What 'website care' means: hosting, backups, updates and who is responsible

What does "website care" mean?

Website care means the regular upkeep that keeps your site online, safe and working. It covers hosting, backups, updates, security and basic checks. A website is not a brochure you print once. It is closer to a shop, and a shop needs someone to unlock the door, fix the lock and sweep the floor.

Many owners never think about this until something breaks. This post explains the parts in plain words, so you know what to ask and who is responsible.

What is hosting?

Hosting is the computer, owned by a hosting company, where your website's files live and are served to visitors. When someone types in your web address, the host sends them your pages.

If hosting stops, your site goes offline. Good hosting is reliable and has a way to contact support when there is a problem.

What is a domain name, and who should own it?

Your domain name is your web address, such as yourbusiness.com. You register it, usually for a year at a time, through a company called a registrar.

Here is the key point: the domain should be registered in your name, or your business name, with your contact email. If your web provider registered it in their own name, you may have trouble moving your site later. Ask to see who is listed as the owner. Also ask when it renews, and who gets the reminder emails. A domain that expires by accident can take your website and your business email offline.

What is a backup, and why does it matter?

A backup is a saved copy of your website. If the site is damaged, hacked or broken by a mistake, a backup lets you go back to a working version.

The FTC, the U.S. consumer protection agency, advises small businesses to regularly save important files to cloud storage or external drives. For a website, that means copies kept in a place separate from the site itself. Otherwise one problem could take out both the site and its copy.

Questions to ask about backups:

• How often are backups made?
• Where are they stored?
• How long are they kept?
• Has anyone ever tested restoring one? A backup you have never tried to restore is a hope, not a plan.

What are updates, and why do they matter?

Most websites run on software, and software needs updates. Updates fix bugs and close security holes that others have found. The U.S. Cybersecurity and Infrastructure Security Agency, or CISA, lists updating business software as one of four basic essentials. It advises turning on automatic updates where possible.

The FTC gives similar advice: set a schedule for updating programs, apps and browsers, and turn on automatic updates.

Updates are also a place where care matters. An update can sometimes break a part of a site, such as a form. A careful provider checks the site after updating it.

What is security, in plain words?

For a small business site, security mostly means locking the doors you already have. CISA's four essentials are:

1. Train people to spot phishing, which is fake email that tries to trick you into giving up a password.
2. Use strong passwords.
3. Turn on multifactor authentication, often called MFA. This adds a second step, such as a code sent to your phone, when you log in.
4. Keep software updated.

CISA says to use long, random passwords, and the FTC says a strong password is at least 12 characters. Do not reuse a password across accounts. A password manager can help. Ask whether your hosting, domain and website logins all have MFA turned on.

What is HTTPS?

HTTPS is the small padlock-style protection that shows when a web address begins with "https." It scrambles information sent between your visitor and your site, such as a form entry. Your site should use it, and the certificate behind it needs to be renewed on time. Care includes making sure that happens.

Who is responsible for what?

This is the most important question. It is easy for each side to think the other is handling it. Ask your web provider to write down who does each job. Here is a simple table to fill in.

If you manage your own site, the answer in every row is "me." That can work, but make sure you have time for it.

What should you ask a web provider?

• Do I own my domain name and my website? What happens if I leave?
• Can I get a copy of my site and my content at any time?
• Is there a written agreement that says what is included, and for how long?
• How do I cancel, and what notice do I need to give?
• Who do I call if the site goes down, and how fast will someone respond?

A good provider answers these plainly. If the answers are vague, that tells you something.

Quick checklist

• I know who owns my domain name, and it is registered to me or my business.
• I know when my domain renews, and the reminders go to an email I read.
• I know where my site is hosted and how to reach support.
• Backups are made regularly and kept in a separate place.
• Someone has tested restoring a backup.
• Software updates are applied, and the site is checked afterward.
• Passwords are long and unique, and MFA is on.
• My site uses HTTPS.
• I have in writing who is responsible for each job.
• I can get a copy of my site if I ever want to move.

What is the bottom line?

Website care is not exciting, but it keeps your online front door open. The aim is simple: know who does each job, and be able to prove it.

If you would like help with this, ask your Liftofly representative or contact us.