Before you start

A live WordPress instance on Neytom with HTTPS working in the browser.
Administrator access to wp-admin.

Sign in to wp-admin over HTTPS

Use https://your-domain/wp-admin/ (or the path Neytom shows in utilities).

If the browser warns of mixed content later, you usually fix it under Settings → General, not by disabling SSL.

Settings → General — title, tagline, and URLs

Set Site Title and Tagline to match your brand; they appear in themes and search snippets.

WordPress Address (URL) and Site Address (URL) must both use https:// and must match the public hostname visitors use.

If either field still shows http:// after provisioning, update both to https:// and save — otherwise cookies and admin styles may break.

Settings → Reading — homepage source

Choose whether the front page displays latest posts or a static page.

If you pick a static page, create two pages first (Home and Blog), then assign them here.

Settings → Permalinks — choose Post name

Select “Post name” for clean URLs (/hello-world/).

Click Save changes. If rewrites misbehave on Nginx, saving twice often flushes rules; persistent 404s on inner pages usually mean server rewrite config, not this screen alone.

Settings → Discussion — comments and pings

Disable pingbacks/trackbacks if you do not need them — they add noise and spam risk on small sites.

Moderation options control whether comments appear instantly or await approval.

Users → Profile — locale and application passwords

Set your display name (avoid using the literal admin username publicly).

If you connect mobile apps or REST tools, create Application Passwords from your profile when WordPress requests them.