The settings most owners never touch
Most small business owners get a WordPress site set up and never open the Settings menu again. Why would they? It works. The pages load. The posts publish. Whatever was set on day one stays set.
The problem is that WordPress ships with defaults that work for a generic blog from 2010, not a business website in 2026. A handful of those defaults are silently costing you — search visibility, security, page speed, or all three. Most of them take five minutes to fix. None of them require a developer.
This post covers the three WordPress settings that small businesses get wrong on day one and never fix. If you’ve never opened Settings → General, Settings → Reading, or Settings → Permalinks since launch, this is for you.
Setting 1: Permalinks (the URL structure)
Settings → Permalinks. The default in many older WordPress installs was the “Plain” structure — URLs like yoursite.com/?p=123. That format is actively bad for SEO. It tells Google nothing about what’s on the page.
The fix takes 30 seconds. Open Settings → Permalinks. Pick “Post name.” Save. Your URLs become yoursite.com/your-post-title. Readable, descriptive, ranking-friendly.
The catch most owners miss
If your site has been live for a while and you change permalinks now, every existing URL changes too. Anything linked from outside your site — backlinks, social shares, bookmarks — breaks. Google gets confused. Rankings drop temporarily.
The chain breaks here, but only if you don’t redirect. Before changing permalinks on an existing site, you need 301 redirects from the old URL structure to the new one. Most modern SEO plugins handle this automatically, but you should verify after the change. Pop the hood, check a few old URLs, make sure they redirect correctly to the new ones.
If your site is brand new and has no backlinks yet, this is a free improvement. If it’s been live for years, it’s a careful improvement. The simplest version of this is to ask your host or maintenance provider to do it during a low-traffic window.
Bonus permalink mistakes
- Including the date in the URL. “Day and name” or “Month and name” is the WordPress default for a reason that made sense in 2007. In 2026 it makes your URLs longer, dates your content, and adds nothing. Skip it.
- Using the post ID alone. Worse than dates. No keyword signal, no readability.
- Custom structure that doesn’t include %postname%. Whatever else you include, the post name has to be in there. That’s the part Google reads.
Setting 2: Reading — search engine visibility and front page
Settings → Reading. Two things to check here, and most small businesses get one of them wrong.
Discourage search engines from indexing this site
This checkbox should be unchecked on a live business website. It tells search engines to skip the site entirely.
The simplest version of this story: a developer builds a site on a staging URL, checks the box so Google doesn’t index the unfinished version, then forgets to uncheck it when the site goes live. Six months later, the owner is wondering why they don’t show up in any search results.
I’ve taken over sites where this single checkbox had been costing them a year of SEO. Five-second fix once you find it. The damage takes longer to undo because Google has to recrawl and re-rank everything.
Open Settings → Reading right now. Look at the “Search engine visibility” checkbox. Make sure it’s unchecked. If it’s been checked, uncheck it, save, then submit your sitemap to Google Search Console manually to speed up reindexing.
Your homepage displays
The default is “Your latest posts” — meaning your homepage is a chronological list of your blog posts. For a personal blog from 2008, fine. For a business website in 2026, this is almost never what you want.
The fix: under “Your homepage displays,” select “A static page” and pick the actual homepage you’ve designed. If you don’t have one, build one and come back to this setting.
This is a small thing that has a large effect. The homepage is supposed to do the hero and conversion work. A working homepage is the engine — letting WordPress show your latest blog posts there instead means visitors land on a list of posts and have to figure out what your business actually does.
Setting 3: General — site title, tagline, and timezone
Settings → General. The boring tab nobody opens. Three things matter here.
Site title
This is the text Google often uses as the title of your homepage in search results. It also appears in browser tabs, social shares, and a few other prominent places.
The default many themes use is just the WordPress site name (e.g., “My Site”). The good version is your actual business name, exactly as you want it to appear in Google. Not “My Site” — “Sunshine HVAC of Pembroke Pines.”
The mistake I see most often: the site title gets stuffed with keywords for SEO. “Sunshine HVAC | AC Repair Pembroke Pines | Best HVAC Davie | 24/7 Emergency Service Broward.” That used to work in 2012. In 2026 it looks spammy in search results, hurts click-through rate, and signals to Google that you’re playing keyword games.
Clean business name. Modern SEO plugins (Rank Math, Yoast) handle the keyword targeting at the page level. Let them.
Tagline
The default WordPress tagline is “Just another WordPress site.” If you’ve never changed it, change it now. Even if your theme doesn’t display the tagline visibly, search engines see it. “Just another WordPress site” appearing in your meta data signals an unmanaged site.
What to put there: a one-line description of what your business does. Short, specific, no marketing words. “South Florida web design and SEO for small businesses” beats “Crafting digital experiences” every time.
Timezone
WordPress defaults to UTC. If you live in Florida and you’ve never changed this, your scheduled posts publish at the wrong time, your dates display in UTC, and your analytics get slightly skewed.
The fix: open Settings → General. Find Timezone. Pick “America/New_York” (which covers Florida — Eastern Time with DST). Save.
The bonus settings worth checking
Three more that take less than a minute each:
Settings → Discussion
If your site doesn’t take blog comments (most small business sites don’t), uncheck “Allow people to submit comments on new posts.” Comment spam is a constant tax on WordPress sites that have comments enabled. Disabling them removes the attack surface entirely.
Most RWD client sites have comments closed by default for this reason. If you actively want comments, leave them on and use a plugin to manage spam.
Settings → Media
Check the image sizes. WordPress generates multiple thumbnail sizes for every image you upload. If your theme only uses two of them, the others are bloat. Open Settings → Media. Set the dimensions you actually need and zero out the rest.
This won’t cleanup existing images automatically, but it stops the bloat for everything you upload going forward.
Users → Profile (your own user)
Two things on your profile that matter:
- Display name publicly as. The default is your username. If your username is “admin” or your email address, every blog post you write shows that as the author. Pick your real name or business name.
- Biographical info. If your theme shows author boxes, this is what displays. Generic “WordPress User” boxes look unprofessional. Write a real one-paragraph bio.
The five-minute audit
If you do nothing else from this post, do this:
- Open Settings → Permalinks. Confirm “Post name” is selected.
- Open Settings → Reading. Uncheck “Discourage search engines” if checked. Set homepage to a static page if it’s currently set to “Latest posts.”
- Open Settings → General. Confirm site title is your business name. Replace “Just another WordPress site” tagline if present. Set timezone to America/New_York.
- Open Settings → Discussion. Uncheck “Allow people to submit comments” if you don’t actively want comments.
- Open Users → Profile. Set “Display name publicly as” to your real name. Add bio if blank.
That’s the audit. Five settings tabs, five minutes, real impact on search visibility, security, and credibility.
What this doesn’t cover
This is the entry-level WordPress settings list. There are deeper layers — security headers, advanced caching configuration, database optimization, plugin auditing — that move the needle further but require more technical hands.
That deeper layer is what our WordPress maintenance service handles for clients. The five settings in this post you can do yourself in an afternoon. The rest is what we get paid to keep working in the background.
Want the deep audit done for you? The full WordPress configuration audit — settings, plugins, security, performance, deliverability — runs through our WordPress maintenance service. We catch the things the entry-level audit misses.
Final Thoughts
WordPress is software. Software has settings. Most owners never look at the settings because the site “works.” The settings that matter aren’t the ones that break the site when they’re wrong — they’re the ones that quietly cap how well the site can do its job.
Open the five tabs above this week. Five minutes. Whatever’s set wrong is the next thing to fix.
Further Reading
Want to dig deeper into WordPress configuration and SEO fundamentals? Here are reputable sources worth bookmarking:
- WordPress Codex — Official WordPress Documentation
- Google Search Central — SEO Starter Guide
- Rank Math — Knowledge Base
- Smashing Magazine — WordPress Articles
- Kinsta — WordPress Performance Research



