What Is Self-Hosted WordPress? (And Why It Matters)
Self-hosted WordPress gives you full control of your site. Here’s what that means, why it matters, and what you’re responsible for.
If someone told you your site runs on self-hosted WordPress and you nodded without really knowing what that means, you're not alone. The term gets used constantly but rarely explained. Self-hosted WordPress (also called WordPress.org self-hosted) simply means you own the software, you choose where it lives, and you control everything about it. That freedom is powerful — and it comes with real responsibilities. This article explains exactly what you're working with, what you own, and what that means for your day-to-day site management.
Self-Hosted WordPress vs. WordPress.com: The Core Difference
There are two very different products that share the WordPress name, and confusing them causes real problems.
| Feature | Self-Hosted WordPress (WordPress.org) | WordPress.com (Hosted) |
|---|---|---|
| Software ownership | You download and own it | WordPress.com owns and runs it |
| Hosting | You choose your own host | Included in the plan |
| Plugin access | Any plugin, no restrictions | Limited by plan tier |
| Theme access | Any theme, full customisation | Limited by plan tier |
| Monetisation | Fully your choice | Restricted on lower plans |
| Data control | Full — your server, your files | Subject to WordPress.com terms |
| Cost | Hosting + domain (you pay separately) | Monthly subscription |
The short version: a self-hosted WordPress site is built on software from WordPress.org and runs on a hosting server you've chosen and paid for. WordPress.com is a commercial hosting service that uses a version of that software but keeps control in their hands. Most business websites, and almost certainly yours if you hired a developer, are self-hosted.
What 'Self-Hosted' Actually Means in Practice
When your site is self-hosted, three things are true at once.
- You own the files. WordPress is installed on a web server, and those files, your theme, plugins, uploads, and core code, belong to you. You can move them, back them up, or hand them to a new developer any time.
- You own the database. Every page, post, setting, and user account lives in a MySQL database (a structured data store) on your server. You have full access to it.
- You are responsible for maintenance. Updates, backups, security, and performance are your job, or the job of whoever you hire to manage the site.
Why Self-Hosted WordPress Is the Right Choice for Most Businesses
The vast majority of professional websites run on self-hosted WordPress for good reasons.
- No platform lock-in. You can switch hosts, hire a new developer, or migrate your site without asking anyone's permission.
- Install any plugin. Need a booking system, a payment gateway, or a custom form? There are no restrictions on what you can add.
- Full design control. Any theme works. You can edit templates, add custom code, or build a completely bespoke design.
- Sell anything, your way. WooCommerce and other ecommerce tools work without platform fees or restrictions.
- Your data stays yours. No third-party platform can suspend your account and take your content with it.
What You're Responsible For (And What Can Go Wrong)
Ownership comes with obligations. On a self-hosted WordPress website, nobody automatically handles the following for you.
- Core, plugin, and theme updates. Outdated software is the leading cause of hacked WordPress sites. Updates need to happen regularly.
- Backups. Your host may offer backups, but you should verify this and keep an independent copy. If something breaks and there's no backup, recovery is painful and sometimes impossible.
- Security. Firewalls, login protection, malware scanning, none of this is configured by default. You need to set it up or use a host that does.
- Performance. Caching, image optimisation, and server configuration all affect how fast your site loads. A slow site loses visitors and rankings.
- Uptime monitoring. If your site goes down at 2am, no one will tell you unless you have monitoring in place.
Choosing a Host for Your Self-Hosted WordPress Site
Your hosting provider is the foundation everything else sits on. A poor host causes slow load times, security gaps, and unreliable uptime, none of which WordPress itself can fix. Look for a host that offers automatic daily backups, a server environment tuned for WordPress, SSL certificates, and clear support when things break.
If managing hosting, updates, backups, and security sounds like more than you want to handle, managed WordPress hosting hands all of that to a team who does it every day. You focus on your business; the infrastructure is handled for you.
Self-hosted WordPress gives you genuine ownership of your website, your files, your data, your decisions. That's why it powers the majority of serious business websites. The trade-off is that maintenance, security, and performance are your responsibility. Understanding that distinction helps you make smarter decisions: about your host, your support setup, and how much of the technical side you want to manage yourself versus hand off to professionals. If you ever need help with errors, speed, or security on your self-hosted site, WordPress support is available when you need it.
Is self-hosted WordPress free?
The WordPress software itself is free to download from WordPress.org. You do pay for web hosting (where the site lives) and a domain name (your web address). Those costs vary by provider but are typically separate, recurring expenses.
What is the difference between WordPress.org and WordPress.com?
WordPress.org is where you download the free, open-source software to install on your own hosting. WordPress.com is a commercial service that hosts a version of WordPress for you, with restrictions on plugins, themes, and customisation depending on your plan. Most business sites use WordPress.org (self-hosted).
Can I move my self-hosted WordPress site to a different host?
Yes. Because you own the files and database, you can migrate your self-hosted WordPress website to any compatible host. The process involves exporting your database, copying your files, and updating your domain's DNS settings. It's worth doing on a staging copy first, and backing up everything before you start.
Do I need a developer to run a self-hosted WordPress site?
Not necessarily. Many business owners manage their own content through the WordPress dashboard without touching any code. However, tasks like plugin conflicts, performance tuning, security hardening, and custom design work are easier and safer with professional help. WordPress support is available if you hit a wall.
Is self-hosted WordPress secure?
WordPress itself is actively maintained and regularly patched. The security risk comes from outdated plugins, weak passwords, poor hosting environments, and missing security configuration. A well-maintained self-hosted WordPress site with current software, strong credentials, and a firewall is genuinely secure. Neglected sites are not.
What happens if my self-hosted WordPress site gets hacked?
A hacked site needs a thorough cleanup, not just deleting obvious malware, but finding and closing the entry point. Incomplete cleanups almost always result in reinfection. If your site has been compromised, professional malware removal is the most reliable way to get it fully clean and protected.