Before a business changes agency or starts a website maintenance plan, sending only a WordPress admin account is not enough. Safe maintenance requires control of access, hosting, domain, DNS, backup, plugins, themes, forms, tracking, mail delivery and known risks. Without a proper handover, a simple plugin update or layout change can break lead capture, lose data or make recovery slow when the website fails.
Why handover matters before maintenance
Many business websites are built and then operated through scattered personal accounts. Months later, the business may not know who owns the domain, where hosting is paid, which plugins have active licenses, where backups are stored, which email receives form submissions or whether Analytics and Search Console belong to the company. When an incident happens, the new maintenance team has to investigate while the website is already at risk.
A structured handover separates ownership, technical health and support scope. It also helps the business choose the right website management service, WordPress maintenance, security, speed or hosting scope.
1. Domain, hosting and DNS ownership
First, confirm who owns the domain, which email controls it, where the website is hosted, who pays for the service and where DNS is managed. If the business does not control domain or hosting access, maintenance commitments are limited. A domain expiry, DNS mistake or locked hosting account cannot be fixed quickly without valid access.
Create a record of provider, login owner, alert email, expiry date, payment owner, internal contact and emergency access. This information should live in a company-controlled location, not only in a personal chat thread.
2. WordPress accounts, plugins, themes and licenses
The maintenance provider should receive a separate administrator account, not a shared account from an employee or previous agency. After handover, review all administrator users, remove accounts that are no longer needed, enable multi-factor authentication where possible and identify plugins or themes that need licenses for updates. Many maintenance problems come from expired premium plugins, undocumented custom themes or code edited directly in a theme.
If the website uses Bricks, Elementor, WooCommerce or another builder, document which areas are page content, which are global templates and which parts require backup before editing. This prevents the common “fix one page, break several pages” problem.
3. Backup must be restorable, not just present
A backup file is not the same as a recovery plan. The handover checklist should state whether backups include files, database, uploads and hosting configuration, where backups are stored, how long they are retained and when the last restore test happened. If the website runs ads, ecommerce or lead forms, the business also needs to know what data could be lost when restoring an older copy.
For business WordPress websites, backup should be checked before major updates. If the current hosting does not provide reliable backup and restore, review business WordPress hosting or an off-hosting backup option.
4. Forms, lead email and conversion tracking
Test every important form: contact, quotation, consultation, booking, checkout and recruitment. Do not stop at the success message on screen. Confirm that email reaches the correct recipient, does not land in spam, is stored in WPForms or CRM if required and is recorded by conversion tracking. This is the type of issue that can lose revenue while the website still looks fine.
For paid campaigns, hand over Google Tag Manager, Analytics, Search Console, ad pixels, thank-you pages and conversion event definitions. Without reliable measurement, maintenance and optimization decisions are blind.
5. Security, old users and risky plugins
Websites edited by many people often contain old administrator users, unused plugins, unknown files in uploads, outdated themes or scripts from previous campaigns. Before ongoing maintenance starts, review admin rights, active sessions, unused plugins, security warnings, PHP version, file permissions and SSL status. If there are signs of malware, suspicious redirects or unknown admin accounts, handle it as WordPress security work before broad updates.
6. Content, SEO/AIO and priority pages
Maintenance is not only plugin updates. The incoming team needs to know which pages generate leads, which pages receive traffic, which landing pages run ads and which articles must keep search visibility. The checklist should include the sitemap, service pages, pricing, contact page, top traffic posts, form pages and ad landing pages.
For SEO and AI search, review titles, meta descriptions, headings, canonical tags, index/noindex status, schema, internal links, WebP images, alt text and direct-answer content. Updating or removing content without this context can reduce search signals.
Quick handover checklist
| Group | What to receive | Risk if missing |
|---|---|---|
| Domain/DNS | Provider, account, expiry date and DNS records | Loss of control or access interruption |
| Hosting/VPS | Login, resources, backup and error logs | Slow server troubleshooting or recovery |
| WordPress | Dedicated admin, plugins, theme, licenses and templates | Broken updates and unclear layout dependencies |
| Leads | Forms, recipient email, CRM, tracking and thank-you pages | Lost leads without quick detection |
| SEO/AIO | Core pages, canonical, index status, schema and links | Lower search visibility or lost page context |
When should a business hire maintenance after handover?
If no one checks the website weekly, backup recovery is uncertain, domain or hosting ownership is unclear, or there is no monthly report, a maintenance plan is recommended. For websites with multiple forms, landing pages or lead dependency, choose a scope that includes form tests, backup, security, speed and monthly reporting instead of only “plugin updates”. Review website management pricing to separate recurring work from extra requests.
Frequently Asked Questions
Is a WordPress admin account enough for maintenance?
No. WordPress admin access helps with content and plugins, but it does not cover domain, DNS, hosting, backup, error logs or server recovery.
Should passwords be changed after handover?
Yes. Create a dedicated account for the new provider, remove unused old accounts and change important credentials after confirming access.
What should be checked first if the website runs ads?
Prioritize forms, call/chat buttons, conversion tracking, thank-you pages, mobile speed and backup before editing content or updating plugins.
Need a safer website maintenance takeover?
IT Systems can review the current state, prepare a handover checklist, identify risks and recommend the right maintenance scope for business WordPress websites. See WordPress maintenance or website management services.
