Best shared web hosting on a budget (2019)

Next rankings and hosting stats update:
August 4th, 2019

I signed up with six of the most popular shared hosting companies and set up a website on each one.

I tracked server uptimes, monitored website load times, tested support quality by inducing a website malfunction, simulated sudden traffic spikes to assess server performance, calculated the short- and long-term costs of hosting with each company, and much more.

Here’s what I learned.

Table of contents

If you’re not interested in my research and are just looking for the best hosting services, skip to so which is the best web hosting service provider?

1. Choosing hosts to compare

Since there are hundreds of shared web hosting services, it wasn’t feasible to test them all. I decided to narrow down my sample based on a combination of the following:

  1. Server uptimes, as reported by Hosting Facts and Down.com
  2. Userbase size, as reported by W3Techs (The more users, the better.)
  3. The availability of U.S.-based servers

This resulted in the following selection:

I focused on the shared hosting plans exclusively. I will provide separate overviews of their VPS and dedicated servers in the future.

Let’s see which of the above deserves the “best web hosting” label.

1.1 Purchasing domains and web hosting

I started by registering an annual shared plan with each company.

I then bought six .xyz domains- one per host- because they were inexpensive ($0.99/year).

I then installed WordPress (WP) on each of the six websites. Since WordPress powers more than 32 percent of all websites, I conducted all hosting tests on a WP platform.

2. Cost comparison: short- and long-term

Let’s start with available payment methods:

Available payment methods:

PayPalCredit Card
HostGator
GoDaddy
SiteGround
Bluehost
iPage
DreamHost

The prices listed below are what was available to me. As far as I know, hosting companies can show slightly different prices to users in different regions.

Additionally, some hosts will offer a discount if you contact them via live chat before making your purchase, so it’s always a good idea to ask.

I decided to compare prices across two verticals:

  1. The cheapest plans that support one website
  2. The cheapest plans that support unlimited websites

Let’s start with the first one.

2.1 single-website shared hosting plans:

Plan nameMonthly termAnnual terms3-year terms
First termRenewalFirst termRenewal
HostGatorHatchling$10.95$5.95$8.95$2.75$6.95
GoDaddyEconomy$9.99$7.99$7.99$7.99$7.99
SiteGroundStartUp$3.95 + $15 setup$3.95$11.95$3.95$11.95
BluehostBasic-$5.95$8.99$3.95$6.99
iPageone plan available-$2.99$9.99$1.99$7.99
DreamHostShared Starter$4.95$3.95$3.95$2.59*$2.59*
Last verified: 06/26/2019

* to get the three-year plan from DreamHost, contact their live chat support

New members get the discounted first-term pricing, but when it’s time to renew, the renewal pricing applies.

Here’s a graph to help us visualize the differences:

From the above we can see that:

  • GoDaddy and SiteGround do not offer discounts on their 3-year terms.
  • HostGator offers the biggest discount.

Now, let’s look at the difference between first-term and renewal prices across hosts:

Note that:

  • HostGator, SiteGround, and iPage have significantly higher renewal prices than introductory prices.
  • GoDaddy and DreamHost prices are the same for first and subsequent terms.

Cumulative long-term costs of single-website hosting:

The graph below shows the total price you can expect to pay for three, six, and nine years with a given host. This assumes an optimal scenario, where:

  • You opt for an initial 3-year plan to maximize the value of first-term discounts.
  • You always renew for three years.

Here’s what we can gather from the above:

  • GoDaddy has the most expensive initial three-year term (close to $300 total).
  • Around the 6-year mark, the total cost for hosting with GoDaddy and SiteGround equalize.
  • After nine years, SiteGround overtakes GoDaddy as the most expensive shared hosting service ($1,000 in total expenses).
  • At the 6-year mark, DreamHost becomes (and continues to be) significantly cheaper than the other providers.
  • Bluehost, iPage, and HostGator expenses increase roughly in tandem.

2.2 multiple-websites shared hosting plans:

Plan nameMonthly termAnnual term3-year term
First termRenewalFirst termRenewal
HostGatorBaby$11.95$8.95$11.95$3.95$9.95
GoDaddyDeluxe$12.99$10.99$10.99$10.99$10.99
SiteGroundGrowBig$5.95 + $24.95 setup$5.95$19.95$5.95$19.95
BluehostPlus-$7.95$12.99$5.95$10.99
iPageone plan available-$2.99$9.99$1.99$7.99
DreamHostShared Unlimited$10.95$9.95$9.95$7.95$7.95
Last verified: 06/26/2019

Comparing annual terms vs. 3-year terms:

Just like with the single-website plans, GoDaddy and SiteGround offer the same monthly rates on annual and 3-year terms, while HostGator does its best to make 3-year terms enticing.

Now for the first-term vs. renewal pricing comparison:

By the way, if you are on a budget and need to host multiple websites, see our list of the cheapest multi-website hosting packages.

2.3 What about single-website pricing vs. multi-website pricing?

I’ve got a graph for that, too:


From this graph, we can see:

  • iPage offers the cheapest multi-website hosting.
  • DreamHost has the largest price hike from single-website to multi-website hosting.

2.4 Cumulative long-term costs of multi-website hosting:

What about the total cost over the long term (three, six, nine years)? Take a look:

This time things are different than with single-website hosting:

  • iPage offers the cheapest multi-website hosting over the long run.
  • DreamHost, Bluehost, and HostGator carry similar long-term costs.
  • By the six-year mark, SiteGround becomes the most expensive option.

2.5 do any of these hosts offer student discounts?

Of the six providers I tested here, only SiteGround offers a discount specifically for students.

If you’re a student looking for special discounts or even free hosting, check out our best student hosting rankings.

Verdict: Which web hosting service offers the best prices?

Pricing is a tricky business.

Your budget plays a significant role, as does the number of websites you plan to host.

If you base your buying decision exclusively on price, then:
Cheapest one-website plans:
Monthly termsDreamHost
Annual termsiPage
3-year termsiPage
Cheapest renewalsDreamHost
Lowest long-term expendituresDreamHost
Cheapest multi-website plans:
Annual termsiPage
3-year termsiPage
Cheapest renewalsDreamHost
Lowest long-term expendituresiPage

Unfortunately, iPage comes with some serious quality issues (read on to learn more). You probably don’t want to host with them unless you’re on a very tight budget or if you’re planning to host a small private website only family and friends will visit.

Also, make sure to check out our list of hosts with negotiable prices to get the most bang for your buck.

3. Server uptime tests

Uptime (availability) expresses the amount of time a website on a server remains accessible online. The higher the uptime percentage, the better.

The lower the uptime percentage, the more downtime your website experiences. When your site is down, visitors can’t access it.

I began tracking the uptime of each of my six websites on January 9th, 2019, with the following results.

Server uptimes:

Uptime:Monthly downtime:
Bluehost100%0 minutes
HostGator99.96%16 minutes
GoDaddy99.95%20 minutes
SiteGround99.99%4 minutes
iPage99.98%8 minutes
DreamHost99.96%16 minutes
Last verified: 06/26/2019

Here’s a list of the single longest downtimes each server experienced.

Single longest downtime:

Longest single downtime event:
Bluehost0 minutes
HostGator3 minutes
GoDaddy4 minutes
SiteGround2 minutes
iPage4 minutes
DreamHost5 minutes
Last verified: 06/26/2019

It’s worth noting that in all cases, whatever caused the downtime was resolved automatically by the respective hosts, without my need for intervention.

Note that even apparently small differences in uptime percentage can have a major impact on the accessibility of your site. Take a look.

Examples of downtime consequences:

UptimeMonthly downtimeAnnual downtime
99.999%26 seconds5.2 minutes
99.99%4.3 minutes51 minutes
99.95%21.6 minutes4.3 hours
99.90%43 minutes8.6 hours
99.80%86 minutes17 hours
99.50%3.6 hours1.8 days
99%7.2 hours3.6 days

Generally, uptimes below 99.95% should be a red flag.

Verdict: Which web host has the best uptime?

Bluehost is the winner.

However, even the worst performer on my list (GoDaddy) still did quite well with only ~20 minutes of monthly downtime on average, which shouldn’t be a problem for the majority of webmasters running a personal blog or small online store.

4. Website load times test

First, I contacted the tech support of each host and inquired about the physical location of the server hosting my website.

Physical server locations for my websites:

Hosting company:My server location:
HostGatorHouston, Texas
GoDaddyAshburn, VA
SiteGroundChicago, Illinois
BluehostOrem, Utah
iPageBoston, Massachusetts
DreamHostHilsboro, Oregon

I wanted to know where the host’s data center was located so that I could choose website load speed testing services that had servers as close to that location as possible. It’s the only way for the test to be reasonably objective.

Next, I used Pingdom’s Advanced Checks and WebPageTest’s standard pings to set up website speed tests for my domains.

I tested loading times more than once every 30 minutes over the course of two weeks. That’s over 670 loading speed tests per website.

As a reminder, each website was a simple WordPress installation with Yoast SEO and a few other plugins enabled.

Here are the results of my website load time tests:

In my case, SiteGround had the best average load times at ~600 ms, and iPage was the worst performer with ~1 600 ms.

The remaining hosting companies averaged between 800-940 ms.

However, averages don’t tell the full story. I also wanted to understand how these load times fluctuated over time.

To account for this, I asked the following question: How often did load times spike to more than two seconds?

I chose two seconds as the threshold because that’s the point beyond which bounce rates (the percentage of people who abandon your website) begin to increase, according to a Pingdom report.

Number of significant load time spikes:

Number of spikes to over 2 seconds
iPage24
GoDaddy11
HostGator4
SiteGround3
DreamHost3
Bluehost0

iPage disappoints again with 24 recorded spikes! Keep in mind this is for a simple WordPress page.

GoDaddy is on shaky ground with 11 spikes, and Bluehost leads the way with zero.

Verdict: hosting company with the most reliable page load times

Bluehost offers the most stability: a respectable 830 ms load time and not a single recorded spike over two seconds in a 2-week period. In fact, I did not register a single spike beyond 1.2 seconds.

I would avoid iPage. Their average loading times are high– 1.6 seconds, and this value spikes to performance-impacting levels too frequently.

If you expect your website pages to be large (3+ MB each), consider SiteGround for their lowest average loading times.

5. Traffic spike simulation

Using LoadImpact, I configured a spike test simulation script that did the following:

  • Sent virtual users (VUs) over ~30 seconds to each website
  • Simulated activity on the site (loading pages, requesting content from the server, etc.) for four minutes
  • Finally, all VUs left the site over ~30 seconds

My goal was to measure the quality of service (QoS) performance of each server based on the user behavior one might expect when a link to their website gets passed around social media platforms.

During the test, I was keeping an eye out for:

  • HTTP request errors. An HTTP request is any request for information (a file, page, etc.) sent by a user to the server.
  • I/O timeouts, which are often caused by a server’s traffic load balancer dropping connections.

HTTP errors and I/O timeouts suggest the server experienced difficulties handling the sudden onslaught of traffic. A real user would experience this as a webpage failing to load or loading incorrectly or incompletely.

Here’s an excerpt of the data for one of the tests I did on one of the servers:

 

The request column tells me which page was being accessed by the virtual user, the status column lists the type of HTTP response, and the count column tells me how many times this error occurred during the test.

In the example above, we can see a 503 (“service unavailable”) error while accessing http://htd6.xyz occurred 304 times. In simpler terms, this means that 304 attempts at loading the front page of the website resulted in an error.

Okay, onto the real tests:

5.1 Simulation #1 – 100 concurrent users:

Error responses as a percentage of total server requests made
HostGatorGoDaddySiteGroundBluehostiPageDreamHost
96%93%0%97%99,5%37%

Wow! There were zero HTTP response errors coming from SiteGround. They handled the sudden 100-traffic spike perfectly, and the average server response time was 92 milliseconds per request.

DreamHost performed surprisingly well, too.

Overall a lot of errors, but that’s expected; one hundred simultaneous users is a lot for most shared hosting infrastructures.

After the test, I manually visited each website to see if it regained baseline performance after the load test, and they all did– except for iPage. Instead of my WordPress site, I saw a database connection error.

I contacted support to report the issue, and here’s their response:

As you can see, making ~7,000 HTTP requests resulted, in this case, in exceeding a query limit and my website was taken down.

Onto the next test.

5.2 Simulation #2 – 75 concurrent users:

Error responses as a percentage of total server requests made
HostGatorGoDaddySiteGroundBluehostiPageDreamHost
66%68%0%68%0%28%

SiteGround reports zero HTTP errors again, and the other hosts see definitive improvement. iPage, on the other hand… reports zero HTTP errors?

I wasn’t expecting this. I reran the test (@75 VUs) and got the same result– zero errors. I ran it again a few hours later, same thing.

Apparently, iPage’s server handles traffic spikes very well. The issue I experienced while running the 100 VU test was due to exceeding a certain threshold of database connections in a short time window.

5.3 Simulation #3 – 50 concurrent users:

Error responses as a percentage of total server requests made
HostGatorGoDaddySiteGroundBluehostiPageDreamHost
33%55%0%41%0%5%

SiteGround and iPage return zero errors again, and DreamHost is down to a 4.5 percent error rate. I’m surprised by how well the two cheapest hosts are performing.

The remaining three hosts still suffer from 30 to 50 percent error rates.

5.4 Simulation #4 – 15 concurrent users:

Error responses as a percentage of total server requests made
HostGatorGoDaddySiteGroundBluehostiPageDreamHost
8%25%0%4%0%0%

By now, DreamHost is error-free, while GoDaddy is still having problems– a quarter of all user requests are either timing out or returning a 503 error.

One more load configuration:

5.5 Simulation #5 – five concurrent users test:

Error responses as a percentage of total server requests made
HostGatorGoDaddySiteGroundBluehostiPageDreamHost
0%4%0%0%0%0%

Due to the small number of virtual users, I was expecting all servers to return zero errors. However, GoDaddy still experienced a 4 percent HTTP error rate (confirmed via two subsequent tests).

Verdict: Which hosting provider handles sudden traffic spikes the best?

First, I want to mention that I repeated the tests above multiple times over a few days to make sure my results weren’t a fluke. In each case, the difference between results was negligible (less than 5 percent).

Here’s a graph comparing the error rates recorded during the various traffic spike simulations:

We can conclude the following:

  • SiteGround offers the most robustness. If you anticipate frequent traffic spikes (e.g., if you plan on marketing your website via social media) and their renewal pricing is acceptable, choose them.
  • DreamHost and iPage handle traffic spikes surprisingly well given the low price.
  • If you go with a shared hosting plan with HostGator, GoDaddy, or Bluehost, a significant number of your visitors may experience some difficulties navigating your website when more than 10 to 15 users visit and browse simultaneously.

As noted earlier, most new websites will rarely have to deal with 100 visitors connecting simultaneously. (It can be an exciting event to see even five visitors at a time, let alone more than 10.)

Still, if you’re expecting even modest traffic spikes fairly soon, you may want to think twice before hosting with GoDaddy.

Finally, if you run a large website that requires a lot of database connections, refer to our rankings: hosts with the best concurrent database connection limits.

6. Website malfunction simulation

My approach was simple: I edited the WordPress wp-config.php file and changed the MySQL Database login credentials to incorrect ones.

As a result, when anyone attempted to access my website, they would see this:

My next step was to contact tech support and report the issue. I was interested to see:

  • How long will it take them to figure out the problem?
  • Will they fix it for me or give me instructions to do it myself?

Technically speaking, the hosting company is only responsible for errors on the server side. Since my manufactured malfunction was on the website’s end, tech support is not obligated to solve the problem.

So how did it go?

6.1 HostGator crisis resolution timeline:

00:00 – (hh:mm)
I attempt connecting to live chat.
00:01
Connection to live chat established. I’m asked to verify my identity.
00:15
Support operator begins the investigation after a delay: “checking on site right now.
00:30
I haven’t heard back in a while. I inquire and am asked to wait a bit more.
00:43
Support representative: “I can’t find a problem with the database. Still working on it.
00:46
Support representative: “You may check the site now 🙂” The website was working.

This took 45 minutes from start to finish.  The representative spent 30 minutes looking for a problem with the database itself before finally checking the database login credentials in my WordPress settings. Good job overall, but it took the operator a little too long to get started on the problem.

6.2 GoDaddy crisis resolution timeline:

00:00 – (hh:mm)
I attempt connecting to live chat.
00:07
Connection established after seven minutes. The operator requests my account security PIN and begins the investigation.
00:14
Support operator: “The database itself is working fine. I’m about to access your WordPress website admin area to investigate.
00:26
I’m again informed the MySQL database is working properly and that I need to troubleshoot the problem on my own because it’s not technically an issue with their service (which is true). I ask if a different support representative could take a look at the problem.
00:32
Support: “I would love to do that but this is a problem that needs to be checked on your backend which is out of our scope. The connection from your website to your server is fine (this is incorrect – the connection isn’t fine), it’s just that your database should be reviewed by a developer.
00:38
I manage to connect to a different tech support representative. I verify my identity and wait.
00:57
Operator: “It looks like an issue with the table prefix, please stay online as I look into this.
01:20
I’m finally told this WordPress support thread has a solution to my problem. The support agent also tells me I can have a GoDaddy expert handle the problem for $80 + tax.

After 80 minutes, what I got was a WordPress support link, which I imagine many beginners would find intimidating to go through.

To be clear, GoDaddy was completely within their rights to refuse further help. They are under no obligation to help me fix issues with my website, and their tech support only covers server-specific malfunctions.

Still, considering how the remaining hosting companies were willing to modify my wp-config file (see below), I was somewhat disappointed with GoDaddy.

6.3 SiteGround crisis resolution timeline:

00:00 – (hh:mm)
I attempt connecting to live chat.
00:01
Connection established. Support representative begins to investigate immediately.
00:16
I’m told “there doesn’t appear to be a problem with the database.” The technician even disabled all my WordPress plugins to make sure none of them was the culprit.
00:19
The technician gives up and suggests I should pay $30 to restore my website from their automated daily backup. I refuse and ask for my support requested to be escalated.
00:21
The representative tells me they have opened a support ticket in my name and assigned it to a senior support team member. I’m told to expect a reply in 15 minutes.
00:34
I receive a reply: “I am glad to inform you that I have found and fixed the error.” The site works.

That’s 34 minutes total. Quite fast, but I was disappointed by how quickly the first operator threw in the towel.

If I was less experienced or if I didn’t know the problem was easily solvable, I might have been down 30 bucks.

Moral: If you don’t receive a satisfactory solution, ask to have your support request escalated or try connecting with a different operator. This is true for all hosts, not just SiteGround.

6.4 Bluehost crisis resolution timeline:

00:00 – (hh:mm)
I attempt connecting to live chat.
00:05
Connection established. I’m asked to validate my account.
00:10
The representative confirms they have begun investigating.
00:23
I ask how things are going. The operator asks me to wait an extra four to five minutes.
00:26
I hear back: “The database name was incorrect in the wp-config file and it was updated.” The site works.

In total, it was 21 minutes from the moment I connected to live chat and 16 minutes from when the operator started looking into the issue.

Good work.

6.5 iPage crisis resolution timeline:

00:00 – (hh:mm)
I attempt connecting to live chat.
00:02
Connection established. Operator: “I will check your website now.
00:06
I hear back: “The database username was incorrect, I have corrected it, please check now.” The site works.

Wow, that was fast! Just a few minutes and my website was working.

It seems the operator’s first instinct was to check if the database login credentials were correct, as opposed to looking for a problem with the database itself.

Great work.

6.6 DreamHost crisis resolution timeline:

00:00 – (hh:mm)
I attempt connecting to live chat.
00:00
The connection is instant. Operator: “I’m working on it, please wait.
00:02
Operator: “the username on the wp-config file was incorrect, I fixed that for you” The site works!

That’s two minutes total from clicking “connect to live chat” to problem resolution. Impressive.

Summary of crisis resolution times:

HostMinutes
HostGator45
GoDaddy80 (incomplete solution)
SiteGround34
Bluehost21
iPage5
DreamHost2

Verdict:

DreamHost and iPage did surprisingly well. They did not waste time attempting to verify my identity or getting my e-mail address and instead dove into the problem headfirst.

They also assumed the most likely problem was human error (incorrect database connection credentials in my WordPress configuration file) as opposed to a system failure. As a result, they solved the problem in a few minutes.

GoDaddy’s unwillingness to bend the rules a little and help out when they easily could have was disappointing.

Finally, I’ll be the first to admit this test isn’t perfect; obviously, the quality of support you receive will depend on the problem and the support agent handling it. However, there is still valuable insight to be gained from this test.

7. Honoring their money-back guarantee (refund) policy

I was looking to answer the following questions:

  • How much time do I have to request a refund after buying a hosting plan?
  • If I get a refund, am I still eligible for a refund on any future hosting purchases?
  • How long will I have to wait before I receive my refund?
  • Can I request a refund through the website, or do I need to contact support?

Here’s what my research uncovered.

7.1 Official money-back policies for annual+ plans

Days to request refundHow to request a refund?
HostGator45Via this page
GoDaddy30Through Live Chat
SiteGround30Via the billing section
Bluehost30Through Live Chat
iPage30Through Live Chat
DreamHost97See this guide
Last verified: 06/26/2019

Using the refund-request method listed in the table above, I asked for a refund 12 days after purchasing my hosting accounts.

I’m happy to report I received my money back from every company.

All I had to do was cancel my account and the refunds were issued automatically– except HostGator, whom I had to contact via email after canceling my account to receive a refund.

7.2 Summary of my refund experience

Refund toAdvertised refund time (days)Actual refund time
HostGatorPayPal7-152 days *
GoDaddyPayPal5-616 hours
SiteGroundCredit card7-12One business day
BluehostPayPal2-5Instant
iPagePayPal7-1010 minutes
DreamHostCredit card5-7One business day

You must contact HostGator support after canceling to request a refund.

As you can see, I received my money back very quickly in all cases. None of the hosting companies made canceling my account and requesting a refund problematic. It felt like a routine and straightforward operation.

Make sure to check out our list of hosts with the longest money-back guarantees.

7.3 Pro-rated refunds (refund on unused months)

Some hosting providers offer refunds on unused subscription months. For example, if you purchase three years of hosting and decide to cancel after two years, you would receive money back for the one year of unused hosting.

Out of the six hosting providers included in this comparison, the following three offer pro-rated refunds:

  • SiteGround
  • BlueHost
  • GoDaddy

Please see our list of hosts with pro-rated refunds for more recommendations.

8. Storage and bandwidth restrictions

I was looking to answer the following:

  • What storage capacity did each hosting service offer?
  • What are the bandwidth (data transfer) limits?
  • Are there any restrictions on the size and number of MySQL databases I can have?
  • What’s the maximum number of files I can have on my server?

Let’s get started:

8.1 Advertised storage capacity:

Single-website planMulti-website plan
HostGatorUnlimitedUnlimited
GoDaddy100 GBUnlimited
SiteGround10 GB20 GB
BlueHost50 GBUnlimited
iPageUnlimitedUnlimited
DreamHost50 GBUnlimited
Last verified: 06/26/2019

There isn’t such a thing as true unlimited storage.

Read the host’s user agreement or abuse policy and you’ll learn they reserve the right to throttle your storage if you appear to be “gaming the system.”

However, the warning above applies mostly to malicious actors.

If you’re planning on using your hosting account as intended (e.g., to host blogs, e-commerce stores, or a business website), you’re very unlikely to run into issues.

Okay, but how much storage does your website need?

This depends on the type of website. For example, a site with tons of high-resolution photos and HD videos will require significantly more storage space than a blog or an online store.

Here’s a rough back-of-the-napkin calculation to point you in the right direction. Let’s suppose you’re setting up a WordPress website:

  • The WordPress installation files take up roughly 40 MB.
  • Assume an additional 100 MB for plugin files and themes.
  • According to MatchMetrics, the average webpage size in 2018 is larger than 2 MB.
  • This means that, on average, having 1,000 pages on your site will occupy 2,000 MB (2 GB) of space.

In total, a hypothetical 1,000-page WordPress site will occupy 40 + 100 + 2,000 = 2,140 MB, or 2.14 GB.

Keep in mind any website backups will use up storage space as well.

Again, this is a very rough approximation and only intended to give you a ballpark figure. Hopefully, it helps you see the majority of new website owners won’t come close to their storage limits.

8.2 Advertised bandwidth limits

Bandwidth refers to how much data can be transferred back and forth between your website and its visitors.

The more visitors and the larger your website, the more bandwidth you’ll need.

So how much bandwidth do the best hosting services provide?

Bandwidth limits:
HostGatorUnmetered
GoDaddyUnmetered
SiteGroundUnmetered
BluehostUnmetered
iPageUnmetered
DreamHostUnmetered
Last verified: 06/26/2019

Hosting providers love the term unmetered bandwidth. However, this is more of a marketing ploy than anything else.

All hosts reserve the right to throttle bandwidth if they, at their sole discretion, determine your traffic volumes and data transfers have exceeded their “fair use” policy.

Unfortunately, nowhere on their websites does it specifically say what constitutes fair use.

I contacted each host’s support team and asked them for the average number of daily visitors a typical WordPress blog can receive on their hosting before bandwidth is throttled.

8.3 Approximate maximum average daily visitors before bandwidth is throttled:

Approx. daily visitors
HostGator8,000
GoDaddy10,000
SiteGround300 - 800
Bluehost10,000
iPage10,000
DreamHostNo limit provided

Whether or not serving as many visitors as listed above will lead to performance degradation is an entirely different story.

Still, it’s helpful to see what company representatives consider as upper traffic limits.

8.4 MySQL database limits

Hosting providers impose restrictions on the number of and maximum size of MySQL databases you can create:

Maximum databases allowedMaximum size per single databaseMaximum combined size of all databases
One-website plansCheapest multi-website plan
HostGatorUnlimitedUnlimitedUnlimitedUnlimited
GoDaddy10251 GBNone
SiteGroundUnlimitedUnlimited500 MB750 MB
Bluehost20Unlimited2 GB3 GB
iPageUnlimitedUnlimited2 GB3 GB
DreamHost6UnlimitedUnlimitedUnlimited
Last verified: 06/26/2019

Again, keep in mind there’s no such thing as unlimited space.

Some of these limits feel a little restrictive. As a point of reference, I have a WordPress site with around 250 posts, and the database for that site is around 100 MB large.

Moreover, if you plan on hosting your own website analytics (such as Matomo) instead of using an external service like Google Analytics, be aware visitor logs can end up taking up huge amounts of MySQL storage space if you let them pile up. You’ll want to set up periodic purging of these logs.

Overall, database size limits are more likely to become a bottleneck for the average user than the total storage capacity of their hosting account.

If your website uses a database and you expect the site to have in excess of a thousand large pages, you’ll want to keep an eye on the size of your database. You’ll also want to avoid SiteGround’s basic shared plan due to its 500 MB limit.

8.5 Inode limits

An inode is a data structure that describes a file system object. Don’t let that scare you: an inode limit simply tells you how many files and folders you can have on your server.

inode limit
HostGator250,000
GoDaddy250,000
SiteGround150,000 (StartUp) and 300,000 (GrowBig)
Bluehost200,000
iPage200,000
DreamHostNo limit
Last verified: 06/26/2019

Each of the following counts as a single inode:

  1. Files (including all cached files and their backups)
  2. Folders and subfolders
  3. E-mail messages (including everything in your ‘spam’ and ‘sent’ folders)

Being able to host 200,000 to 250,000 files/folders may sound like a lot– and it is.

For example, a well-maintained WordPress blog is unlikely to use up more than 50,000 inodes, even if it has hundreds of posts and multiple images per post.

Generally speaking, the above inode limits are generous and enough for two or three active websites. The limits might become a problem if you plan to host four or more websites, or if you allow unused files (deactivated plugins and themes, cached files, multiple copies of the same image) to pile up and use up inode quota.

If your website requires a lot of Inodes, see our rankings of hosts with the highest Inode limits.

Verdict: Which host offers the most resources?

All things considered, the differences are not considerable enough to make resource availability critical selection criteria– at least not for beginners.

There is one important exception: If you expect more than 10,000 unique visitors per month, stay away from SiteGround. They openly list this as the upper limit for their StartUp plan.

SiteGround has the most restrictive resource allocation policies. However, this comes with an upside: They offer exceptional website performance.

9. Website security and account safety

What happens if you accidentally delete important website files? Does the host offer free malware scanning?

And just how difficult is it for malicious attackers to hack into your admin account?

9.1 Automatic website backups

While automatic backups are usually offered for free, most hosting companies will charge you to restore your website from a backup. How often are backups taken, how much will it cost you to restore your website, and what premium options are available?

If you’re planning to host a WordPress site, you can install and configure a WordPress plugin that will take automatic backups of your site. In this case, whether your hosting company offers additional free automated backups becomes less relevant.

However, it’s safer to be with a hosting company that offers free backups. It adds an extra layer of security and improves your odds of a successful website recovery in case of a digital disaster.

Where auto backups are concerned:

  1. Does the hosting company offer free backups?
  2. How much does it cost to restore your website from a backup?
  3. What premium backup services are available?

After some digging and over two hours on live chat, here’s what I learned.

Non-premium website backups:

Free auto backupsBackup restorationNotes
HostGatorDaily, Weekly, Monthly$25
GoDaddyRandom intervals$180Restoration is free for Managed WordPress plans
SiteGroundDaily$30Weekly and monthly free backups also available
BluehostDailyFree
iPageDaily$100
DreamHost-Only manual backups available
Last verified: 06/26/2019

Bluehost is the clear winner, with free daily backups and free restorations on all plans.

GoDaddy and iPage take daily backups but charge preposterous fees ($180) for a restoration. They clearly want to force clients to buy their premium backup service.

Which brings us to the next topic. Premium services have the following advantages:

  1. Ability to set your own automatic backup intervals
  2. Free restorations

The disadvantage is clear: They cost money.

Here’s a comparison:

Premium backups (basic plans):

Service nameAnnual price (lowest plan)StorageFile change monitoringFree restoration from backups
iPageWebsite Backup$17Uncapped
HostGatorCodeGuard$241 GB
BluehostCodeGuard$361 GB
GoDaddyWebsite Backup$365 GB
SiteGround----
DreamHost----
Last verified: 06/26/2019

As you can see, some premium services come with additional file change monitoring, which keeps tabs on your website and sends you an e-mail notification if there is an unauthorized change to any of the files on your server.

Note that if a backup would take you over the allotted storage capacity, the backup will not execute. You’ll need to upgrade to a backup plan with more storage or find a different solution.

Verdict: best web service for automated backups

Choose Bluehost. Nothing beats free daily backups and free restorations on all plans.

As far as premium services, most users will not need one unless they require more control over their backup schedule; in which case, iPage offers the best price and uncapped storage capacity.

HostGator users without a Managed WordPress plan should consider going premium, if only for the advantage of having access to free backup restorations.

Why? Because the regular restoration cost at HostGator is $180 with taxes, equivalent to more than seven years of a premium backup subscription with free restorations.

Tip: if automated backups are important to you, please see our list of hosts with free backups and restorations.

9.2 Malware and virus protection

According to a SiteLock report, the average website is attacked over 44 times each day, and over 1 percent of all websites online are infected by malware each week. What can you do to be on the safe(r) side?

Here, again, you’d have the advantage using WordPress, as you can install one of multiple malware detection plugins, such as VaultPress.

This frees you from having to depend on add-on malware scanners offered by hosting companies:

However, if you are not using WordPress, or if you are looking for an extra layer of protection, read on.

Free malware protection:

I was surprised to learn not every host performed routine malware scans for free.

Some only do free scans on request, while others only offer them as a paid service.

Free malware scanning?Scanning frequencyMalware removal if detected?
HostGatorDaily
GoDaddy--
SiteGroundOn demand - contact support
BluehostOn demand - contact support
iPage--
DreamHostOn demand - contact support
Last verified: 06/26/2019

I was also surprised to learn what happens when a free scan detects an infection:

  1. Your website is instantly taken down and you are contacted and asked to remove the malware.
  2. In most cases, your website will not be brought back online unless you use a certified malware removal service and present a cleanup certificate. This can cost $50 – $100.

The only way to avoid these problems- other than installing a WordPress malware detection plugin- is to buy a premium anti-malware package.

You can also check out our hosts with free malware scanning and removal page for a list of providers that will help you get rid of any detected malware.

Premium malware detection:

My goal was to answer the following about each host:

  1. Do they offer premium malware detection?
  2. What’s the price?
  3. What happens when malware is found?

What struck me was that not all malware detection plans come with automated infection removal; some plans only offer detection.

The user is notified by email when malware is detected and it is up to them to fix the issue.

I assume the majority of users wouldn’t be interested in such a plan and would rather pay extra for automated malware clean-up.

As a result, my comparison only includes the cheapest malware detection plans that offer automatic removal. If the cheapest plan overall did not include removal, I skipped it until I found a plan that did.

Cheapest malware detection plans with automatic threat clean-up:

Malware detection softwarePlan nameAnnual priceNotes
HostGatorSiteLockFix Plan$90
GoDaddySucuriEssential$84
SiteGroundSucuriSG Scanner$20Does not include malware removal; none of SiteGround's plans do.
BluehostSiteLockFix$96
iPageSiteLockFix$90
DreamHostProprietary softwareDreamShield$36Does not include malware removal; none of DreamHost's plans do.
Last verified: 06/26/2019

The prices above are for annual plans. Most of the best web hosting providers offer small discounts (5 to 10 percent) if you buy their 2- or 3-year subscription.

Verdict: best web service for malware protection

HostGator is the only company offering free daily malware scans (no free removal). The other hosts either don’t or require you to personally request one by contacting support.

If automated malware removal is a priority, avoid SiteGround and DreamHost. Neither their free nor premium malware plans offer it.

The remaining hosting companies all sell quality malware detection/removal software and offer them at similar pricing.

As a result, I can’t make a definitive recommendation. GoDaddy is a few dollars cheaper than the other options.

9.3 Account anti-theft protection

Malware infections are not the only type of attack that can ruin a webmaster’s day. Malicious third-parties may attempt to hack into your hosting control panel directly, giving them full authority over your website.

By now, everyone (hopefully) knows they should use strong, non-obvious passwords, and to keep those passwords safe and private.

However, in rare and unfortunate situations, this isn’t enough.

To find out how safe each account is, I needed to answer the following questions:

  1. Do hosts offer two-step verification when logging into your server control panel?
  2. Do they lock your account after too many failed login attempts with an incorrect password?

The first one was easy enough. I just asked support. Results.

Hosts with two-step account log-in verification:

Two-factor authenticationAuthentication method
BluehostGoogle Authenticator
GoDaddySMS, Google Authenticator, security key
SiteGroundGoogle Authenticator
DreamHostGoogle Authenticator, security key
iPage
HostGator
Last verified: 06/26/2019

You can enable two-step verification in the “security settings” section of your hosting control panel.

After you’ve enabled it, you’ll need your password, and a one-time security code that you’ll receive via SMS or through the Google Authenticator app.

This makes it impossible for unauthorized third-parties to log into your account, even if they manage to guess or otherwise obtain your password. To log on, they’ll need your cellphone.

9.4 Account restrictions after incorrect log-in attempts

Next, I attempted to log into my hosting accounts using the wrong password to see how long it would take for them to time me out.

HostGator login timeout:

Incorrect login attempts before timeout: 20

Timeout duration: Appears indefinite; my IP address was automatically banned and I was no longer able to load the sign-in page in my browser.

I had to contact customer support and ask them to whitelist my IP.

GoDaddy login timeout:

Incorrect login attempts before timeout: 5

Timeout duration: Five seconds after five failed attempts. After that, each additional unsuccessful login attempt resulted in a 16-second timeout.

After a total of around 20 unsuccessful attempts, I had to wait 50 seconds between additional incorrect login attempts.

SiteGround login timeout:

After over 100 login attempts using an incorrect password, I was still able to instantly log in using the correct passphrase.

I gave it another shot the next day. This time, my account was locked after around 20 incorrect attempts, and I had to contact support to solve the issue.

Why wasn’t I locked out the first time? No clue. I have contacted their support and they are looking into it; I’ll keep pressing the issue until I find a satisfactory answer.

Bluehost login timeout:

Incorrect login attempts before timeout: 5

Timeout duration: Five minutes. After the time was up, I was granted an additional five incorrect password attempts before being timed out for another five minutes.

Seems like a reasonable solution.

iPage login timeout:

Incorrect login attempts before timeout: 5

Things get tricky with iPage. I tried an incorrect password 40 times without getting a timeout message. The only message I was seeing was “incorrect password.”

But then when I tried my correct password, I could not log in. It was still telling me my password was incorrect.

I contacted iPage support about this, and they told me that my IP was blocked. Apparently, their system blocks your IP after five unsuccessful login attempts, but it does not inform you of this.

The only way to remove yourself from the blacklist is to contact support. You will need to answer your security question.

Although I’m sure this is successful at deterring hackers’ password brute force attempts, it would have been nice to see a message informing me to contact support to fix the issue. Not an ideal user experience.

DreamHost login timeout:

Incorrect login attempts before timeout: 50

Timeout duration: My IP was blacklisted, and I saw an error message (shown to the right) when attempting to access the login page. I had to contact DreamHost support to resolve this.

Summary of login timeout policies:

Incorrect login attempts before restrictionsRestriction typeRestriction duration
Bluehost5Login timeout5 minutes
GoDaddy5Login timeout5-50 seconds
iPage5IP blacklistMust contact Support to un-ban your IP
HostGator20IP blacklistMust contact Support to unblock
SiteGround20Account lockdownMust contact Support to unblock
DreamHost50IP blacklistMust contact Support to unblock

Verdict: best web host for account security

Both iPage and SiteGround are lacking. If you have an account with any of these two hosts, be extra careful and use a strong password.

Between the remaining four, Bluehost and GoDaddy performed the best. Both have two-factor login authentication and a login timeout mechanism that does a good job of preventing brute force attacks without confusing the legitimate account owner (like iPage did) in the process.

10. Live chat quality assessment

I tested the queue times for each host three times during early morning hours, and three times during rush hours (between 7 and 9 p.m.).

Live chat availability:

Chat availabilityAverage queue
HostGator24/72-3 minutes
GoDaddy5AM - 6PM MST, Mon-Fri10-60 minutes
SiteGround24/71-2 minutes
Bluehost24/7< 1 minute
iPage24/7< 1 minute
DreamHost5:30AM - 9:30PM PT, all week1-2 minutes
Last verified: 06/26/2019

HostGator live chat review:

During rush hour, the support representative would take more than three minutes between replies, presumably because they were busy serving other clients. I did not experience this issue during morning hours.

Support quality varies, but is generally quite poor. Most representatives are not native speakers and it often shows in their inability to understand questions.

GoDaddy live chat review:

A common GoDaddy live chat queue

Very long queue times most of the day. If you face an emergency situation, you’re better off calling their phone support than waiting for a live chat connection.

Support quality is good and most representatives seem to be native English speakers.

Some representatives prefer to provide links to articles in their Frequently Asked Questions (FAQ) database rather than provide a direct answer. This can be frustrating when you’re asking simple questions that would take no more than a few seconds to answer.

Unfortunately, live chat is not available on weekends, leaving only their toll-free number (866 964 2867) as a means of obtaining support. No e-mail support is available. This was a major inconvenience.

SiteGround live chat review:

Very short queue times.

SiteGround’s support representatives are the friendliest. They are knowledgeable, exceptionally courteous, and go out of their way to help– even if they don’t readily have an answer to your question.

For example, when I asked about the maximum number of failed log-in attempts their system will allow before timing out my account, the support operator manually tested it out by attempting to log into my account multiple times using an incorrect password (after requesting my permission).

Bluehost live chat review:

Short queue times.

Friendly and knowledgeable support team.

iPage live chat review:

Very short queue times.

The quality of support is a bit hit-and-miss. Some representatives weren’t native speakers, leading to minor confusions and forcing me to rephrase some of my questions.

Decent, but may require a little more patience than other live chats.

Also, they try to upsell their customers a little too often. Each time I asked a question about their SiteLock subscription, I was asked to provide my phone number so they could give me a call to talk it through.

When I asked website-specific questions, they would offer me their paid WebsiteBuilder service.

DreamHost live chat review:

Connection times are very fast.

Support representatives are fluent in English and understand the services offered by DreamHost very well.

Their live chat was twice offline at a time when, according to DreamHost’s own timetable, they should have been operational. I was told these were both technical glitches.

Verdict: which web host has the best live chat customer support?

I was most impressed with the chat support I received at SiteGround, with HostGator and Bluehost both tied at a close second place.

GoDaddy does a good job as well, but their long queue times and unavailability on weekends are major cons.

Support phone numbers (just in case):

Toll-free phone support (US)
HostGator866-964-2867
GoDaddy800-505-0685
SiteGround866-605-2484
Bluehost888-401-4678
iPage877-472-4399
DreamHostNo phone number; you can request a callback from the Support page
Last verified: 06/26/2019

11. Free domains, SSL, and website migration

Although freebies aren’t the most imoprtant factors to consider when choosing a host, they are nice to have.

Read on to learn about free domains, SSL certificates, and the price of having your website moved to your new server by an expert.

11.1 Free domain with account registration

Which hosting companies offer a free domain when you open a shared hosting account? How much does it cost to renew after your initial free term is over?

Not all hosting providers offer a free domain, as you can see below.

Domain offering:

Free domain for one year?Standard annual domain price (.com)Notes
HostGator$15
GoDaddy$18
SiteGround$16
Bluehost$16
iPage$17
DreamHost$14Free domain available with Unlimited and DreamPress plans
Last verified: 06/26/2019

The best deal is available at DreamHost, where you get a free domain for one year, followed by the cheapest renewals at $14/year.

Notice that when a free domain is available, it’s only for one year. After that, you’ll need to pay a renewal fee between $14 and $18 per year, depending on the company.

It makes more sense to purchase your domain at Namecheap.com, where a domain costs between $9 and $11 – and point that domain at your hosting server.

Alternatively, you can take advantage of the free domain at your registrar of choice and move the domain to Namecheap (or to another inexpensive registrar) before it expires. This way, you get a free domain and avoid paying your hosting company’s somewhat high renewal fee.

11.2 Free SSL certificates

An SSL certificate encrypts and secures the connection between users and your website. It’s a must-have for any website handling sensitive information (e.g., credit cards, users’ personal data), and probably a good idea for any website owner.

Since 2014, SSL has also become a ranking factor in Google’s algorithm, another reason you should consider having one.

  1. Which hosting companies offer free SSL on their basic plans?
  2. How long is the free certificate for?
  3. What’s the price of an SSL certificate after the free one expires?

Here’s what I found:

Free SSL certificates for basic shared hosting plans:

Free SSL certificate?How long is it freeRegular annual priceNotes
HostGatorLet's EncryptAlways-Enabled by default
GoDaddy-$75Free SSL is available with the Ultimate shared hosting plan
SiteGroundLet's EncryptAlways-Enable it under cPanel -> Let's Encrypt
BluehostLet's EncryptAlways-Enabled by default
iPageLets EncryptAlways-
DreamHostLets EncryptAlways-Enable it under DomainCentral
Last verified: 06/26/2019

HostGator and Bluehost win the day by offering free SSL certificates that are enabled by default as soon as you activate your hosting account.

GoDaddy, unfortunately, does not offer a free certificate with their basic shared hosting plans at all.

11.3 Website migration service

Some hosting companies offer free website migration. They’ll move your website from wherever it was hosted earlier to your new hosting account.

Migrating a website from one server to another is generally easy. Basically, you can:

  1. Use cPanel’s Backup Wizard tool to create and download a copy of your entire website, then use the Backup Wizard restore tool at your new host to upload the website. This only works if your old and new servers both offer cPanel.
  2. If you’re running a WordPress site, use one of multiple plugins to safely move your site.

However, if you prefer experts to handle the migration for you, here’s what you can expect.

Website migration comparison:

Free migrationFree migration is forPremium migration serviceAverage completion time
HostGatorAny websitePrice determined on a case-by-case basis3-7 days
GoDaddyOnly WordPress sites$100 per site2-3 days
SiteGroundOnly for GrowBig and higher plans-$30 per site1-2 days
Bluehost-$150 for up to 5 sites3-5 days
iPage-$150 per site3-5 days
DreamHost-$99 per site1-2 days
Last verified: 06/26/2019

Migration officially takes one to seven days but should usually be completed in less than 48 hours.

HostGator takes the definitive lead, as they are willing to migrate any website (not just a WordPress site) for free.

Good news, though: The sites that do not offer a free migration service are willing to help you manually complete the process through live chat.

12. The best web hosting service provider

SiteGround offers the best server robustness. If quick load times, excellent server uptime, good live chat support, and phenomenal performance under sudden traffic bursts are important to you, you can’t go wrong with them. The quality comes at the cost of lower resource availability, so if you anticipate in excess of 200-400 visitors per day, you should reconsider. SiteGround is also the most expensive of the tested providers in the long term (over 6 years of service).

Bluehost and HostGator are tied on performance and pricing. They both offer free malware scanning and automated website backups. Both offer a very respectable service and you can’t go wrong with either. Bluehost does have slightly better uptimes and 2-Factor authentication on account login, which probably makes them the favorite of the two.

DreamHost was the dark horse in this race. Their servers handled traffic spikes very well, and their uptimes are right up there with the best. They don’t offer free website backups, but they do offer free malware scanning. They are also surprisingly cheap in the long run, coming in at around $230 total for 9 years of single-website hosting – that’s less than 50% of what the second-cheapest quality provider, Bluehost, costs. If you’re looking for quality at the most affordable pricing and don’t mind slightly elevated, but still acceptable, load times, go with DreamHost.

I wouldn’t recommend GoDaddy. They are almost as expensive as SiteGround without offering the same quality. Their servers handle traffic spikes very poorly, dropping connections even at low (5-10) volumes of concurrent visitors. They charge an arm and a leg for restoring websites from their free backups and do not offer free SSL certificates on basic plans. Their live chat is not available on weekends, and during the 13 hours that they are available on each business day, their queue times are frequently longer than 10 minutes and often higher than 30. I see no reason to choose GoDaddy over any of the above alternatives.

Finally, unless you are under an extremely tight budget, avoid iPage at all costs. Their shared servers suffer frequent downtimes, and their website load times are among the worst I’ve ever seen.

Leave a Reply

Your email address will not be published. Required fields are marked *