Skip to content
Web Hosting

How to Migrate a WordPress Site to a New Host (Without Downtime)

13 July 2026 10 min read ESAGAMES Team

Migrating a WordPress site sounds scary, but it's really just moving two things - your files and your database - and then pointing your domain at the new server. Done in the right order, visitors never see a second of downtime. Here is exactly how to migrate a WordPress site the safe way.

The two things you're actually moving

A WordPress site is just two parts: the files (WordPress core, your theme, plugins and uploads, all under one folder) and the database (your posts, pages, settings and users). Migrating means copying both to the new host, reconnecting them, testing, and only then switching your domain over.

Option A: let a plugin do it

For most sites, a migration plugin is the easiest route. Tools like Duplicator, All-in-One WP Migration or Migrate Guru package your files and database into one archive that you restore on the new host. This is the recommended path if you're not comfortable with FTP and databases.

Option B: migrate manually (more control)

If you prefer to do it by hand - or the site is too big for a plugin - the steps are:

  • Back up everything first. Download all files over SFTP and export the database from phpMyAdmin. Don't skip this.
  • Copy the files to the new host over SFTP, into the web root. If your FTP login fails part way through, see FTP 530 login authentication failed.
  • Import the database - create a fresh database on the new host and import your SQL export.
  • Update wp-config.php with the new database name, user and password.
  • Test before switching DNS (see below).

Test on the new server before you switch

This is the trick that gives you zero downtime: test the site on the new host while your domain still points at the old one. Most hosts give you a temporary URL, or you can edit your computer's hosts file to preview the real domain on the new server's IP. Click through the site, log into wp-admin, check images and forms. Fix anything broken now - before real visitors are involved. If the database won't connect, see error establishing a database connection; if you get a blank page instead, see the WordPress white screen of death.

Migrating email, subdomains and cron jobs too

A WordPress migration is rarely just the site. If you run mailboxes on the same domain, plan their move separately so mail keeps flowing - a broken SPF/DKIM record after a move is a common cause of mail going to spam. Also check for subdomains (staging, an API, a blog on its own subdomain) and any scheduled WP-Cron tasks or real server cron jobs that need to exist on the new host too, not just the main files and database.

Switch DNS last

Once the new copy works, change your domain's A record to the new server's IP (or update the nameservers). See how to point a domain to your server for the exact steps. DNS changes take time to propagate - up to a few hours - during which some visitors reach the old server and some the new one. Because both run the same site, nobody notices. Tip: lower your domain's TTL to 300 seconds a day before the move so the switch propagates faster. If a visitor reports DNS probe finished NXDOMAIN after the move, it usually means propagation simply hasn't reached them yet.

After the move

  • Update the site URL if the domain changed (Settings → General, or a search-and-replace in the database).
  • Install an SSL certificate on the new host so the site stays on HTTPS - if you see a warning, see fixing "Not Secure" / expired SSL.
  • Watch for a too many redirects loop, a common symptom of an SSL or site-URL mismatch right after a migration.
  • Leave the old host running for a week in case you need to roll back, then cancel it.

If something goes wrong: rolling back

Because you switch DNS last and keep the old host running, rolling back is simple: point the A record back at the old server. This is exactly why the "test first, switch DNS last" order matters so much - it keeps a working fallback alive the entire time, so a migration mistake is an inconvenience, not an outage.

The golden rule of migration: test everything on the new server before you touch DNS. Switch the domain last, and downtime is zero.

Migrate to fast, protected hosting

Moving to ESAGAMES? Our team can help you migrate your WordPress site onto NVMe hosting with free SSL included.

See web hosting
More from the blog

Keep reading

Security

What Is the AISURU Botnet? The Terabit DDoS Threat Explained

One of the most powerful DDoS botnets of 2025–2026 — how AISURU infects IoT devices and why gaming is its #1 target.

5 June 2026
Security

DDoS Trends of 2025–2026: Bigger, Faster, and Aimed at Gamers

DDoS trends 2025–2026: attacks are bigger, faster and increasingly aimed at gaming. The key trends and what they mean for you.

20 May 2026
Buyer's guide

How to Choose a Game Server Host (2026 Buyer's Guide)

CPU, Anti-DDoS, location, panel, billing and support — the full checklist that actually matters before you choose a game server host.

8 May 2026
Infrastructure

Why Frankfurt Is the Best Location for EU Game Servers

Home to the world's biggest internet exchange — why Frankfurt gives EU game servers the lowest, most stable ping.

22 April 2026
Guides

Best Minecraft Modpacks to Host in 2026

From All The Mods 10 to RLCraft and Create — the best modpacks to run a server with this year, and the RAM each needs.

11 June 2026
Buyer's guide

How Much Does a Game Server Cost? (2026 Pricing Guide)

What actually drives the price of a game server by game and RAM — and what to expect to pay in 2026.

9 June 2026
Comparison

FiveM vs RedM: What's the Difference?

FiveM vs RedM: what each is, community size, setup differences, and which to choose for your roleplay server.

2 June 2026
Security

How to Protect Your Game Server From DDoS Attacks

Why game servers get attacked, what real DDoS protection looks like, and what you can (and can't) do yourself.

28 May 2026
Guides

Best Free Minecraft Server Plugins in 2026

EssentialsX, LuckPerms, WorldGuard, CoreProtect and more — the free plugins every Paper/Spigot server should run.

12 June 2026
Guides

Best CS2 Server Plugins in 2026

Metamod:Source, CounterStrikeSharp, MatchZy and more — the plugins that turn a CS2 server into retakes, pugs or practice.

12 June 2026
Guides

Best Rust Server Plugins in 2026 (Oxide / Carbon)

Admin tools, kits, economy, clans, raidable bases — the Oxide/Carbon plugins that build a sticky Rust server.

12 June 2026
Guides

Best FiveM Scripts & Resources in 2026

ESX/QBCore, ox_lib, ox_inventory, pma-voice and more — the resources every FiveM RP server is built on.

12 June 2026
Guides

Best Garry's Mod Server Addons in 2026

ULX, Wiremod, PAC3, DarkRP, TTT and more — the addons and gamemodes that make a Garry's Mod server.

12 June 2026
Guides

Best Valheim Mods to Run on Your Server in 2026

BepInEx, QoL, building and content mods — the best Valheim mods to run on a dedicated server this year.

12 June 2026
Guides

Best ARK Mods to Run on Your Server in 2026

Structures Plus, Spyglass, Cryopods and more — the best ARK mods to run on a server this year.

12 June 2026
Guides

Best Project Zomboid Mods for Your Server in 2026

QoL, vehicles, weapons and overhauls — the best Project Zomboid mods to run on a server this year.

12 June 2026
Guides

Best Palworld Mods & Server Tweaks in 2026

PalDefender, config tuning and QoL mods — the best ways to customise a Palworld dedicated server.

12 June 2026
Guides

The Best Games to Host a Server For in 2026

Minecraft, Rust, FiveM, CS2, Palworld, Valheim, DayZ and more — the best games to run a server for this year.

12 June 2026
Security

What Is a DDoS Attack? A Plain-English Guide for Server Owners

No jargon — what a DDoS attack actually is, DDoS vs DoS, the main types, and how to actually stay online.

24 May 2026
Security

How ESAGAMES Anti-DDoS Protection Works

A look under the hood of our Anti-DDoS protection — multi-Tbps Frankfurt filtering and in-house XDP mitigation, always on.

23 May 2026
Infrastructure

What Is XDP DDoS Filtering? Line-Rate Protection Explained

eBPF/XDP filters packets in the kernel at line rate, before they reach your game. How it stops DDoS, and its limits.

21 May 2026
Security

What Is an IP Stresser or Booter? (And Why You Should Never Use One)

Booters and stressers are DDoS-for-hire. How they work, how they're abused against gamers, and the legal reality.

19 May 2026
Security

Layer 4 vs Layer 7 DDoS Attacks Explained

Network-layer floods vs application-layer attacks — the real difference, gaming examples, and how each is stopped.

17 May 2026
Security

Is My Game Server Being DDoSed? How to Tell

Attack or just lag? The tell-tale signs of a DDoS, how to confirm it with real tools, and what to do during and after.

15 May 2026
Infrastructure

Inside the ESAGAMES Network: Frankfurt, Peering and Low Ping

Why we build in Frankfurt, what peering actually means, how it cuts ping, and how it ties into DDoS filtering.

13 May 2026
Guides

Game Server Lag: Is It Your CPU or Your Network?

Lag comes from two places: CPU tick rate or the network. How to tell which is hurting you, and how to fix it.

12 May 2026
Security

What Is a Botnet? How Everyday Devices Become DDoS Weapons

A botnet is an army of hijacked devices used to launch attacks. How they are built, controlled, rented and stopped.

31 May 2026
Security

What Is the Mirai Botnet? The Malware That Rewrote DDoS

The IoT malware that launched record DDoS attacks and inspired today's botnets. What it is and why it still matters.

30 May 2026
Security

DDoS Attack Vectors Explained: UDP, SYN, Amplification and More

A detailed tour of the main DDoS techniques - UDP, SYN, amplification, fragmentation, Layer-7 - and how each is stopped.

1 June 2026
Security

How to Protect a TeamSpeak or Voice Server From DDoS

Voice servers are easy targets and very sensitive to lag. Why TeamSpeak gets hit and how to actually protect it.

29 May 2026
Reference

Anti-DDoS Glossary: Key Terms Every Server Owner Should Know

Plain-English definitions of the DDoS and Anti-DDoS terms you will actually run into - from botnet to XDP.

27 May 2026
Guides

Game Server Security Checklist (Beyond Anti-DDoS)

DDoS is one threat among many. A practical hardening checklist for passwords, admin access, backups and more.

26 May 2026
Security

The Biggest DDoS Attacks in History: Records That Broke the Internet

From the Mirai attack that took down Twitter to record multi-terabit floods - the attacks that broke the internet.

10 June 2026
Security

Why Do People DDoS Game Servers? The Motives Behind the Attacks

Rivalry, revenge, extortion, boredom - the real reasons people attack game servers, and what it means for you.

9 June 2026
Guides

What Is Tick Rate? Why 64 vs 128 Tick Matters

Tick rate is how often a server updates the world per second. What it means, and why 64 vs 128 tick matters.

7 June 2026
Guides

What Is Netcode? Why Your Shots Don't Always Register

Netcode keeps online players in sync. What it is, why hit-reg feels off, and how lag compensation works.

6 June 2026
Guides

What Is Ping, and How Do You Lower It?

Ping is the delay between you and the server. What causes high ping, and practical ways to lower it.

4 June 2026
Comparison

Dedicated vs Shared Game Server Hosting: What's the Difference?

Shared, VPS or dedicated? What each means, the real trade-offs, and which is right for your community.

3 June 2026
Security

What to Do If Someone Gets Root Access to Your VPS

Suspect a root compromise? A calm, step-by-step guide to contain it, investigate, recover cleanly and prevent a repeat.

17 June 2026
Guides

How to Secure a Linux VPS: A Hardening Checklist

SSH keys, firewall, updates, brute-force protection, least privilege - the essentials to harden a Linux VPS on day one.

14 June 2026
Guides

How to Harden SSH and Stop Brute-Force Attacks

SSH is the most attacked service on most servers. How to harden it: keys, no root login, and stopping brute-force bots.

13 June 2026
Security

Famous Linux Vulnerabilities Every Server Owner Should Know

Heartbleed, Shellshock, Dirty Pipe, PwnKit, regreSSHion - the famous Linux bugs, what they did, and the lessons.

16 June 2026
Security

The XZ Backdoor: How the Internet Almost Got Backdoored

A hidden backdoor in a core Linux library, planted by a trusted maintainer over years and caught by luck. The story.

15 June 2026
Infrastructure

What's Changing in Linux & OS Security (And Why It Matters)

Rust in the kernel, Wayland, the memory-safety push, io_uring caution, the CentOS shift - the changes reshaping OS security.

11 June 2026
Web Hosting

How to Speed Up a WordPress Website (2026 Guide)

The things that actually make WordPress fast - from hosting and caching to images, plugins, database and CDN.

14 July 2026
Comparison

Shared vs VPS vs Dedicated Hosting: Which Do You Need?

A plain-English comparison of the three hosting tiers - cost, performance, control and who each is really for.

12 July 2026
Buyer's guide

How to Choose a Web Hosting Provider (2026 Checklist)

What actually matters when picking a web host - and the red flags that give a bad one away.

11 July 2026
Comparison

cPanel vs DirectAdmin vs Plesk: Which Control Panel?

The three big hosting control panels compared - ease of use, features, speed, security and cost.

10 July 2026
Web Hosting

How to Secure a WordPress Website: A Practical Checklist

The practical steps that stop the vast majority of WordPress hacks - no paranoia required.

9 July 2026
Security

Januscape (CVE-2026-53359): The KVM Bug That Lets a VM Escape to the Host

A 16-year-old Linux KVM flaw lets a guest VM break out to the host on Intel and AMD. Are you affected, and what to do.

15 July 2026
Security

TeamSpeak 3 Server Vulnerabilities (CVE-2026-4390/4391/4392): Update to 3.13.8

Three High-severity crash bugs hit TeamSpeak 3 Server 3.13.7 and below - what they do and how to patch.

13 July 2026
Security

cPanel & WHM Authentication Bypass (CVE-2026-41940): Patch Now

A critical, actively-exploited cPanel & WHM auth bypass (CVSS 9.8). Are you affected, and exactly what to do.

14 July 2026
Comparison

ESX vs QBCore vs Qbox: Which FiveM Framework in 2026?

The one FiveM decision that is expensive to reverse — compared honestly on scripts, performance and community.

17 July 2026
Guides

Does SourceMod Work on CS2? (No — Here's What to Use)

SourceMod does not support CS2 — not in 2026, not through a bridge. Here is what actually replaced it.

17 July 2026
Payments Secure checkout with cards, banking apps and digital wallets.

Choose the payment flow that fits your stack and region without leaving the platform.

Pay by Zen Visa Mastercard Paysafecard PaysafeCash Skrill Trustly Bancontact UnionPay iDeal WebMoney