The Small Business Website Checklist

How to Use This Checklist

Go through each section and mark what you have. Anything you cannot check off goes on a short to-do list. You do not need to fix it all in one day. Start with ownership and security, since those are the hardest to fix after something goes wrong.

Ownership and Access

• Your domain is registered in your business name.
• The domain account uses an email address you check.
• Auto-renew is on, and the card on file is current.
• You have the logins for your domain, DNS, hosting and website.
• You can download a full copy of your site if you leave your host.
• A trusted second person knows where the logins are kept.

ICANN says domain owners must keep their contact details accurate and current. That also matters for renewal reminders. Registrars must send them about a month and about a week before a domain expires.

Security

• The site loads with https and shows a padlock.
• The SSL certificate renews on its own.
• Both www and non-www addresses work and are secure.
• Plain http addresses send visitors to the https version.
• Software, themes and plugins stay up to date.
• Every admin account uses a strong password and two-step sign-in.
• Old staff and old vendors no longer have access.

Free SSL certificates are available from Let's Encrypt. Certificate lifetimes also get shorter in steps starting in 2026, so automatic renewal matters. Our SSL guide explains why.

Contact and Next Steps

• Your phone number is at the top of every page.
• On phones, tapping the number starts a call.
• Every page has one clear next step, like "Call Now" or "Request a Quote."
• Your address and service area are easy to find.
• Your hours are listed and correct.
• Your contact form works, and you have tested it this month.
• Form messages go to an inbox someone actually reads.

Content That Answers Questions

• Each main service has its own page.
• Each page says what you do, where you do it and how to reach you.
• Your about page shows real people and real photos.
• Photos are your own work, not only stock images.
• Common questions are answered on the page, in a short FAQ section.
• Nothing on the site is out of date, like old prices, staff or hours.

Search Basics

Google's SEO Starter Guide covers the basics well. In plain terms:

• Each page has a unique title that says what the page is about.
• Each page has a short, unique description.
• Web addresses use real words, like /brake-repair/, not random numbers.
• Images have alt text that describes what is in the picture.
• Content is written for people first, and is easy to read.

Speed and Phones

• The site is easy to read on a phone without zooming.
• Buttons are big enough to tap with a thumb.
• Large photos are resized before upload.
• Pages load quickly on a phone signal, not just on office wifi.
• Pop-ups do not block the page on small screens.

Email and Forms

• Your business email uses your own domain.
• Your domain has one SPF record, plus DKIM and DMARC.
• Website form emails come from a service listed in your SPF record.
• You send a test message from each form after any site change.

Gmail and Yahoo now ask all senders to set up SPF or DKIM, and bulk senders need all three records. Our deliverability guide walks through it.

Backups and Upkeep

• The site is backed up on a schedule.
• You know how to restore a backup, or who to call.
• Someone checks the site at least once a month.
• Updates are applied soon after they come out.
• You review this checklist at least once a year.

A Simple Monthly Routine

Put a 20-minute reminder on your calendar each month. Then do these steps:

1. Open your site on your phone and your computer.
2. Tap the phone number to make sure it dials.
3. Send a test message through each form.
4. Check that the padlock still shows.
5. Confirm your hours and services are still right.
6. Make sure the latest backup finished.

Getting Help

If your list of unchecked boxes is long, that is normal. Most sites grow a little messy over time. T3CHS can take this list off your plate with a website build or cleanup, or you can start with the parts you know best.

Common Questions

How often should I check my business website?

A quick check once a month catches most problems. Test the phone link, the forms and the padlock each time.

What is the most important thing on a local business website?

An easy way to reach you. Your phone number and one clear next step should be on every page.

Do I need a separate page for each service?

It helps. A page for each service answers questions better and gives search engines a clear topic for each page.

How do I know if my website is secure?

Your address should start with https and show a padlock. Click the padlock to see when the certificate expires.

Who should own my website logins?

You should. Keep the domain, hosting and website logins in the business name, even if a vendor manages the site.

Sources

1. Google Search Central: SEO Starter Guidedevelopers.google.com
2. ICANN: Registrant Benefits and Responsibilitiesicann.org
3. ICANN: Expired Registration Recovery Policyicann.org
4. Let's Encrypt: Aboutletsencrypt.org
5. CA/Browser Forum: TLS Baseline Requirementsraw.githubusercontent.com
6. Google: Email Sender Guidelinessupport.google.com
7. Yahoo: Sender Best Practicessenders.yahooinc.com

Last reviewed September 27, 2026.