How to Install WordPress With Softaculous on cPanel

Softaculous is the installer that most cPanel hosts provide, and it is the fastest way to put WordPress on a new domain. The installer does the database, the configuration file and the first login for you. What it does not do is choose the settings that keep the site secure, fast and easy to update. This guide walks through a WordPress install in Softaculous, the choices that matter, and the checks you should run before you publish anything.

If you want the install handled and the server tuned for WordPress, SiteHarbour’s WordPress hosting plans include LiteSpeed servers, free SSL, staging and daily or weekly backups. The steps below apply to any cPanel account, so you can follow them on your own plan too.

Before you start#

• A domain or subdomain that points to the account. Check it with dig +short example.com before you install, and wait for it to resolve.
• An email address you read, for the admin account and for WordPress notices.
• A strong password from a password manager, not one you use anywhere else.
• Enough free space in the account. Check Disk Usage in cPanel, because a full disk makes the install fail half way.

Step 1: Open the WordPress installer#

Log in to cPanel and open Softaculous Apps Installer. Choose WordPress, then select Install. Softaculous shows the form that creates the site.

Step 2: Choose the domain and folder#

Pick the domain. Leave the directory field empty if the site should live at the root of the domain, which is the usual choice. Enter a folder name only when WordPress should live in a subfolder, such as /blog. A subfolder install works, but it complicates redirects and sitemaps later, so use the root unless you have a reason not to.

Step 3: Set the site name and the admin account#

Use the real site name, because it appears in the title tags and in search results. For the admin username, do not use admin, which is the first name attackers try. Choose a name that is hard to guess. Enter a strong password and a real email address.

Expected: the admin username and email are the ones you will log in with. Write them down in your password manager before you continue.

Step 4: Turn on automatic updates and backups#

In the Advanced Options section, enable automatic upgrades for minor WordPress releases. Security fixes arrive in minor releases, so this keeps the core current without a visit from you. Leave major upgrades for manual testing.

Set a backup location and a schedule in Softaculous if your plan supports it. Keep the backup on a separate storage location or download it, as described in how to back up and restore a cPanel account.

Step 5: Install and check the site#

Select Install and wait for the progress message to finish. Softaculous creates the database, the wp-config.php file and the admin account. Open the site in a browser and check three things: the home page loads over HTTPS, the admin login works, and the dashboard shows the WordPress version you expect.

curl -sI https://example.com | head -n 1

Expected: HTTP/2 200 or a redirect to HTTPS. If the site shows the default Softaculous page, the domain points to the account but the installation folder is not the one you expected. Check the folder in File Manager.

Step 6: Set the settings that matter#

• Permalinks. In Settings > Permalinks, choose Post name. It gives short, readable addresses that search engines prefer.
• Search visibility. In Settings > Reading, keep “Discourage search engines” off once the site is ready to be found.
• Comments. Turn off comments you do not need, or enable a spam filter before you enable them.
• Remove the sample content. Delete the sample post, page and comment that WordPress creates, so they are not indexed.
• Users. Create a separate editor account for writing, so day-to-day work does not use the admin login.

Step 7: Check the file permissions#

Softaculous sets the right permissions for a new install, but a permission change later can break uploads or updates. Folders should be 755, and files should be 644. Check one folder over SSH:

stat -c "%a %n" ~/public_html ~/public_html/wp-config.php

Expected: 755 for the folder and 644 or 640 for wp-config.php. A file set to 777 is a security hole, so change it back.

Common mistakes#

• Installing into a folder that already has files. The installer does not warn you about files you already uploaded there. Check the folder first.
• Leaving the default admin username. Attacks against WordPress often start with admin.
• Installing on a domain that has not finished DNS. The site looks broken until the domain points to the account.
• Turning on every plugin on day one. Install only what the site needs. Each plugin is more code to keep updated.

Frequently asked questions#

Is Softaculous the same as WordPress?#

No. Softaculous is an installer inside cPanel. It installs WordPress and many other applications, and it can keep them updated.

Can I move a Softaculous install to another host?#

Yes, with a backup and restore. The guide on how to move a WordPress site to a new host without downtime covers the steps.

Should I enable automatic major upgrades?#

Not on a site that earns money. Major releases can change plugins and themes. Test them on a staging copy first, as shown in how to set up a WordPress staging site.

Why does the installer say the database already exists?#

An earlier install left a database with the same name. Remove the old database in MySQL Databases if you no longer need it, or choose a different name for the new one.

A good WordPress install is a few careful choices, not just a click on Install. Choose the root folder, avoid the default admin name, enable minor updates, and check the permissions. For the performance side of a new site, read how to speed up WordPress with LiteSpeed Cache next.