You found a host with a tempting price tag — $4 a month, unlimited everything — and you almost clicked "sign up." Then you remembered the last time you trusted "unlimited" and your store crawled to a halt during a flash sale. Sound familiar?
Picking hosting for an e-commerce store is a different game from picking hosting for a blog or a portfolio site. Money changes hands on your pages. A two-second delay at checkout can drop conversions by as much as 7%, and a single hour of downtime during a peak sale can erase a whole day's revenue. The stakes are real, and the checklist of things you need to verify before committing is longer than most hosts want you to think about.
This ecommerce hosting requirements checklist walks you through every category that actually matters — with numbers, not just vibes — so you can compare options confidently and sign up with your eyes open.
1. Uptime Guarantee and How It's Enforced
Every host promises "99.9% uptime." Do you know what that actually means in lost minutes per year? 99.9% allows about 8.7 hours of downtime annually. 99.95% cuts that to roughly 4.4 hours. 99.99% — the standard serious e-commerce hosts aim for — is about 52 minutes per year.
Before you sign anything, ask these three questions:
- What is the SLA uptime percentage, in writing? If it's not in the service-level agreement, it's just marketing copy.
- What compensation do you get if they miss it? A credit for one month of hosting is not the same as compensation for $3,000 in lost sales.
- Do they have a public status page? Hosts that publish real-time incident reports (Statuspage.io is common) are more accountable than those that don't.
A quick do-it-today action: Google the host's name plus "outage" or "downtime" and check Twitter/X for the past 30 days. Real operators talk.
2. Performance: Speed Where It Counts
Page speed is not just a nice-to-have. Google uses Core Web Vitals as a ranking signal, and Largest Contentful Paint (LCP) — how fast your main content loads — should be under 2.5 seconds. For product pages with images, that's genuinely hard to hit on cheap shared hosting.
Here's what to look for in the specs:
- Server location options. If 80% of your customers are in the U.S. Midwest and your server is in Frankfurt, you're adding 100–150ms of latency before a single byte loads.
- Built-in CDN or easy CDN integration. A content delivery network caches your static assets (images, CSS, JS) at edge nodes close to your shoppers. Hosts that include a CDN — or make it trivial to plug in Cloudflare — save you a meaningful config headache.
- PHP version and caching support. If you're running WooCommerce, PHP 8.2+ is noticeably faster than 7.4. Object caching via Redis or Memcached can cut database query time by 40–60% on busy stores.
- NVMe or SSD storage. Spinning-disk servers are rare now, but double-check. NVMe is the current gold standard for read/write speed.
Run a free speed test on a host's demo store (many publish one) using PageSpeed Insights or WebPageTest before you commit.
3. Security Requirements You Can't Skip
An e-commerce site handles payment data, customer addresses, and login credentials. That makes it a target. Your host needs to pull its weight on the security side, even if you're using Stripe or PayPal and technically not storing card numbers yourself.
Check these boxes on your ecommerce hosting requirements checklist:
- Free SSL certificate included. This is table stakes in 2024. Let's Encrypt makes it free; any host charging extra for a basic SSL is behind the times. Wildcard SSL or EV SSL may cost extra — that's fine.
- Automatic daily backups with offsite storage. "We back up" is not enough. Ask: how often, how long are backups retained, and are they stored on a separate system from your server? Losing a backup to the same failure that took down your site is a real scenario.
- Web application firewall (WAF). A WAF filters malicious traffic before it hits your server. Cloudflare, Sucuri, and Wordfence (for WordPress) are common options. Some hosts bundle one; others don't.
- Malware scanning and removal. Hosts like Kinsta and SiteGround include automated malware scanning. If yours doesn't, budget for a third-party tool.
- Two-factor authentication on the hosting dashboard. If someone gets into your cPanel or hosting panel, they own your store. 2FA is non-negotiable.
- PCI DSS compliance support. You may not store card data, but if you process payments, your environment needs to meet PCI standards. Ask the host directly: "Are your servers PCI-compliant?" and get the answer in writing.
4. Scalability: Can It Handle Your Best Day?
Here's the scenario nobody plans for until it's too late: you land a feature in a newsletter with 200,000 subscribers, or your TikTok video goes viral at 11 p.m. on a Friday. Traffic spikes 10x in 20 minutes. What happens?
On shared hosting, your site likely crashes or gets throttled. On a properly spec'd plan, it handles it.
Things to verify:
- Can you scale CPU and RAM without migrating? Cloud-based hosts (think AWS, Google Cloud, or managed hosts built on them) let you resize resources in minutes. Traditional cPanel hosts often require a full server migration, which takes hours.
- Is there auto-scaling? Some managed hosts scale automatically when traffic spikes, then scale back down so you're not paying for peak capacity 24/7.
- What are the bandwidth and request limits? "Unlimited bandwidth" plans almost always have a fair-use clause buried in the terms. Find it. A store doing $50K/month in revenue might push 5–10 TB of bandwidth monthly if it's image-heavy.
- What's the max concurrent connection limit? Ask specifically. Some budget hosts cap you at 25 simultaneous PHP workers, which is laughably low for a sale event.
A small example: a candle store I know was on a $12/month shared plan and doing fine at 200 orders/month. They ran a holiday promotion, hit 1,800 orders in 48 hours, and the site went down for 6 hours on the second day. They lost an estimated $4,200 in sales and spent $300 on emergency migration. The upgrade to a $60/month cloud plan would have cost $576 for the year. The math was painful in hindsight.
5. Support Quality and Response Time
When your checkout is broken at 9 p.m. on a Saturday, you don't want to wait until Monday morning. Support quality is one of the most underrated items on any ecommerce hosting requirements checklist.
Here's how to actually test it before you buy:
- Open a pre-sales chat and ask a technical question. Ask something like: "What's your average PHP worker count on the business plan?" If the agent can't answer or gives you a vague non-answer, that's a preview of your support experience.
- Check average response times on Twitter/X. Hosts with good support respond to public complaints quickly. Ones with bad support go quiet.
- Look for 24/7 live chat, not just ticket-based support. Tickets are fine for non-urgent issues. For a down store, you need a human in under 10 minutes.
- Verify phone support exists — and that it's real. Some hosts list a phone number that routes to a voicemail box. Call it before you need it.
Also check: does the host have a knowledge base with WooCommerce, Shopify (self-hosted), or your specific platform? Generic WordPress docs don't always translate to e-commerce troubleshooting.
6. Pricing Transparency and Contract Terms
This one stings a lot of new store owners. The $4/month plan is the introductory rate for a 36-month commitment, paid upfront. The renewal rate is $14/month. That's a real structure used by several major hosts.
Before you pay anything:
- Find the renewal price, not the promo price. It's usually in the fine print or the FAQ. If you can't find it, ask support directly.
- Check the refund policy. A 30-day money-back guarantee is standard. Some hosts prorate refunds; others don't refund domain registration fees.
- Understand what's included vs. add-on. Backup storage, staging environments, email hosting, SSL for multiple domains — these are often sold separately on budget plans.
- Look for no lock-in on your data. You should be able to export your database, files, and email at any time without paying a fee. If a host makes migration out difficult or expensive, that's a red flag.
- Month-to-month option? Paying a slight premium for monthly billing is worth it when you're still evaluating. Lock in the longer term only once you've run the store on that host for 60–90 days.
Your Do-It-Today Checklist Summary
Before you commit to any host, run through these three actions:
- Pull the SLA and find the actual uptime percentage — then calculate what that means in downtime hours per year for your busiest months.
- Run a speed test on the host's demo environment using PageSpeed Insights and confirm server location options match where your customers are.
- Open a pre-sales support chat and ask one specific technical question — the quality of that answer tells you almost everything about what support will feel like at 9 p.m. on a bad day.
You don't need a perfect host. You need a host that's right-sized for where your store is today and has a clear path to scale when you grow. Most sellers who've been burned by bad hosting made the decision in 10 minutes based on price alone. You're already ahead of that by working through a real ecommerce hosting requirements checklist.
Next step: take the six categories above and turn them into a simple spreadsheet. List your top three host candidates down the rows, and score each category 1–3. The highest score wins — and you'll have a paper trail for why you chose it, which matters more than you'd think when you're six months in and reconsidering.
You've got this. The right infrastructure decision made once saves you from making it again under pressure.