500+ Tools
100% Free Forever
No Subscriptions
No Sign Up Required
A complete, step-by-step website launch checklist covering everything from domain setup and design to SEO, security, and post-launch monitoring. Copy, customize, and launch with confidence — 100% free.
Pick a brandable, easy-to-spell domain. Use .com if possible. Check trademark conflicts and social media handle availability.
Compare cloud, shared, VPS, or dedicated hosting based on traffic expectations, scalability, and budget. Look for 99.9% uptime SLA.
Secure your site with HTTPS. Use free Let's Encrypt or paid EV SSL. Redirect all HTTP traffic to HTTPS and enforce HSTS.
Set up a Content Delivery Network (Cloudflare, BunnyCDN) and server-side caching for faster global load times.
Create branded email addresses ([email protected]) using Google Workspace, Microsoft 365, or your hosting provider.
Use tools like UptimeRobot or Pingdom to get instant alerts if your site goes down. Set up SMS/email notifications.
Automate daily off-site backups of both files and database. Test a full restore at least once before launch.
Create a staging site identical to production. Test all changes and updates here before pushing live.
Run load testing (k6, Loader.io) to ensure your hosting can handle expected launch day traffic spikes.
Securely store all login details, SSH keys, and API tokens in a password manager. Share with team members who need access.
If serving a global audience, configure geo-routing for faster regional delivery and localized content.
Activate hosting-level DDoS mitigation or use Cloudflare's free plan to guard against volumetric attacks.
Define logo usage, colour palette, typography, imagery style, iconography, and voice/tone before designing pages.
Ensure the website adapts perfectly to mobile, tablet, and desktop. Use mobile-first design and test on real devices.
Select fast-loading fonts from Google Fonts or self-host WOFF2 files. Limit to 2-3 typefaces and subset for performance.
Prepare optimized hero images, illustrations, product photos, and videos. Use next-gen formats (WebP, AVIF) for images.
Use a design system or consistent spacing, shadows, border radii, and hover states across all components and pages.
Make buttons and links at least 44x44px for mobile users. Ensure adequate spacing between interactive elements.
Use a contrast checker tool to ensure text meets accessibility standards. Aim for at least 4.5:1 for normal text.
Implement a fixed header with logo and key menu items. Keep it clean and ensure it doesn’t obstruct content on mobile.
Design a custom error page with branding, a search bar, and links to popular pages. Avoid default server error messages.
Subtle hover effects, loading spinners, and scroll animations enhance user experience without hurting performance.
Add a print stylesheet so important pages like invoices or articles look clean when printed.
Diagram key user journeys (signup, purchase, contact). Remove friction and unnecessary steps before development begins.
Craft compelling headlines, meta descriptions, and body copy. Integrate primary and secondary keywords naturally.
Each page needs a distinct <title> (50-60 chars) and meta description (150-160 chars) with target keywords.
Link relevant pages together using descriptive anchor text. This helps both users and search engines navigate your site.
Add descriptive, keyword-rich alt text to every image. This improves accessibility and image search rankings.
Create a sitemap.xml listing all important pages. Exclude noindex pages. Submit it to Google Search Console.
Ensure robots.txt allows crawling of essential pages and disallows admin areas or duplicate content. Test with Google's tool.
Add JSON-LD for Organization, BreadcrumbList, Article, Product, or FAQ schema to enhance SERP rich snippets.
Install Google Analytics 4, Google Tag Manager, and any heatmap or session recording tools. Verify data flows correctly.
Launch with at least 3-5 high-quality articles. A blog drives organic traffic and establishes authority in your niche.
Verify ownership, submit sitemap, and monitor index coverage. Identify and fix crawl errors before launch.
Use Google’s Mobile-Friendly Test. Ensure text is readable, tap targets are spaced, and content fits without horizontal scroll.
Canonicalize or 301 redirect duplicate URLs. Avoid boilerplate content across pages; each must offer unique value.
Map old URLs to new ones for any redesign or domain change. Preserve link equity and avoid 404 errors.
Check code with W3C validators. Clean markup improves cross-browser compatibility and accessibility.
Verify appearance and functionality on Chrome, Firefox, Safari, and Edge (latest 2 versions). Include mobile browsers.
Test on real iOS and Android devices, not just emulators. Check different screen sizes and pixel densities.
Aim for LCP < 2.5s, FID < 100ms, CLS < 0.1. Use Lighthouse and PageSpeed Insights to identify bottlenecks.
Ensure contact forms, newsletter signups, and checkout processes work. Test validation, confirmation messages, and auto-responders.
Use a broken link checker to find 404s. Verify external links open in new tab (target="_blank") with rel="noopener".
Use tools like GTmetrix, WebPageTest, or Pingdom from multiple locations. Optimize assets and consider a CDN.
Make sure your custom 404 page returns a real 404 HTTP status code. Test with a few non-existent URLs.
Add loading="lazy" to below-the-fold media. This dramatically improves initial page load weight and speed.
Remove whitespace and comments from code. Bundle and tree-shake JavaScript. Enable Gzip/Brotli compression on server.
Verify payment gateways, email marketing APIs, chatbots, and social widgets. Ensure they don’t block rendering.
After SSL installation, ensure all assets load over HTTPS. Scan site with Why No Padlock? or similar tools.
Print key pages to see if the layout looks professional. Hide unnecessary nav/footer elements when printing.
For WordPress, install Wordfence or Sucuri. For custom sites, configure a Web Application Firewall (WAF).
Require minimum length and complexity for all user accounts. Implement rate limiting on login attempts.
Directories: 755, Files: 644. Never use 777. Protect wp-config.php or .env files from public access.
Clearly explain what data you collect, how it's used, and third-party sharing. Comply with GDPR, CCPA, or other regulations.
Define rules for using your site, intellectual property rights, disclaimers, and limitation of liability.
If you use tracking cookies, display a consent banner that allows users to accept or customize preferences.
Delete sample content, default themes (like Twenty Twenty-X), and deactivated plugins. Reduce attack surface.
Update CMS, plugins, themes, and server software to latest stable versions. Enable auto-updates for minor security patches.
Improve email deliverability and prevent spoofing by configuring DNS email authentication records.
Prevent Apache/Nginx from listing directory contents. Add "Options -Indexes" to .htaccess or configure in nginx.
Protect .htaccess, .env, composer.json, and log files. Add rules to deny direct HTTP access.
Even for small sites, know who to contact and what steps to take if the site is hacked or defaced.
Build anticipation with email sequences, social media countdowns, or a "coming soon" landing page that collects emails.
Connect Mailchimp, ConvertKit, or other ESP. Create signup forms and automate welcome emails for new subscribers.
Draft posts for LinkedIn, Twitter/X, Instagram, Facebook, etc. Schedule them to go live on launch day.
Inform industry contacts, affiliates, or brand ambassadors. Provide them with pre-written copy and assets to share.
If newsworthy, distribute a press release via PRWeb, BusinessWire, or directly to journalists covering your niche.
Prepare Google Ads, Facebook/Instagram ads targeting your audience. Start with small budgets to test, then scale post-launch.
Encourage early users to spread the word by offering discounts, freebies, or exclusive access.
Double-check all on-page SEO factors, local SEO (if applicable), and submit any new content to index.
Define goals in Google Analytics (purchases, signups, downloads). Add Facebook Pixel or LinkedIn Insight Tag if needed.
Anticipate common questions and provide clear answers. Reduce launch-day support load by being proactive.
If you have a product, a short video explaining key features can increase conversions dramatically. Embed it prominently.
Plan blog topics, social posts, and email campaigns for the first 30/60/90 days to maintain momentum.
Invite a small, trusted group to test the site. Gather feedback, fix critical issues, and generate early testimonials.
Go through every category in this list and mark items complete. Nothing should be left unticked before flipping the switch.
Navigate the entire site on a real smartphone. Test all forms, menus, and interactive elements. Swipe, tap, rotate.
Check for spelling, grammar, broken sentences, and placeholder text (lorem ipsum). Have at least one other person review.
Check every page for broken images, stretched logos, or missing alt tags. Test on slow connections with throttling.
Ensure live chat, social feeds, maps, and embedded videos function correctly and don’t cause layout shifts.
Aim for scores above 90 in all categories. Address any critical recommendations before launch.
Use Google Tag Assistant or browser dev tools to confirm pageviews, events, and conversions are tracked.
Trigger welcome emails, password resets, order confirmations, and form notifications. Verify sender name, reply-to, and content.
Manually submit sitemap.xml through Google Search Console and Bing Webmaster Tools. Request indexing of key pages.
If migrating an old site, run a crawler to ensure all old URLs redirect correctly (301) to their new counterparts.
Perform a real transaction (even with a small amount) to verify payment gateway, order emails, and post-purchase flows.
Remove test users, demo products, placeholder blog posts, and any development comments or debug logs.
Use a tool like whatsmydns.net to verify DNS changes have propagated globally. Confirm domain points to the right server.
Watch live visitor count, traffic sources, and behavior flow during the first hours. Identify any unexpected drop-offs.
Keep an eye on server error logs and JavaScript console errors reported via Sentry or LogRocket.
Track brand mentions using Google Alerts, Mention, or Brand24. Respond quickly to feedback and praise.
Set up a simple system (Trello, Asana, GitHub Issues) to triage and resolve bugs reported by users or discovered internally.
Add a short survey or feedback widget (Hotjar, Typeform). Ask early visitors about their experience and pain points.
Use Chrome User Experience Report or GA4 to monitor real-user performance metrics, not just lab data.
Thank early subscribers or customers. Share milestones, upcoming features, and links to social channels.
After the dust settles, review analytics and feedback to define the next sprint of updates and enhancements.
Document traffic spikes, press mentions, and social shares. Valuable for case studies and future marketing.
Perform a fresh vulnerability scan (Sucuri, Detectify) to ensure nothing was exposed during the launch process.
Commit to a content schedule. Fresh content keeps SEO rankings climbing and gives users a reason to return.
Acknowledge the hard work of the team. Share the win internally and on social media. You did it!
Use the search bar (or Ctrl+K) to find specific steps. Click category tabs to jump between sections — from domain setup to post-launch monitoring.
Every checklist item has a copy button. Paste them into your project management tool (Notion, Trello, Asana) or a simple doc to create your personalized launch plan.
Work through the list methodically. Customize based on your stack (WordPress, Shopify, custom), assign tasks to team members, and mark items complete as you go.
FreeToolr is the ultimate platform for free online tools, AI tools, SEO tools, PDF utilities, calculators, image tools and developer resources.
[email protected] Buy Me a Coffee