Always create a complete backup of your site before starting any manual update
Download the latest WordPress version from wordpress.org
Use an FTP client like FileZilla to upload the files
Delete the wp-admin and wp-includes folders but never delete wp-content
After uploading new files, log into your dashboard to complete any database updates
WordPress is very stable and most updates happen with a single click.
But occasionally, things don’t go to plan.
Perhaps WordPress is asking for FTP credentials instead of just updating. Maybe a failed update has locked you out of your dashboard entirely. Or you might be recovering from a crashed site and need to reinstall WordPress manually.
These situations are less common than they used to be, but when they happen, you need to know what to do.
Leaving WordPress outdated isn’t an option since old versions are prime targets for hackers. This guide walks you through the manual update process step by step, so you can get your site updated and protected even when the automatic route fails.
Table of Contents
When You Might Need a Manual WordPress Update
Most modern hosting providers configure their servers so WordPress can update itself automatically. You click the button, the update runs, and you’re done. This is the normal experience for the majority of WordPress sites.
However, manual updates become necessary in a few specific situations.
WordPress Asks for FTP Credentials
When you click update and WordPress asks for FTP or SFTP login details, it means WordPress can’t write files directly to your server. This happens because of how file ownership works behind the scenes.
WordPress runs a quick test before updating: it creates a temporary file and checks who owns it. If the owner doesn’t match the web server process, WordPress knows it can’t make changes directly and asks for FTP access instead.
You’re most likely to encounter this on older shared hosting setups, budget hosting packages, or after migrating a site between hosts where file ownership got changed in the process.
Some hosts also configure things this way deliberately as a security measure.
If this happens to you, you have two options: enter your FTP credentials each time (which is safe but tedious), or contact your host and ask them to fix the file ownership so automatic updates work.
You Can’t Access Your Dashboard
Manual updates are also your only option when you can’t log into WordPress at all.
This might happen after a failed automatic update leaves your site stuck in maintenance mode, or if a plugin conflict prevents the dashboard from loading. Going directly to the files through FTP bypasses the dashboard entirely and lets you regain control of your site.
Before You Start
Before touching any files, make sure you have a way to restore your site if something goes wrong. A complete backup includes your WordPress files, your wp-content folder (which contains your themes, plugins, and uploads), and your database.
Most hosting plans offer backup tools through their control panels. Check whether you have automatic backups running and confirm they completed recently.
If not, use a backup plugin or your hosting’s backup feature to create one now. Store a copy somewhere separate from your hosting account, such as your computer or a cloud storage service like Google Drive.
Gather Your Access Details
You’ll need FTP or SFTP access to your hosting account.
These credentials are different from your WordPress login, so don’t try using the same username and password. Look in your hosting control panel for FTP details, or check the welcome email your host sent when you signed up.
You need the hostname (often your domain or an IP address), username, password, and sometimes a port number.
If you can’t find these details, contact your hosting provider’s support team. They can provide them or reset your FTP password for you.
How to Manually Update WordPress Core
With a manual update process you will be downloading the update files to your local computer, then copying these to where your WordPress website files are.
Step 1: Download the Latest WordPress Version
Go to wordpress.org and download the latest version of WordPress. The download button gives you a ZIP file containing all the WordPress core files. Save this to your computer in a location you can easily find/remember.
Once downloaded, extract the ZIP file.
On Windows, right-click the file and select “Extract All”. On Mac, double-click the file. You’ll now have a folder called “wordpress” containing all the files you need for the update.
Step 2: Connect to Your Site via FTP
Download and install an FTP client if you don’t have one. FTP software allows you to transfer files from one place to another.
FileZilla is free and works on both Windows and Mac. Open FileZilla and enter your FTP credentials in the connection bar at the top, then click “Quickconnect” to establish the connection.
Once connected, you’ll see your local computer files on the left and your server files on the right.
Navigate to your WordPress installation on the server side. This is usually in a folder called “public_html” or “www”, though some hosts use your domain name as the folder name.
You’ll know you’re in the right place when you see three key folders:
- wp-admin
- wp-content
- wp-includes
If you see all three, you’ve found your WordPress root directory.
Step 3: Delete the Old Core Folders
This step requires the most care, so read it fully before doing anything.
On your server, right-click the wp-admin folder and delete it. Then delete the wp-includes folder the same way. These folders contain only WordPress core files that you’re about to replace, so deleting them is safe.
Do not delete the wp-content folder.
This folder contains your themes, plugins, uploaded images, and everything that makes your site yours. Deleting it would wipe out your entire website’s content and customisations. Leave it completely untouched.
Step 4: Upload the New Files
In FileZilla, navigate to the extracted WordPress folder on your local computer (shown on the left side). Select all files and folders except the wp-content folder. Right-click and choose “Upload” to transfer them to your server.
When prompted about files that already exist, choose to overwrite them and apply this to all files. The upload typically takes 5 to 10 minutes depending on your internet connection speed. Let it complete without interruption.
Step 5: Complete the Update
Once the upload finishes, open your browser and go to your WordPress login page (yourdomain.com/wp-admin). Log in with your usual WordPress credentials.
WordPress may display a message saying your database needs updating. This is normal after a core update. Click the button to run the database update and wait for it to complete.
After the database update finishes, clear any caching plugins you use and check your site’s front end using incognito mode.
Visit a few different pages and test key functionality like contact forms or shopping cart features. Everything should work exactly as before.
Troubleshooting Common Problems
Stuck in Maintenance Mode
If your site shows “Briefly unavailable for scheduled maintenance” and doesn’t recover after a few minutes, WordPress is stuck in maintenance mode.
Connect via FTP and look for a file called “.maintenance” in your WordPress root folder (the same folder containing wp-admin). Delete this file and refresh your site. It should return to normal immediately.
How to Fix WordPress Stuck in Maintenance Mode
White Screen After Updating
A white screen usually indicates a plugin or theme conflict with the new WordPress version. Connect via FTP and rename your plugins folder to “plugins-disabled”. This deactivates all plugins at once and should restore access to your dashboard.
Once you can log in again, rename the folder back to “plugins” and reactivate your plugins one at a time. Test your site after each activation to identify which plugin caused the problem. You may need to find an updated version or an alternative plugin.
How to Fix the WordPress Critical Error
Database Update Fails
If WordPress asks you to update your database but the update doesn’t complete, try accessing yourdomain.com/wp-admin/upgrade.php directly in your browser. This runs the database update script manually and often resolves the issue.
When to Get Expert Help
Manual updates are manageable for standard WordPress sites, but you do need some basic familiarity with FTP and transferring files.
And some situations just benefit from expert assistance.
If your site uses custom code modifications to core files, a manual update will overwrite those changes. Sites with complex plugin configurations or bespoke development work may need someone experienced to handle updates safely.
If you’ve tried the steps above and your site still won’t update, or if working with FTP feels uncomfortable, consider getting professional help.
The cost of expert assistance is usually far less than the time and stress of fixing a broken website yourself.
What to Do After Updating
You now know how to update WordPress manually when the automatic option fails.
The key points to remember:
- always back up first
- never delete the wp-content folder
- and take your time with each step
Once your site is updated, it’s worth investigating why automatic updates failed in the first place.
Your hosting provider may be able to adjust file permissions so future updates work with a single click. Many UK hosts offer this as standard, so ask their support team about your options.
Regular updates keep your WordPress site secure and running smoothly.
Whether you handle them manually or automatically, staying current with WordPress versions is one of the most important parts of website maintenance.
Frequently Asked Questions
WordPress asks for FTP credentials when it can’t write files directly to your server. Before updating, WordPress creates a temporary test file to check ownership. If the file owner doesn’t match the web server process, WordPress knows direct updates won’t work. This is most common on older shared hosting, budget packages, or after site migrations. Contact your hosting provider and ask them to fix file permissions so automatic updates work in the future.
Yes, manual WordPress updates are safe when you follow the correct steps. The key is creating a complete backup before you start and being careful never to delete the wp-content folder. Take your time, follow the instructions carefully, and you should have no problems. Thousands of site owners do this successfully every day.
Read more: Can’t I Just Update WordPress Myself?
Most manual WordPress updates take between 15 and 30 minutes, depending on your internet connection speed and familiarity with FTP. The file upload itself usually takes 5 to 10 minutes. If this is your first time, allow extra time to get comfortable with the FTP client and locate the correct folders.
If you delete wp-content, you lose your themes, plugins, and all uploaded media files like images. This is exactly why backing up before any update is so important. If this happens and you have a backup, restore the wp-content folder from it. Without a backup, you’ll need to reinstall plugins and themes and re-upload all your media files manually.
Yes, you should check for plugin and theme updates after updating WordPress core. New WordPress versions sometimes change how plugins and themes interact with the core software. Log into your dashboard after the core update and apply any available updates. This helps avoid compatibility issues and keeps everything working together properly.
If your hosting provides a file manager in the control panel, you can use that instead of FTP. The process is identical: delete the old wp-admin and wp-includes folders, then upload the new files. Some managed WordPress hosts also provide their own update tools through their control panels, which can be easier to use.
Connect to your site via FTP and look for a file called “.maintenance” in your WordPress root folder (the same folder containing wp-admin and wp-content). Delete this file, and your site should return to normal immediately. If the underlying update issue remains, you may need to complete the manual update process described in this guide.
Disabling plugins before updating isn’t required but can reduce the chance of conflicts. If you want extra safety, rename your plugins folder to something like “plugins-disabled” before uploading new WordPress files. After the update completes, rename it back to “plugins” and reactivate them through your dashboard one by one.
Your site may briefly show errors during the few minutes when you’ve deleted the old files but haven’t finished uploading the new ones. Visitors during this window might see a blank page or error message. For most small business sites with low traffic, nobody will notice. If you’re concerned, do the update during a quiet period like early morning or late evening. The actual downtime risk is just 5 to 10 minutes.
Update WordPress as soon as new versions become available. Minor security releases should be applied immediately, while major releases can wait a few days to let any initial bugs get reported and fixed. At minimum, check for updates monthly. Delaying updates leaves your site vulnerable to known security issues that hackers actively exploit.
Related: What Happens to Your WordPress Site If You Don’t Keep It Updated?