Table of content
- Why Most WordPress Projects Go Wrong in the First Week
- Phase 1: Pre-Kickoff Preparation
- Phase 2: Access and Credentials Collection
- Phase 3: Technical Environment Setup
- Phase 4: Scope, Timeline, and Communication Protocols
- Phase 5: Content and Asset Handoff
- Phase 6: Pre-Launch and Handoff Standards
- FAQ: WordPress Client Onboarding
- Making the Checklist Stick
Why Most WordPress Projects Go Wrong in the First Week
A well-structured WordPress client onboarding checklist is not a nice-to-have — it is the difference between a project that runs on schedule and one that spends its first two weeks chasing missing credentials and redefining scope. Most agencies underestimate how much ground the onboarding phase covers: it is where expectations crystallize, where technical foundations get set, and where the client relationship either gains trust or starts fraying.
According to project management research, a significant share of project failures trace back to poor requirements gathering and unclear communication at the start — not to execution errors mid-build. In WordPress specifically, missing host credentials, vague content ownership, and unconfirmed staging environments are the three most common reasons a project stalls before a single line of code is written.
This guide is structured around the actual phases of onboarding, not a generic generic to-do list. Each section includes the items most agencies skip, and why skipping them costs more time than it saves.
Phase 1: Pre-Kickoff Preparation
The kickoff call should never be the first moment you learn what the client actually needs. Preparation before that call determines whether the meeting is productive or a 90-minute circle of vague answers.
Send a Structured Intake Questionnaire
Before the kickoff, send a written intake form covering:
- Business goals for the site (primary conversion action, secondary informational goals)
- Target audience and any existing brand guidelines or design assets
- Current hosting provider, registrar, and whether they hold their own credentials
- Existing analytics or tag manager setups that need to survive the migration
- Content status: is it ready, in draft, or being written during the build?
- Known technical requirements: memberships, bookings, e-commerce, multilingual, LMS
A client who fills out a thorough intake form before the kickoff has already begun to think like a stakeholder rather than a passive buyer. That shift in mindset pays dividends throughout the project.
Audit the Existing Site (If One Exists)
If this is a redesign or migration, run a preliminary audit before the kickoff call. Check: current WordPress version, active plugin count and any known conflicts, page count and URL structure, existing SEO metadata, and whether the hosting plan is adequate for what the new site will require. Arriving at the kickoff with a pre-diagnosis creates immediate credibility and shortens the discovery phase significantly.
Confirm Contract and First Payment
This sounds obvious, but it belongs explicitly on the checklist: do not begin any technical setup — not even creating a staging environment — before the contract is signed and the first payment is confirmed. Project management tools should flag the project as «active» only at that point.
Phase 2: Access and Credentials Collection
Access management is where the WordPress client onboarding checklist earns its keep. A missing FTP credential discovered on day three of development can set the entire timeline back by a week. Collect everything in one structured pass.
Hosting and Server Access
- Hosting control panel login (cPanel, Plesk, or provider-specific dashboard)
- FTP/SFTP credentials or SSH key access
- Database credentials (MySQL username, password, host, database name)
- Staging environment URL and credentials (if already provisioned)
- CDN credentials if a service like Cloudflare is in use
WordPress Admin Access
- WordPress admin URL (confirm it has not been moved to a custom path)
- Admin-level user credentials, or instruction to create a dedicated agency admin account
- Confirmation that the agency admin account has full capabilities (not a restricted Editor)

Domain Registrar and DNS
- Registrar login and confirmation of who holds renewal authority
- DNS provider login — this is often different from the registrar
- MX records documentation to avoid breaking email during any DNS changes
Third-Party Services
- Google Analytics / Google Search Console access (grant agency account, not credentials sharing)
- Email marketing platform API keys if integration is in scope
- CRM, booking, or payment processor credentials if relevant to the build
- Social media accounts if auto-posting or Open Graph setup is required
Store all of this in a password manager with client-specific vaulting — never in a shared spreadsheet or email thread. Establish this standard from project one and communicate it to clients as a security benefit, not just a workflow convenience.
Phase 3: Technical Environment Setup
Once access is confirmed, technical setup should happen in a defined sequence. Skipping steps here creates debt that compounds during development.
Provision the Staging Environment
Every WordPress build should have a dedicated staging environment — a separate subdomain (staging.clientdomain.com) or a provider-hosted dev environment — before any development begins. This is non-negotiable for agency work. Staging environments protect the live site, enable client review without risk, and simplify the final deployment significantly.
Confirm that staging is password-protected (HTTP auth or plugin-level), is excluded from search engine indexing, and has its own wp-config.php pointing to a separate database. It sounds like overhead; in practice it eliminates an entire category of deployment disasters.
Configure Backups Before Touching Anything
Before any files are modified — even theme activation — verify that automated backups are running. This applies to both the current live site (if it exists) and the new staging environment. The backup schedule should include daily database snapshots and weekly full-site backups at minimum. Document where backups are stored and who has access to restore them.
Establish the WordPress Configuration Baseline
- Confirm PHP version is 8.1 or higher (8.2+ preferred for 2026 builds)
- Set correct file permissions (755 for directories, 644 for files, 600 for wp-config.php)
- Disable XML-RPC if not required by the project
- Configure WordPress address and site URL settings correctly
- Install and configure a security plugin aligned with agency standards
- Set up SSL and confirm HTTPS is enforced sitewide
Phase 4: Scope, Timeline, and Communication Protocols
Document the Agreed Scope in Writing
The kickoff call produces verbal alignment. The deliverable from that call must be a written scope document — not a recording, not meeting notes, a structured document — that lists every page, feature, integration, and deliverable that is in scope, along with a clear statement of what is explicitly out of scope. Both parties sign off on it. This document becomes the reference point for every scope conversation that happens later, and there will be scope conversations.
Set Milestones and Review Points
Break the project into reviewable phases with defined client checkpoints. Typical phases for a WordPress build: design approval, development complete (staging), content populated, QA pass, pre-launch review, go-live. Assign dates to each. Clients who understand the review schedule are less likely to request ad-hoc changes between milestones — and when they do, you have a documented structure to reference.
Define Communication Channels and Response Expectations
Establish a single primary communication channel for the project — email, Slack, a project management tool like Asana or Linear — and document it. Agree on response time expectations in both directions. Agencies that leave communication channel choice ambiguous end up fielding project updates across email, WhatsApp, phone, and three different project tools simultaneously, which creates missed information and frustrated clients.
Phase 5: Content and Asset Handoff
Content is the most common project bottleneck, and it is almost entirely predictable. The WordPress client onboarding process should address content handoff explicitly — not assume it will «arrive during the build.»
Define Content Ownership and Deadlines
Determine for each section of the site: who is writing it, in what format it will be delivered, and by what date. If the client is responsible for content, that deadline should appear in the project timeline as a dependency. A delayed content delivery is a legitimate reason to push the launch date — but only if that dependency was documented upfront.
Collect Brand Assets
- Logo files in SVG and PNG formats (both light and dark variants if applicable)
- Brand color palette with hex codes
- Typography choices or font files
- Photography or illustration assets with licensing documentation
- Icon sets or UI component libraries if the client has existing design system files
Set Up a Shared Asset Folder
Create a single shared folder (Google Drive, Dropbox, or equivalent) at project start where all assets are deposited. Name it with the client name and project year. This folder outlives the project — it becomes the source of truth for the client relationship going forward.
Phase 6: Pre-Launch and Handoff Standards
Technical Pre-Launch Checklist
Before any site goes live, run a structured technical review:
- All staging-specific URLs and references removed from content and settings
- Search engine visibility turned on (confirm «Discourage search engines» is unchecked)
- Google Analytics or Tag Manager active and verified with live data
- Contact forms tested end-to-end with real submissions
- 404 page customized and tested
- Core Web Vitals checked against baseline (LCP, CLS, INP)
- Mobile rendering tested across device sizes
- All redirect rules verified if migrating from an existing URL structure
- SSL active and no mixed content warnings in browser console
- Database optimized and transients cleared before migration to production
Client Training and Documentation
Training is often treated as an afterthought, but it directly affects how long the site stays healthy after handoff. Deliver at minimum: a recorded walkthrough of the WordPress admin, written documentation for any custom post types or fields, and clear instructions for the most common content editing tasks. Clients who understand their CMS make fewer support requests and are far less likely to inadvertently break things.
FAQ: WordPress Client Onboarding
How long should the onboarding process take?
For a standard agency project, the onboarding phase — from contract signing to first day of active development — typically takes three to seven business days. The primary variable is how quickly the client can provide access credentials and complete the intake questionnaire. Agencies that send these requests the same day as contract signing consistently onboard faster than those who wait for the kickoff call to initiate the process.
Should the checklist change for WooCommerce projects?
Yes, meaningfully. WooCommerce builds require additional onboarding items: payment gateway credentials and test mode configuration, shipping zone agreements, tax calculation rules per region, product import format decisions, and confirmation of inventory management responsibilities post-launch. The technical baseline also needs to account for higher server resource requirements from the start.
What is the biggest onboarding mistake agencies make?
Starting development before access is fully confirmed. The second biggest is treating scope definition as something that will «fill itself in» during the kickoff call rather than as a document that requires a dedicated working session and written sign-off.
How does this process differ for white-label WordPress work?
When a white-label development partner is involved, the onboarding checklist gains a layer: the agency must collect and pass through all client assets and access to the technical team, while maintaining the appearance of a single, unified agency workflow. The intake process needs to be more thorough upfront because the technical team cannot directly ask the client follow-up questions mid-project. Everything must be captured before development begins.
Should the onboarding checklist be automated?
Partially. The intake questionnaire, welcome email, and asset folder creation can and should be templated and automated using project management tooling. The access audit, scope sign-off, and technical baseline setup benefit from human review every time — these are the steps where a missed item causes real project damage.
Making the Checklist Stick
A checklist only works if it is treated as a hard gate, not a guideline. The most effective implementation is to build the WordPress client onboarding checklist into your project management system as a required template — every new project gets it assigned, and no project milestone advances until the relevant checklist sections are marked complete.
Agencies that do this consistently report fewer mid-project scope disputes, faster go-live timelines, and higher client satisfaction scores at handoff. That is not because the checklist is magic — it is because the checklist forces the conversations that prevent problems before they start. If your agency is delivering WordPress projects at volume and onboarding is still handled ad-hoc, that is likely the first place to invest in process improvement.
If you want to discuss how a structured onboarding process fits into a larger WordPress delivery workflow, get in touch with the team at BMD Creatives — we are happy to share what works in practice.
Developer experience
From my experience running WordPress projects with agencies of different sizes, the onboarding phase is almost always where the real risk lives — not in the development work itself. I have seen technically excellent teams spend weeks recovering from a project that started without confirmed access, undefined scope, or a content plan that was never documented. The checklist described here is not a bureaucratic formality; it is the operational discipline that separates agencies that scale from those that stay stuck firefighting. Getting this phase right creates the kind of client relationship where trust is built from day one, and that trust is what actually makes the rest of the project run smoothly.
