Image ALT Text

Featured Image ALT Text (Alternative Text) is a short descriptive tag added to a webpage’s primary image in the site’s code. It describes the appearance and context of the image to search engine crawlers and users who cannot view it.

Why It’s Important

How to Use It

Social Share Preview

A Social Share Preview (often powered by Open Graph tags or Twitter Cards) is the visual card that automatically generates when someone pastes your link into social media platforms or messaging apps like Facebook, LinkedIn, X, WhatsApp, or Slack. Instead of displaying a plain web link, it turns your URL into an engaging preview card complete with a headline, summary snippet, and custom featured image.

Social Share Preview vs. SEO Title & Meta Description

Ideal Character Length & Image Specs

How It Works

About Meta Description

A Meta Description is a brief summary of a webpage that appears directly under the SEO Title in search engine results. Like the SEO title, it lives in the site’s hidden code rather than on the page itself, serving as a short pitch to convince users that your link has the exact answer they need.

Meta Description vs. On-Page Content

Ideal Character Length

How It Works

About The SEO Title

An SEO Title (often called a Title Tag) is the title of a webpage that appears in search engine results like Google. Instead of being displayed directly on the actual webpage for visitors to read, it lives hidden in the site’s code to tell search engines what the page is about.

SEO Title vs. Main Title (H1)

Ideal Character Length

How It Works

What Is an Expired HTTPS Certificate and How Do You Fix It?

An HTTPS certificate helps create a secure connection between your website and its visitors. Certificates are only valid for a limited period and normally renew automatically.

If a certificate expires or becomes invalid, visitors may see warnings such as “Your connection is not private” and may be prevented from accessing the website.

An expired certificate does not automatically mean your website has been hacked. Usually, the certificate simply failed to renew.

How do you fix it?

For most website owners, the simplest solution is to contact your hosting provider.

Ask them to:

  1. Renew and install a valid SSL/TLS certificate.
  2. Make sure it covers your domain and the www version where applicable.
  3. Check that HTTPS is working correctly.
  4. Make sure automatic renewal is enabled.

If the certificate appears valid but visitors still receive warnings, ask your host or developer to check the complete SSL/TLS configuration. Problems can also be caused by an incorrect domain, certificate-chain problems or an incorrectly configured server.

What does JuiceBox check?

JuiceBox checks that your website’s HTTPS certificate is valid, trusted, matches your domain and has not expired.

Pass — Valid with 7+ days remaining.
Alert — Less than 7 days remaining or expiry cannot be confirmed.
Error — Expired, invalid, untrusted or cannot be verified.

If JuiceBox detects a problem, use Fix in Website Health for the next steps.

How to Fix Missing Security Headers (Without Being a Developer)

You may have run a security check on your WordPress website and received a warning saying that security headers are missing.

Don’t panic. This doesn’t mean your website has been hacked.

Why is this happening?

Your website is running on an Apache web server, but the server isn’t currently sending some additional security instructions to visitors’ browsers.

These instructions are called security headers.

Think of them as extra rules that tell a visitor’s browser how to safely interact with your website.

This is not normally a WordPress theme or template problem. The settings are usually controlled by your hosting company, server configuration, Cloudflare, or a WordPress security plugin.

What are the risks?

Missing security headers don’t automatically make your website vulnerable, but they remove some additional layers of protection.

Depending on the missing header, the risks can include:

These are security hardening issues, rather than evidence that your website has been compromised.

How do you fix it?

The simplest solution is to ask your hosting provider to add the recommended security headers to your website’s server configuration.

For a typical WordPress website, the main ones to consider are:

There is also Content-Security-Policy (CSP), which can provide strong protection against certain attacks, but this should be configured carefully. A badly configured CSP can break WordPress plugins, forms, fonts, analytics and other website features.

If you don’t have access to your web server, your hosting company will need to make these changes, or you can use a suitable WordPress security plugin if it supports them.

What about the other warnings?

You can run a deep check with SSL Security Headers Test to test your website security.

The goal isn’t to get a perfect scanner score.

The goal is to add the appropriate protections without breaking your website.

In short: Why is it happening?

Your web server isn’t currently sending additional security instructions to browsers.

Is your website hacked?

No. The warning alone does not indicate that.

Is it worth fixing?

Yes. These headers provide useful additional protection.

Who should fix it?

Your hosting provider is usually the best option if you don’t have server access.

What should you tell your Host Provider?

Send them a quick email with the following message:





Hi, I’ve run a security header check on my WordPress website and it shows that none of the recommended HTTP security headers are currently being returned.

Could you please add the appropriate security headers at the server level for my domain, including:

* Strict-Transport-Security (HSTS)
* X-Frame-Options
* X-Content-Type-Options
* Referrer-Policy
* Permissions-Policy

Please also advise whether a suitable Content-Security-Policy can be configured without affecting the WordPress site, plugins or third-party services.

I don't have access to the Apache/server configuration, so I would appreciate it if you could configure these for me and confirm once they are active.

Thank you.

Just remember to tell them which website and whatever your provider requires.

Hello world!

Welcome to WordPress. This is your first post. Edit or delete it, then start writing!