Build a WordPress Intranet for Your Team
This guide walks you through creating a private WordPress intranet for your team, giving you a centralized hub for documents, announcements, and collaboration. You’ll learn how to set up WordPress, restrict access, and configure essential plugins, whether you host it on your own server or use a managed provider. No coding experience is required, but you’ll need basic administrative access to your hosting and a domain name.
What You’ll Need
- A domain name (e.g., intranet.yourcompany.com) – you can use a subdomain.
- Web hosting that supports PHP 7.4 or higher and MySQL 5.6+ (shared hosting works for small teams).
- Admin access to your hosting control panel (cPanel, Plesk, or similar).
- An email address for the WordPress admin account.
- Optional: SSL certificate (most hosts offer free Let’s Encrypt).
Step-by-Step
- Install WordPress – In your hosting control panel, find the “WordPressâ€� installer (often under “Softaculousâ€� or “Installatronâ€�). Choose the domain/subdomain you want, set an admin username and password, and complete the installation. If your host doesn’t have an installer, download WordPress from wordpress.org and upload it via FTP, then create a database and run the installation script.
- Set up SSL (recommended) – In your hosting panel, enable the free SSL certificate for your intranet domain. Then, in WordPress admin, go to Settings → General and update the WordPress Address and Site Address to use
https://instead ofhttp://. - Choose a theme – In Appearance → Themes, install a lightweight theme like “Twenty Twenty-Four� or a business theme like “GeneratePress� (free version works). Avoid heavy multipurpose themes that slow down the intranet.
- Install essential plugins – Go to Plugins → Add New and install: “WP Private Content Plus� (or similar) to restrict content, “User Role Editor� to manage permissions, “UpdraftPlus� for backups, and “Limit Login Attempts Reloaded� for security. Activate each after installation.
- Create user roles – Using User Role Editor, customize roles. For example, create an “Employee� role that can view pages and posts but not edit them, and an “Editor� role that can create and edit content. Assign appropriate capabilities (e.g., read, edit_posts, publish_posts).
- Add team members – In Users → Add New, enter each team member’s email and set their role. They will receive an email with a password reset link. For security, do not use a shared account.
- Restrict access to logged-in users – In WP Private Content Plus, set the default visibility to “Logged-in users only.� For individual posts/pages, you can override this. Also, go to Settings → Reading and check “Discourage search engines� to prevent indexing (though your intranet should be private anyway).
- Create your intranet structure – Create pages for “Home,� “Announcements,� “Documents,� “Team Directory,� and “Policies.� Use the block editor to add content. For documents, consider a plugin like “WP File Download� to allow file uploads and downloads.
- Add a navigation menu – In Appearance → Menus, create a menu with links to your key pages, assign it to the primary location, and save. This gives your team a clear navigation.
- Test the intranet – Log out and try to access a page – you should be redirected to the login page. Log in with a test user account and verify that you can see the content and that links work.
- Set up backups – Configure UpdraftPlus to schedule daily backups to cloud storage (e.g., Google Drive, Dropbox). This is crucial for an intranet that holds important company files.
- Announce the launch – Send an email to your team with the URL, login instructions, and a brief guide on how to use the intranet.
Common Mistakes
- Using a public domain without privacy protection – If you use a subdomain like intranet.yourcompany.com, it’s still publicly resolvable. Make sure you have the “discourage search enginesâ€� setting and that content is truly restricted.
- Forgetting to update WordPress and plugins – Regularly update to patch security vulnerabilities. Enable automatic updates for minor releases.
- Giving all users admin access – Only give admin to the IT person. Use editor or author roles for most team members.
- Not setting up backups – An intranet without backups is a disaster waiting to happen. Schedule automatic backups.
- Overcomplicating the design – Intranets should be simple and fast. Avoid adding too many widgets or heavy plugins that slow down the site.
Tips
- Use a subdomain – Instead of a separate domain, use
intranet.yourcompany.com– it’s easier to manage and looks professional. - Enable two-factor authentication – Install a plugin like “Two Factorâ€� to add an extra layer of security for all users.
- Create a content template – For announcements, use a consistent format (title, date, category). This makes it easier to scan.
- Integrate with existing tools – If you use Slack or Microsoft Teams, embed a feed or use a plugin to post updates automatically.
- Keep a simple file structure – Organize documents into folders by department or topic. Use clear naming conventions.
Troubleshooting
- Can’t log in after installation – If you forget your password, use the “Lost your password?â€� link on the login page. If that fails, use phpMyAdmin to reset the password in the
wp_userstable. - Pages show “404� after moving – Go to Settings → Permalinks and click “Save Changes� to refresh the rewrite rules.
- Emails not sending to new users – Your host may block PHP mail. Install an SMTP plugin like “WP Mail SMTP� and configure it with your company email service.
- SSL certificate errors – If the site loads with a warning, ensure the SSL is properly installed and that you’ve updated the site URLs. Use a tool like “Really Simple SSLâ€� to fix mixed content.
- Plugin conflicts – If a plugin causes errors, deactivate all plugins via FTP (rename the plugins folder) and reactivate them one by one to find the culprit.
Frequently Asked Questions
Do I need a separate server for the intranet?
No, you can use shared hosting for small teams (up to 50 users). For larger teams or heavy file storage, consider a VPS or cloud hosting.
Can I use WordPress.com instead of self-hosted?
WordPress.com has limitations on plugins and user roles. For a fully customizable intranet, self-hosted WordPress.org is better.
How do I make sure only my team can access it?
Use a plugin like WP Private Content Plus to restrict all content to logged-in users. Also, set the site to discourage search engines.
Can I integrate single sign-on (SSO) with our Google Workspace?
Yes, you can use plugins like “Nextend Social Login� or “MiniOrange SSO� to allow login with Google credentials.
How often should I back up the intranet?
At least daily, especially if you store important documents. Use UpdraftPlus to automate backups to cloud storage.
Is it safe to use a subdomain like intranet.mycompany.com?
Yes, it’s safe as long as you have SSL and restrict access. The subdomain is publicly resolvable, but the content is protected by login.
Related
Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.