How to Install WordPress on Namecheap cPanel 2026 — 10 Minutes
This guide installs WordPress on Namecheap shared hosting (Stellar plans) using Softaculous in cPanel. It covers the exact settings that matter, the SSL activation step that breaks roughly 30% of new installs, and three common errors with specific fixes. Estimated time: 10–15 minutes from start to working WordPress admin.
Before You Start: Prerequisites
- ✅ Active Namecheap hosting plan (Stellar Starter or above)
- ✅ Domain registered and pointed to Namecheap nameservers (or added as addon domain in cPanel)
- ✅ DNS propagated — domain resolves to your hosting server IP (check at whatsmydns.net)
- ⚠️ Do NOT select https:// during installation — activate SSL after install (this is the step that causes 30% of install failures — explained in Step 4)
- ⚠️ WordPress requires PHP 7.4 minimum; 8.1+ recommended — set this before installing (covered in Step 1)
Step 1: Set PHP Version to 8.1+ (Do This First)
Namecheap cPanel may default to an older PHP version. WordPress 6.x works best on PHP 8.1 or 8.2.
- Log into cPanel: go to yoursite.com/cpanel or via Namecheap dashboard → Hosting → Manage → cPanel Login
- In cPanel, scroll to the Software section
- Click MultiPHP Manager
- Check the checkbox next to your domain in the list
- From the PHP Version dropdown, select PHP 8.1 (or 8.2)
- Click Apply — changes take effect immediately
To verify: create a file called info.php in your public_html folder with content <?php phpinfo(); ?>, then visit yoursite.com/info.php — the PHP version displays at the top. Delete the file after checking.
Step 2: Activate SSL Before Installing WordPress
This is the step most guides skip, and it causes 30% of Namecheap WordPress install failures.
The Softaculous installer asks you to choose http:// or https:// at the start. If you choose https:// before your SSL certificate is active, the installer throws: “A trusted SSL Certificate was not found.” Your install fails.
Correct sequence:
- In cPanel → Security → SSL/TLS
- Click Manage SSL Sites — look for your domain in the list
- If no certificate is listed, go back to SSL/TLS → Let’s Encrypt™ SSL (or look for AutoSSL)
- Click Run AutoSSL — Namecheap provisions a free Let’s Encrypt certificate
- Wait for the green checkmark — usually 2–5 minutes. Refresh the SSL/TLS Status page to confirm.
- Once you see “Certificate installed” with a green tick for your domain, proceed to Step 3
Why does this happen? Let’s Encrypt requires your domain to be resolving correctly to the Namecheap server before it can issue a certificate. If your domain was registered in the last 24 hours, DNS may not have fully propagated. Check propagation at whatsmydns.net — you need to see your Namecheap server IP consistently across multiple locations before AutoSSL will succeed.
Step 3: Open Softaculous WordPress Installer
- In cPanel → Software section → Softaculous Apps Installer
- Click the WordPress icon (top-listed under CMS)
- Click the blue Install tab at the top (not “Overview” or “Import”)
- You’ll see two install modes: Quick Install and a full form. Use the full form — scroll past any “Quick Install” button
Step 4: Configure the Installation Settings
Go through each setting carefully. These are the ones that matter:
Software Setup
- Choose Protocol: Select https:// — only after confirming your SSL is active (Step 2). If SSL isn’t confirmed, choose http:// and switch to https:// in WordPress settings after install.
- Choose Domain: Select your domain from the dropdown
- In Directory: Leave completely blank for a root install (yoursite.com/). If you type anything here, WordPress installs in a subdirectory (yoursite.com/blog/) — usually not what you want
Site Settings
- Site Name: Your business or site name — can be changed in WordPress later
- Site Description: A brief tagline — can be changed later
- Enable Multisite: Leave unchecked unless you specifically need a WordPress network
Admin Account — Critical Settings
- Admin Username: Do NOT use “admin”, “administrator”, or your domain name. Choose something unique — e.g. “yourname_wp” or a random string. This is a primary brute-force attack target.
- Admin Password: Minimum 16 characters, mixed case, numbers, and symbols. Use a password manager to generate and store it.
- Admin Email: A real email address you check — WordPress sends password reset and notification emails here. If this is wrong, you lose account recovery.
Advanced Options
- Database Name: Auto-generated is fine. Or set a memorable name like “yoursite_wp”
- Table Prefix: Change from wp_ to something random like nc7k_ or site23_. This prefix is a security measure — automated SQL injection attacks target the default wp_ prefix.
- Disable WordPress Cron: Leave unchecked for most sites
- Limit Login Attempts: Check this box — adds basic brute-force protection
Select Plugins
Softaculous may offer to install bundled plugins. Uncheck all of them — install only what you specifically need. Pre-bundled plugins are often outdated or unnecessary.
Select Theme
Leave as default (Twenty Twenty-Four or current default). Install your chosen theme after WordPress is set up — don’t install themes via Softaculous.
Step 5: Run the Installation
- Scroll to the bottom of the form
- Click the blue Install button
- Softaculous shows a progress bar — installation takes 30–90 seconds
- On completion, you see: “Congratulations, the software was installed successfully”
- Two links are shown: your site URL and your WordPress admin URL (yoursite.com/wp-admin)
- Click the admin link and log in with the credentials you set
Step 6: Post-Install SSL Configuration (If You Installed with http://)
If SSL wasn’t ready when you installed and you chose http://, complete these steps once SSL is confirmed active:
- Log into WordPress admin → Settings → General
- Change WordPress Address (URL) from http:// to https://
- Change Site Address (URL) from http:// to https://
- Click Save Changes — you’ll be logged out; log back in at yoursite.com/wp-admin
- In cPanel → Domains → your domain → enable Force HTTPS Redirect toggle
- Test: visit http://yoursite.com — it should redirect to https:// with a padlock
Post-Install Checklist
- ✅ Visit your site URL — WordPress default theme loads
- ✅ Log into wp-admin with your credentials
- ✅ Dashboard → Updates — install any pending updates
- ✅ Plugins → Installed Plugins — delete “Hello Dolly” (pre-installed, unused)
- ✅ Settings → Permalinks → select “Post name” (/%postname%/) → Save Changes
- ✅ Settings → Reading → confirm “Discourage search engines from indexing” is UNCHECKED (or checked if you’re still building)
- ✅ Appearance → Themes → install your chosen theme
- ✅ Settings → General → confirm email address is correct
3 Common Errors and Specific Fixes
Error 1: “A trusted SSL Certificate was not found” during installation
Cause: You selected https:// in the installer before SSL was active on the domain.
Fix: Cancel the install attempt. Go to cPanel → SSL/TLS → Run AutoSSL. Wait for green certificate confirmation. Return to Softaculous and install again, this time with https:// if SSL is confirmed, or http:// to install now and switch to HTTPS manually after (see Step 6).
Error 2: “Error establishing a database connection” on first visit
Cause: The database credentials in wp-config.php don’t match the database Softaculous created. This can happen if the install was interrupted or if you edited wp-config.php manually with incorrect values.
Fix A: Delete the WordPress installation via Softaculous → Installations tab → Remove → then reinstall cleanly.
Fix B: In cPanel → MySQL Databases — find the database and user Softaculous created. Note the exact names. Open wp-config.php via cPanel File Manager → confirm DB_NAME, DB_USER, DB_PASSWORD match exactly (case-sensitive).
Fix C: In cPanel → MySQL Databases → Update the database user’s password → update the matching DB_PASSWORD value in wp-config.php.
Error 3: WordPress installs to yoursite.com/wordpress/ instead of root
Cause: “In Directory” field was left with “wordpress” (Softaculous sometimes pre-fills this).
Fix: Remove the installation via Softaculous → Installations → Remove. Reinstall and confirm the “In Directory” field is completely blank before clicking Install.
Frequently Asked Questions
How long does WordPress installation take on Namecheap cPanel?
30–90 seconds for the Softaculous installation itself. The full process including SSL setup and post-install configuration takes 10–15 minutes for a first-time installer.
Should I use Quick Install or Custom Install in Softaculous?
Always use the full form (Custom Install). Quick Install uses insecure defaults — admin username “admin” and table prefix “wp_” — which are the first things automated attacks target.
What PHP version should I use for WordPress on Namecheap in 2026?
PHP 8.1 or 8.2. Set this in cPanel → MultiPHP Manager before installing WordPress. PHP 8.2 is the current recommended version; PHP 7.4 and 8.0 are end-of-life.
Can I install multiple WordPress sites on one Namecheap hosting account?
Yes — on Stellar Plus and above, you can host unlimited domains. Add each domain as an addon domain in cPanel, then install WordPress separately on each via Softaculous.
Why does my site show “Not Secure” after WordPress installation?
Either SSL isn’t active (run AutoSSL in cPanel → SSL/TLS), or WordPress address settings still show http:// (fix in WordPress → Settings → General → change both URLs to https://).
