Configure WordPress updates around one rule: make a verified backup of the database and files, keep the site on HTTPS, obtain packages from WordPress.org, and use the built-in update screen whenever the server can write files safely. Enable plugin and theme auto-updates selectively, then check the result in Site Health. When WordPress asks for FTP credentials or an update fails, the usual cause is filesystem ownership, blocked connectivity, a disabled background-update mechanism, or a stale maintenance lock—not a need to guess at passwords.
Antihost offers managed WordPress hosting with free migration, one-click staging and a 14-day free trial.
This procedure applies to a normal single-site installation. A host, security plugin, permissions policy, or multisite network can hide controls or change who is allowed to update. The exact release number and PHP requirements are intentionally not listed here because they change; use the requirements shown by your current WordPress release and host.
As an Amazon Associate I earn from qualifying purchases.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Prepare a safe update window
Updates replace executable PHP, JavaScript, CSS, and translation files and may also change the database schema. A secure installation process therefore starts with recovery, not with the update button.
1. Create and verify a complete backup
Make a fresh copy of both parts of the site:
- Database: posts, pages, users, settings, orders, game guides, comments, and plugin data.
- Files: WordPress core,
wp-content(themes, plugins, uploads), and the configuration file that connects WordPress to the database.
The official guidance says, “Before upgrading, please backup your database and files.” A backup is useful only if it can be restored. Check that the archive opens, that its timestamp is current, and that you know where the restore procedure and credentials are documented. Automatic backups are particularly important before enabling unattended plugin or theme updates because they provide the rollback path if an update conflicts with the site.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
2. Keep administration and downloads on HTTPS
Use HTTPS for the public site and for /wp-admin. Confirm that the browser shows the secure connection without certificate warnings, and make sure WordPress Address and Site Address use the intended HTTPS scheme. HTTPS protects administrator sessions and the credentials used for any remote file operation; it does not make an untrusted download safe.
3. Use the official release source
Download WordPress only from https://wordpress.org. WordPress Developer Resources states: “Official releases are not available from other sites — never download or install WordPress from any website other than https://wordpress.org.” Avoid packages reposted on forums, file mirrors, or “modified” download pages. The Dashboard update process obtains the package through WordPress.org and verifies it as part of installation.
4. Record the starting state
Before clicking Update, note the current WordPress version, active theme, important plugins, PHP version shown by your host, and any maintenance or staging mode. Capture a screenshot of the Dashboard > Updates screen if you need to prove which updates were offered. This record makes it easier to identify a compatibility change after the update.
Update WordPress core from wp-admin
Use Dashboard > Updates
- Sign in with an administrator account and open Dashboard > Updates.
- Read the listed WordPress version and the accompanying notices. Confirm that the backup completed before proceeding.
- Choose the automatic core upgrade when it is offered. Do not refresh, close the browser tab, or start a second update while the first is running.
- Wait for WordPress to download the package, unpack it, verify the files, install the new version, and upgrade the database if the release requires it.
- When the success screen appears, open the site in a private browser window and visit the main templates and the administrator area.
The one-click process is more than a file copy: it stages the package, checks it, replaces core files, and runs the database upgrade. A backup is still required because a successful core update can expose an incompatibility in a theme or plugin that was not visible beforehand.
Understand what the core screen does not update
Core, plugins, themes, and translations are separate update groups. A current WordPress core does not imply that extensions are current. Return to Dashboard > Updates and review each group rather than assuming one successful click completed everything.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Enable plugin and theme automatic updates deliberately
Per-item automatic updates for plugins and themes require WordPress 5.5 or newer. They are controlled independently, so enabling them for one extension does not opt every extension into unattended changes.
Recommended Free Tools
Plugins
- Open Plugins > Installed Plugins.
- Find the Automatic updates column. For a plugin that you have tested and want updated without a manual click, select Enable auto-updates.
- Use the bulk control when you need to enable or disable several plugins, then review the resulting list item by item.
- Leave high-impact or rarely maintained plugins on manual updates until you have a tested rollback plan. An automatic update should never substitute for a backup.
WordPress documentation puts the security reason plainly: “To keep your WordPress site secure, you should always update your plugins and themes to the latest version.” Selective automation lets you act on that advice while retaining control over extensions that affect logins, payments, editorial workflows, or custom game-site functionality.
Themes
- Open Appearance > Themes.
- Select a theme to open its details and use the available Enable auto-updates control.
- Keep a record of the active theme and any child theme. Updating an inactive theme can still matter if it is the fallback theme used during recovery.
- After an automatic theme update, inspect the homepage, menus, typography, responsive layout, and custom templates.
Choose a policy instead of enabling everything
A practical policy is to automate well-supported extensions, keep custom or mission-critical components on manual approval, and review the update log after every background run. If the automatic-update link is missing, disabled, or immediately turns off, treat that as a configuration or host restriction and investigate it rather than forcing files into place.
Know how background updates work
WordPress 3.7 and later can apply minor and security releases in the background. These are maintenance updates intended to keep an installation protected without requiring an administrator to start every small release. Major feature releases generally require an administrator to begin the upgrade from wp-admin.
Background updates depend on more than the version number. WordPress must be able to run scheduled tasks, reach its update services, and write files as the web-server user. A site can therefore be on a recent version while reporting that background updates are not working. Treat the status checks in Site Health as operational evidence, not as a guarantee that every extension will update unattended.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Why WordPress asks for FTP credentials
When you start a one-click update, WordPress runs as the web-server account. It needs write access to the directories and files it is replacing. If the files are owned by a different account, or if permissions prohibit writes, WordPress cannot safely complete the operation and displays a connection-information form asking for FTP, FTPS, or related credentials.
What the prompt means
- It usually indicates a filesystem ownership or write-permission mismatch.
- It does not by itself prove that the update package is malicious or that your WordPress password is wrong.
- Entering credentials may allow this update, but it does not correct the underlying ownership problem; later automatic updates can fail again.
Check the ownership and permissions of the WordPress directory with your host or system administrator. The web-server user must be able to write the locations WordPress updates, while permissions should remain as restrictive as the host supports. Do not make the entire server filesystem world-writable just to remove the prompt.
When not to enter credentials
Do not type credentials into an unfamiliar form, a browser extension, or a page that is not your own HTTPS administrator session. If your host gave you a dedicated SFTP account, use that account for a controlled manual update instead of reusing a hosting-panel or database password. Store credentials in an approved password manager and rotate them if they were exposed.
Choose the update method that matches the site
| Method | Backup and rollback | Filesystem requirement | Transport security | Administrator control | Downtime and diagnosis |
|---|---|---|---|---|---|
| Dashboard automatic update | Requires a verified database and file backup before starting | WordPress must be able to write as the web-server user | Uses the site’s HTTPS session and WordPress update service | Lowest ongoing effort; suitable for routine core, plugin, and theme updates when selectively enabled | Usually the shortest interruption; errors are reported in wp-admin and Site Health |
| One-click update with connection credentials | Still requires a verified backup; credentials do not create a rollback | WordPress can connect through the supplied protocol but local ownership may remain inconsistent | Use encrypted FTPS or another encrypted connection when offered; never send passwords over plain FTP | More input at each update and less repeatable for unattended runs | Convenient for a single repair, but recurring prompts indicate a permissions problem to fix |
| Manual SFTP update | Best used with a known-good backup and a documented restore path | Requires an SFTP account and permission to write the WordPress files | SFTP encrypts the password and other data in transit | Highest control over when and which files are changed | More administrator work; appropriate when dashboard updates fail or direct file control is required |
Automatic updates reduce routine work. Manual SFTP is the safer operational choice when permissions are wrong, a previous update stopped halfway, or you need to control the exact file transfer. In every case, keep the backup and HTTPS requirements unchanged.
Free tools Windows power users keep installed
One-click scans. No signup required.
Diagnose an update that fails
Start in Tools > Site Health
- Open Tools > Site Health and review both the status and information screens.
- Look for a notice that the site cannot reach
api.wordpress.org. This points to DNS, firewall, outbound HTTP restrictions, proxy settings, or a host connectivity problem. - Check whether background updates are working. If they are disabled, identify whether a host policy, plugin, constant, or cron failure is responsible.
- Confirm that HTTPS is present and that automatic updates have not been disabled for the item you expected to update.
- Correct one cause at a time, return to Dashboard > Updates, and retry only after the backup and site status are sound.
Site Health identifies the categories that matter here: inability to reach the WordPress update service, absent HTTPS, non-working background updates, and disabled automatic updates. It cannot repair ownership or a blocked firewall by itself, but it tells you which administrator or host needs to act.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Check connectivity before repeating downloads
If a package download fails, verify that the server can resolve and reach WordPress.org and that outbound requests are not blocked. Ask the host whether a proxy, firewall, rate limit, or temporary service restriction is affecting the request. Repeating a failed download without changing the cause can leave a maintenance lock in place or produce the same incomplete result.
Remove a stale .maintenance file
During an update WordPress creates a short-lived .maintenance file in the site’s root directory. If the process stops unexpectedly, the file can remain and make the site report that it is in maintenance mode even after the update process has ended.
- Confirm that no update or database upgrade is still running.
- Use SFTP or your host’s file manager to locate
.maintenancein the WordPress root. - Delete only that stale file, not similarly named core files.
- Load the site and wp-admin, inspect Site Health, and retry the update or use the manual procedure if the core files are incomplete.
When the dashboard still cannot finish
Stop clicking through repeated failures. Preserve the backup, record the exact error, and check ownership and available disk space with the host. If the package was downloaded but files were not replaced completely, follow the official manual update procedure using SFTP. If the database upgrade screen appears, allow it to finish before testing the front end; interrupting a database upgrade can create a separate recovery problem.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Perform a controlled manual update with SFTP
SFTP is preferable to plain FTP for manual work. WordPress Developer Resources explains: “Using SFTP is the same as FTP, except your password and other data is encrypted as it is transmitted between your computer and your website.” Encryption protects the credentials and transfer data while they travel between your computer and the server; it does not validate the package or replace a backup.
- Obtain the release package from https://wordpress.org and verify that it is the version you intend to install.
- Confirm the backup and keep the current files available so you can restore them if necessary.
- Connect with the host-provided SFTP hostname, port, username, and key or password. Confirm the server identity presented by your SFTP client.
- Use the site root that contains
wp-admin,wp-includes, andwp-content. Follow the official manual-update instructions for replacing core files; preserve your site-specificwp-contentdata and configuration rather than overwriting them with a clean package. - Let the transfer complete, check for transfer errors, and verify that ownership remains correct for the web-server user.
- Open wp-admin. If WordPress requests a database upgrade, run it once and wait for completion.
- Remove a stale
.maintenancefile only if the update has definitely stopped, then inspect Site Health and the public site.
Do not use SFTP to install packages from unofficial mirrors, and do not delete files simply because an update failed. If you are unsure which files belong to a customized installation, stop and ask the host or the maintainer of the custom code.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Validate the site after every update
A green completion message confirms that WordPress finished its update routine; it does not test every page. Use a short, repeatable smoke test:
- Load the homepage and at least one representative article, category, search result, and media item.
- Sign in and open the editor, media library, menus, and any custom post type used by the site.
- Test forms, comments, account login, and other actions that write to the database.
- Check responsive and mobile layouts, cached pages, images, embedded video, and JavaScript interactions.
- Review error logs and Site Health for new warnings, especially HTTPS, cron, connectivity, and automatic-update notices.
- Confirm that the backup job still runs and that the current version is shown under Dashboard > Updates.
If a failure appears only after an extension update, restore the backup or disable the affected extension through a controlled recovery method, then contact its maintainer. Do not conceal the symptom by disabling all update checks indefinitely.
A repeatable maintenance routine
- Before each change: verify the database and file backup, HTTPS administration, available storage, and the current version record.
- For core: use Dashboard > Updates and wait for the package verification, file installation, and database upgrade to finish.
- For plugins and themes: enable auto-updates only for selected items on WordPress 5.5 or newer; leave sensitive custom components under manual review.
- After background updates: review the update history, Site Health, front-end pages, and administrator workflows.
- If a prompt or error appears: diagnose ownership, connectivity, cron/background status, HTTPS, and stale maintenance files before retrying.
- For manual recovery: use an encrypted SFTP connection and the official package, preserve site-specific files, and validate the result.
Host, multisite, and policy limitations
The controls described here can be hidden or disabled by a managed host, a security plugin, a permissions policy, or a multisite configuration. In a multisite network, the network administrator may control which sites can update extensions. A host may also run updates centrally or restrict outbound connections. Treat a missing button as a policy signal: check the host documentation and the relevant administrator role before changing files.
Version facts also have boundaries. Plugin and theme automatic-update controls date from WordPress 5.5, while background updates have been available from WordPress 3.7 onward; neither statement guarantees that a particular host permits them. Current release requirements, PHP support, and server behavior must be checked against the release and environment you are operating.
Secure outcome
The secure configuration is straightforward but sequential: maintain a restorable backup, administer over HTTPS, use WordPress.org packages, update core from Dashboard > Updates, enable extension auto-updates selectively, and monitor Site Health. FTP credentials appear when WordPress cannot write files as its web-server user; fix ownership rather than normalizing repeated prompts. When the dashboard cannot recover, remove only a confirmed stale maintenance lock and use encrypted SFTP with the official package and a documented rollback plan.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
