Merck corporate logo in dark charcoal on a cream background

Customising a default WordPress installation: a practical walkthrough

You have just clicked through the famous five-minute install, logged out of the welcome screen, and now your screen shows that familiar "Hello world!" post staring back at you. For many Australian small business owners running a side hustle from a home office in Brisbane or a coffee shop in Fitzroy, this is the moment when the real WordPress setup begins. The default install is functional but plain, and getting it looking the part usually takes an afternoon of tinkering rather than a full rebuild.

Before swapping themes and installing plugins, think about who your visitors actually are. Australian readers are mobile-heavy, often catching up on articles during their commute on a Sydney train or while waiting for a flat white at their local café during the arvo. They expect pages to load quickly on patchy 4G in regional areas and to look tidy on an older iPhone. A custom installation that respects those habits from day one will serve you far better than one packed with half-finished features.

The good news is that WordPress rewards a methodical approach. Instead of throwing features at the wall and hoping something lands, you can work through a sensible order: secure the basics, choose a visual identity, configure only the plugins you genuinely need, then fine-tune the settings that affect both. That is the rhythm this walkthrough follows, and it leaves room for the inevitable cup of tea or long lunch.

Throughout the piece, the language will lean on Australian spelling and a few local phrases, because if you are running a site from Perth or Hobart it should sound like it belongs there. There is no need to write in stiff corporate prose when the alternative is far more readable, fair dinkum.

Securing the dashboard before you do anything else

The first stop after installation is the login screen at yourdomain.com/wp-admin. The default username is "admin", which is a magnet for automated bots that scan the web from servers in Singapore, Frankfurt, and beyond. Create a new administrator account with a unique username, then delete the original. Pick a passphrase made of four random words that you have not reused for your Bigpond email or Myki account.

Two-factor authentication adds another wall, and Australian hosting providers such as VentraIP and Panthur include it in their dashboards. Plugins like WP 2FA handle this without sending visitors away. While in the user menu, give your display name something other than your login name, so authors writing under their real identity are not accidentally revealing their credentials.

Finally, head to Settings → General and update both the site title and the tagline. The default "Just another WordPress site" reads poorly in search results and does nothing for a brand. Replace it with a sentence that explains, in plain English, what the site is about. A good tagline in Australia is often understated: think of how a Brunswick café describes itself, not how a multinational might.

Choosing a theme that fits the brief

WordPress ships with a small handful of default themes, and the current year-theme is usually the cleanest starting point. Twenty Twenty-Four is a block-based design that looks tidy out of the box, while Twenty Twenty-Three is stripped back even further. If you want more polish without paying a cent, lightweight options like Astra, Kadence, or GeneratePress are widely respected and play nicely with Australian hosting environments.

When picking a theme, resist the urge to install three or four to test them. Live with one for a couple of days, build a few pages, then decide. A theme is the frame, not the painting, and you can swap it later without losing content. Look for one that loads quickly on mobile, supports the block editor, and has been updated in the last six months. Themes abandoned by their developers are a security risk no plugin can fix.

Theme name Best suited to Block editor support Mobile performance Licence
Twenty Twenty-Four Beginners, blogs, portfolios Full Excellent GPL, free
Astra Small business sites, shops Full Excellent GPL, free core
Kadence Marketing pages, lead generation Full Excellent GPL, free core
OceanWP Multi-purpose, agencies Full Good GPL, free core
GeneratePress Developers who want minimalism Full Excellent GPL, free core

Adding plugins without bloating the site

The Plugins menu is the most dangerous screen in WordPress. Every plugin adds weight, and Australian users on slower connections notice the difference. A lean install of five to seven well-chosen plugins outperforms a kitchen-sink approach every time, no worries about the bloat.

For most new sites, a sensible shortlist looks like this: a SEO plugin such as Rank Math or Yoast, a caching plugin like WP Super Cache or LiteSpeed Cache, a contact form such as WPForms Lite, an anti-spam tool like Akismet, a backup plugin such as UpdraftPlus, and a security plugin like Wordfence. That covers the basics without overlapping functionality.

Before installing, check the plugin's last update date, the number of active installations, and the rating. Anything not updated in over a year is a red flag, particularly in a market where many small operators run their entire business from a single WordPress install. Local hosts like NetRegistry and Crazy Domains often publish compatibility notes for popular plugins, which can save you a support ticket later.

Adjusting the bits that shape every page

Settings are the quiet workhorses of a custom install, and they deserve more attention than they usually get. Start with Settings → Permalinks and switch from the default numeric format to "Post name". Search engines prefer readable URLs, and so do readers sharing links in a Melbourne group chat or on Facebook.

Then move to Settings → Reading. Decide whether your homepage should display your latest posts or a static page. Most business sites benefit from a static front page built in the block editor, with a separate blog page holding the articles. While you are there, set the search engine visibility checkbox to off until you have at least a handful of pages and a privacy policy in place, then re-enable it.

General settings include the timezone, which should be set to Australia/Sydney, Australia/Melbourne, Australia/Brisbane, Australia/Adelaide, Australia/Perth, or Australia/Hobart depending on where you operate. The default UTC setting will have your posts publishing at odd hours in local time, which feels jarring if you run a café in Surry Hills and want a lunch menu update to appear at midday.

Building pages, menus, and the launch checklist

With the foundations in place, it is time to create real content. Pages → Add New lets you build the static parts of your site: a home page, an about page, a contact page, and any service or product pages you need. Use headings sparingly, write in short paragraphs, and let the block editor's typography controls do most of the heavy lifting.

Posts work the same way but live in reverse chronological order and form the blog or news section. Set up categories before you write your first article, even if there are only two or three of them, because reorganising later is tedious. Tags are optional and often overused, so apply them sparingly.

Appearance → Menus ties it all together. Create a menu, add the most important pages, drag them into a sensible order, and assign it to a menu location such as the primary navigation or footer. A simple three- to five-item menu outperforms a sprawling mega-menu on mobile, where most traffic will land.

Sharing the URL with a mate in another state catches issues invisible from your own network, including problems with Australian geo-routing and CDN edge servers. If a mate in Perth cannot load your site hosted in Sydney, you have learned something valuable for free.

Quick checklist before launch: