Website Launch Checklist 2026
Contents
Domain DNS
Before launch, verify the domain is pointing to the correct server and DNS propagation is complete (use whatsmydns.net to check). Set up WWW redirect to non-WWW or vice versa. Configure A record, CNAME, and MX record if email is needed.
Installation: SSL/HTTPS Launch
SSL must be installed before launch. Google demotes sites without HTTPS, and users see "Not Secure" in browsers. Install free Let's Encrypt or use hosting-provided SSL. Check for mixed content (HTTP links in HTTPS pages). Redirect HTTP to HTTPS via .htaccess or server config.
Backup: Backup Launch
Backup must be set up before launch, not after. Install a backup plugin (WordPress: UpdraftPlus) or backup script. Check if hosting provides daily backup. Test a restore from backup once before going live.
SEO
Every page needs unique title tags and meta descriptions. One H1 per page. robots.txt allows crawlers. sitemap.xml exists and is submitted to Google Search Console. Canonical URLs are correct with no duplicate content.
Installation: Analytics Launch
Install analytics before launch to collect data from day one. Options: Google Analytics 4 (free), Plausible.io (privacy-focused), Fathom, or StatPX (free tier available). Test tracking with real-time report.
Security Launch
Scan for vulnerabilities before launch using securityheaders.com (security headers) and ssllabs.com (SSL grade). WordPress: disable directory listing, change default admin username, remove unused themes/plugins, set up Fail2Ban or login attempt limiter.
Performance Speed
Before launch, test with PageSpeed Insights (Google) and GTmetrix. Goals: LCP ≤2.5s, FID ≤100ms, CLS ≤0.1. All images must be compressed and have width/height attributes. CSS/JS minified and images lazy-loaded.
Mobile Responsive
Test in Chrome DevTools: F12 → Toggle Device Toolbar. Test multiple viewports: 375px (iPhone SE), 768px (iPad), 1024px (tablet landscape). Verify text is readable, buttons are tappable, no horizontal scrolling.
Legal Pages
Privacy Policy: required if collecting any user data (including analytics cookies). Terms of Service: for service/e-commerce sites. Disclaimer: for blogs or affiliate sites. Cookie Notice: if using analytics that set cookies. Contact Page: communication channels.