Website Maintenance Checklist: Weekly, Monthly, Quarterly
Websites don't fail loudly. They decay — a form that silently stops delivering, a plugin two years behind on security patches, links dying at the web's background rot rate, a domain renewal card that expired. Maintenance is the routine that catches decay before visitors do, and the trick is cadence: a few minutes weekly, an hour monthly, an afternoon quarterly. Here's a checklist organized exactly that way, with the reasoning behind each task so you can adapt it to your site.
Weekly — 10 minutes
- Confirm the site is up and fast-ish. Better: let an uptime monitor watch 24/7 (free tiers abound) and just check its alerts reached you. Downtime you learn about from a customer is the expensive kind.
- Verify backups actually ran. Not "backups are configured" — open the storage and see this week's file, with a plausible size. Backups fail silently more often than sites do.
- Test your money paths. Submit the contact form, run a test checkout, click the signup flow. These break from third-party changes (mail providers, payment APIs) with no error on your side.
- Skim for spam and junk. Comment queues, user registrations, form submissions — small weekly sweeps beat quarterly archaeology.
Monthly — about an hour
- Scan your key pages for broken links. Home, pricing, top-10 traffic pages: open each and run a one-click check — every link tested, dead ones highlighted in place. External links rot on other people's schedules (38% of pages per decade), so a page clean last quarter isn't clean forever. Fix internal breaks immediately; batch the external ones (the repair playbook).
- Apply updates: CMS, plugins, themes, dependencies. The single most common hack vector on small sites is a known vulnerability in an outdated plugin. Update in a staging copy if you can; at minimum, after that verified backup.
- Read Search Console's error reports. Indexing → Pages: new 404s (redirect any with inbound links), soft 404s, mobile or schema warnings. This is where Google tells you what it dislikes — for free (why those 404s matter).
- Spot-check performance. One PageSpeed Insights run on the homepage and a heavy template page. You're not chasing a score — you're catching regressions: the 4 MB hero image someone uploaded, the third-party script that doubled load time.
- Glance at analytics for anomalies. Traffic cliffs, a page suddenly at zero, referral spam. Five minutes; you're looking for surprises, not writing a report.
Quarterly — an afternoon
- Full-site link audit. Monthly covers key pages; quarterly, crawl everything (a site crawler, or the extension across your sitemap's pages) so links on long-tail pages get checked too. Old posts are where rot concentrates.
- Audit your redirects. Old 301s pointing at pages that have since moved again form chains; flatten them to single hops. Check that migration-era redirects still target living pages.
- Review content freshness. Your top-20 organic pages: are the screenshots current, the prices right, the "best X in 2024" headlines aging badly? Refreshing proven pages usually beats writing new ones.
- Check certificates and renewals. TLS certificate expiry (auto-renewal configured and working?), domain expiry date, payment method on the registrar account. Entire businesses have vanished over a lapsed card.
- Prune and consolidate. Thin, outdated, or duplicate pages: improve, merge (with 301s), or retire deliberately with a proper 404/410.
- Test restore, not just backup. Once a quarter, actually restore a backup somewhere disposable. An unrestorable backup is a superstition, not a safety net.
After every change — not on a schedule
- Published or edited a page? Scan it for broken links before (or right after) it goes live — seconds with an extension, and it catches the pasted-URL typos that create instant 404s.
- Renamed, moved, or deleted anything? Write the 301 first. Migrations and redesigns without redirect maps are the single biggest self-inflicted SEO wound.
- Installed something new? Re-test the money paths (forms, checkout) that week — new plugins break old flows.
The whole checklist on one screen
| Cadence | Tasks |
|---|---|
| Weekly | Uptime alerts reaching you · backups verified by looking · forms/checkout tested · spam swept |
| Monthly | Key pages link-scanned · CMS/plugins updated · Search Console errors reviewed · performance spot-check · analytics anomalies |
| Quarterly | Full link audit · redirect chains flattened · top content refreshed · certs/domain/payment checked · thin content pruned · restore tested |
| Every change | New/edited pages scanned · 301s before any URL change · money paths re-tested after installs |
If you only adopt one habit: scan pages when you touch them. Most site decay enters through edits — a renamed URL here, a pasted link there — and a scan at the moment of change catches it while the fix is a ten-second edit instead of a quarterly cleanup item.