAM
Simple meaning: Temporary working memory used by website processes. Too little can make a demanding task or plugin fail.
Beginner decision: Treat published RAM as one indicator, not a complete performance score, because hosts manage resources differently.
PHP workers
Simple meaning: How many uncached WordPress requests can be processed simultaneously.
Beginner decision: Workers matter more to shops, logged-in areas and interactive tools than to cached articles. Most new hobby blogs need not choose hosting around a large worker count.
Caching
Simple meaning: Saving a prepared page so WordPress need not rebuild it for every visitor.
Beginner decision: Server-level caching is valuable for an article site and can help modest hosting serve more readers. It is less useful for personalised or constantly changing pages.
CDN
Simple meaning: A network that can deliver images, styles and scripts from locations nearer to visitors.
Beginner decision: Helpful for a geographically dispersed audience, but not essential to the initial choice and not a cure for slow plugins.
Database
Simple meaning: Where WordPress stores posts, pages, users, comments and many settings.
Beginner decision: You need not administer it, but confirm that backups and migrations include it. SSL and HTTPS were covered earlier; they should be free and automatically renewed.
DNS and nameservers
Simple meaning: DNS directs a domain to its website and email services; nameservers identify where those directions are managed.
Beginner decision: If the domain and hosting are separate, settings may need changing. Look for clear help and retain control of your domain account.
Migration
Simple meaning: Moving the website’s files, database and configuration to another host.
Beginner decision: Check what “free migration” includes and who performs it. Moving the domain and email may be separate jobs.
Why monthly visitor figures do not settle the question
Some hosting plans are described as suitable for approximately 10,000, 50,000 or 100,000 monthly visitors.
Those figures provide broad guidance, not a performance promise. A cached hobby blog and a shop with searches, logins, baskets and orders can place very different demands on hosting despite receiving the same number of visits.
Timing matters too. Visits spread through a month are different from thousands of people arriving in one hour. This simultaneous activity is called concurrency.
Resource problems can also arise with little traffic. Possible causes include:
- an inefficient or faulty plugin;
- importing a large amount of data;
- processing large images;
- generating a backup;
- scheduled automated tasks;
- database problems;
- malicious bots.
These problems usually produce slowness, timeouts or temporary errors rather than permanent content loss. Choose an adequate plan with monitoring and an upgrade route instead of trying to predict every future visitor.
What a minimum acceptable cheap plan should include
An inexpensive plan can be a sensible starting point if it passes these checks.
WordPress can be installed and maintained normally
You should be able to install WordPress easily, use ordinary themes and plugins, and keep the software updated.
If particular plugins are prohibited, the provider should explain why and identify alternatives or included functionality.
SSL is included
HTTPS should work without buying an expensive certificate or remembering to renew it manually each year.
Security is active rather than decorative
Look for managed server security, malware monitoring and a clear answer about what happens if malicious files are found.
Backups cover files and database
Establish the frequency, retention and restoration process. Prefer the ability to download an independent copy as well.
Help is available
Support should be able to explain whether a failure relates to the hosting, resource usage or something inside WordPress. It may not fix every plugin problem, but it should help locate the boundary.
The renewal price is visible
A £2 monthly introduction that renews at £14 is not really a £2 long-term plan. Compare what you must pay today and what the same service costs after the promotion.
The site can grow or move
The host should provide a straightforward upgrade. It should also be possible to obtain the files and database and migrate the site elsewhere.
Warning signs
Be cautious if:
- no usable website backup is included;
- the host scans for malware but will not explain cleaning or recovery;
- restoration fees or procedures are unclear;
- ordinary WordPress plugins are blocked without explanation;
- the renewal price is difficult to find;
- resource usage cannot be seen or explained;
- the only answer to every problem is an expensive upgrade;
- changing host would make obtaining the files or database difficult;
- support cannot identify what it is responsible for.
The lowest price is not valuable if an ordinary mistake leaves you unable to recover the website.
Cancellation is not a backup strategy
A host may retain cancelled-site data briefly, but you should never depend on it. Secure and test your own copy before ending the service.
Before leaving any host:
- Obtain a complete copy of the website files and database.
- Create a WordPress content export as an additional safeguard.
- Confirm that the uploaded media is included or separately downloaded.
- Keep the domain registration active.
- Migrate the website to its destination.
- Test pages, images, forms, email and logins.
- Only then end the old hosting.
Changing nameservers does not copy a website. Pointing a domain and migrating site data are different jobs. The principle is simple:
Cancellation is not a backup strategy.
A simple hosting selection process
You do not need to compare every specification on the market. Work through the decision in this order.
1. Define the website you are building now
Is it mainly articles and images, or will it immediately operate a shop, membership area, course or interactive tool?
A normal content site can begin with much more modest resources.
2. Confirm security and updates
Check SSL, server protection, malware procedures, WordPress updates and account security.
3. Confirm backup and recovery
Ask whether files and database are included, how long copies are retained, who restores them and whether you can download one.
4. Understand the support boundary
Find out who helps when the website is down and whether support can diagnose resource or server problems.
5. Check ordinary WordPress freedom
Confirm that normal themes and plugins can be installed and review any prohibited-plugin policy.
6. Calculate the continuing cost
Include hosting renewal, domain renewal, email, backups and security functions—not only the introductory monthly figure.
7. Check the route forward
Can the plan be upgraded without rebuilding? Can the site be migrated elsewhere? Can you obtain an independent copy?
8. Choose adequate rather than imaginary capacity
If the plan safely supports the website you are building now, it can be a sensible choice. Monitor the real site and upgrade when actual evidence shows the need.
My conclusion
I do not think a new hobby website needs expensive hosting merely because it might attract significant traffic one day.
I do think it needs protection from the first day.
My own memorable hosting failure was not caused by a huge audience. I caused it myself while trying to tidy up old plugin files. The value of my hosting became obvious when SiteSupport restored the website.
A cheap plan can be good value when it includes effective security, complete backups, a usable recovery process, normal WordPress access, support and a clear way to upgrade or move.
Do not begin by buying hosting for thousands of imaginary visitors. Begin by making sure the work created for your first real visitors cannot be lost through one mistake.
The next decision is the address attached to that hosting: How to Choose a Domain Name You Won’t Regret.