As Google makes the big change to mobile-first indexing, it’s important that your site is ready for the shift. Are you fully prepared?
Let’s start at the beginning.
What Is Mobile-First Indexing?
The mobile-first initiative is an effort to address the growing percentage of mobile-users in today’s search landscape.
Back in March, on their Webmaster Central Blog, Google announced that they are rolling out their mobile-first indexing initiative more broadly which is a big change to how Google crawls and indexes your site. The push is on now and Mobile Indexing is being fully implemented.
What’s Changing about Google’s Rankings?
Per Google, “Mobile-first indexing means Google will predominantly use the mobile version of your websites content for indexing and ranking.”
But what does that mean?
Currently, Google crawls and indexes your site based on the desktop version of your site and the content that exists there. With this change, Google will be looking at your mobile site first and the content on that version to determine how your site is ranked.
Over the course of the last year, Google has been slowly experimenting with a small percentage of sites to make the switch to crawling, indexing, and ultimately ranking sites based on their mobile experience, not their desktop as they always have.
This doesn’t mean your desktop site isn’t important anymore, it just means that they will be looking at it as a secondary source, not the primary one for crawling, indexing, and ranking as it has been in the past. But even if your site is doing well organically, if it’s not responsive (mobile friendly), your ranking will drop substantially. Don’t lose those years of building your search engine position, contact us today.
How Mobile-First Indexing May Impact Your Site
Depending on how you handle mobile, this change may or may not directly affect your site.
If your site is built in responsive design, you will see no impact, as your site adapts to all devices.
If you have a separate m. site (or something similar) and your primary content does not exist on it, then you are at risk of seeing a negative impact as Google will no longer be looking at your desktop version.
If you do not have a mobile site/experience then this change will negatively impact you. Also, it’s 2018: if you don’t have a mobile-friendly site then you have much larger issues that this change.
What Mobile-First Best Practices Can I Follow To Ensure I Maximize My Opportunity?
While there are many things to consider and you should read through the entire list above, two major points are ensuring you have mobile-friendly content and that your site loads as fast as possible. Site speed is becoming an increasingly important ranking factor, which coincides with users’ needs to get everything as quickly and seamlessly as possible. With the rapid adoption of AMP (accelerated mobile pages) and the popularity of Progressive Web Apps (PWA’s) growing, it’s not surprising to see Google pushing site owners in this direction.
How Do I Know If Google is Using Mobile-First Indexing for My Site?
Google will be notifying site owners that their sites are migrating to mobile-first indexing through Search Console. The message will look like this:
So you need to make sure that if you have an m. version of your site, it is verified in Search Console.
You will also see a significant increase in the Smartphone Googlebot crawl rate and Google will show the mobile version of pages in search results and cached pages.
What Do We Think About This?
This is a major change in how Google interacts with our websites and makes sense as more and more traffic continues to move to mobile. While your desktop site will certainly remain important and Google will not be ignoring it, users have been trending towards mobile usage for years and this is the natural progression of our industry.
Companies need to take notice of this change. Thinking mobile-first should not be something that is kicked down the road and moved down on priority lists, from a search perspective this should be top of mind for all organizations large and small.
Should you be concerned? If you haven’t been paying attention to how your site functions on a mobile device, this probably isn’t going to pan out for you. The good news is that all websites are living documents and can be changed and updated. If you are coming in a little late to the game on mobile, then now is the time to improve that experience and ensure your site is set up to provide value to mobile users.
This is yet another banner that Google is waving to signal the importance of your mobile experience. If you have been neglecting it, now is the time to rectify that and putting people and resources behind it.
If you think your site is not mobile friendly or have tested it and know, contact us for advice to bring your website up to speed with the current technologies.
In the wake of Google’s removal of the ‘view image’ button, contributor Anthony Muller polled top news and entertainment sites to share their Google image traffic data. The results? Overwhelmingly positive — image search is back.
These declines were even more drastic for large enterprise-level brands that had spent considerable effort optimizing their image catalogs, content management system (CMS), captions and eXtensible markup language (XML) sitemaps for the search engines.
This decline was due to searchers who clicked “view image” being sent to a page with only the image asset and not to the site hosting or licensing the image when using Google image search.
Getty bites back
Approximately three years after Google added the “view image” button, Getty images filed an anti-competition complaint with the European Commission (EC) against the search giant. The gist of the complaint was that Google was using Getty images in a way that was diverting users from Getty’s website.
Fast forward to February 14, 2018 (Valentine’s Day), and it appears that Google blinked.
Google had reversed their stance and as of February 15, 2018, removed the “view image” button. A message from Google SearchLiaison tweeted confirmation that these changes (view images) came about due to the settlement with Getty Images.
Image SEO rises again
It has been fewer than 90 days since Google made the change, and I was chomping at the bit to see just how immediate the effects would be. I reached out to a number of different properties across different worldwide verticals and asked them to share their Google image traffic data.
The response to my data requests was very positive. Overall, I compiled the percentage increases from 58 different properties worldwide.
These increases were from Google images pre- and post-February 14, 2018. All sites fell into one of three different verticals, entertainment, photography and news, with a large majority being news-oriented. All sites surveyed have significantly large catalogs of images (over 100,000).
Since the only number reported from all sites was a percentage increase in image traffic from Google, it was the only number I could properly find the mean increase for at this time.
The overall data from the 58 different sites, shows an average of a 37 percent increase in clicks from Google image search.
In the image traffic data below, we can see how a single enterprise-sized entertainment site with millions of images spiked for approximately an additional 600,000 visitors from Google images every month. While this was on the higher end of the mean increase, the 47 percent seen below is pretty indicative of how most saw their traffic increase post-Valentine’s Day, with some variations.
Take note of how the impressions and position remain relatively unchanged, while the click-through rate (CTR) and clicks spike:
Some properties were generous enough to go on the record with the increases they have witnessed.
Dylan Howell from Stocksy.com reports on their Google traffic on over 1 million images after the change:
From recent data, we can see that this change greatly improved the rate of viewers visiting our site from these (image) results pages. The number of clicks from these pages to our site increased by over 50 percent from previous levels.
Serban Enache, CEO of Dreamstime, reports that his company’s traffic from Google images increased by approximately 30 percent to their catalog of 75 million images. He added:
We also saw a 10 percent increase in conversions, so this traffic previously downloaded images from Google Images. Since they purchased a commercial license afterwards, we can safely assume their past downloads were copyright infringements.
Both Stocksy and Dreamstime commented that the changes were “positive” for both site owners and photographers. As a content creator and a firsthand witness to the traffic devastation for some clients, I wholeheartedly agree with them.
Some users of image search were surprisingly upset at the change and within a week, Chrome extensions were popping up in the Chrome web store which promised to return the “view image” functionality for those who want it. I don’t quite understand the need for the button, since right-click functionality still exists to open images in a new tab, but I guess I am just old-school.
Can what was lost be fully regained?
If many sites lost 70 percent of their image search traffic in 2013, why aren’t we seeing similar increases? It is anyone’s guess, but could be, in part, from other engines (Bing, DuckDuckGo) still using the “view image” functionality. From Duck Duck Go:
In addition, I have seen a reluctance from many clients to spend resources on image optimization post-2013. They just didn’t feel that the benefit or traffic would be worth the resource cost. This lack of attention or resources placed into image optimization could have stunted the rebound as well.
One thing is for certain. It is time to reprioritize image SEO in-house or for clients taking a lackadaisical approach to optimizing images in the wake of the 2013 Google change. The upside will be far greater for those who are already poised to benefit from the changes.
This is a concise, simple explanation of GDPR brought to you by Syed Balkhi and his Editorial Staff of WordPress experts.
Are you confused by GDPR, and how it will impact your WordPress site? GDPR, short for General Data Protection Regulation, is a European Union law that you have likely heard about. We have received dozens of emails from users asking us to explain GDPR in plain English and share tips on how to make your WordPress site GDPR compliant. In this article, we will explain everything you need to know about GDPR and WordPress (without the complex legal stuff).
Disclaimer: We are not lawyers. Nothing on this website should be considered legal advice.
To help you easily navigate through our ultimate guide to WordPress and GDPR Compliance, we have created a table of content below:
The General Data Protection Regulation (GDPR) is a European Union (EU) law taking effect on May 25, 2018. The goal of GDPR is to give EU citizens control over their personal data and change the data privacy approach of organizations across the world.
Basically after May 25th, 2018, businesses that are not in compliance with GDPR’s requirement can face large fines up to 4% of a company’s annual global revenue OR €20 million (whichever is greater). This is enough reason to cause wide-spread panic among businesses around the world.
This brings us to the big question that you might be thinking about:
Does GDPR apply to my WordPress site?
The answer is YES. It applies to every business, large and small, around the world (not just in the European Union).
If your website has visitors from European Union countries, then this law applies to you.
But don’t panic, this isn’t the end of the world.
While GDPR has the potential to escalate to those high level of fines, it will start with a warning, then a reprimand, then a suspension of data processing, and if you continue to violate the law, then the large fines will hit.
The EU isn’t some evil government that is out to get you. Their goal is to protect consumers, average people like you and me from reckless handling of data / breaches because it’s getting out of control.
The maximum fine part in our opinion is largely to get the attention of large companies like Facebook and Google, so this regulation is NOT ignored. Furthermore, this encourage companies to actually put more emphasis on protecting the rights of people.
Once you understand what is required by GDPR and the spirit of the law, then you will realize that none of this is too crazy. We will also share tools / tips to make your WordPress site GDPR compliant.
What is required under GDPR?
The goal of GDPR is to protect user’s personally identifying information (PII) and hold businesses to a higher standard when it comes to how they collect, store, and use this data.
The personal data includes: name, emails, physical address, IP address, health information, income, etc.
While the GDPR regulation is 200 pages long, here are the most important pillars that you need to know:
Explicit Consent – if you’re collecting personal data from an EU resident, then you must obtain explicit consent that’s specific and unambiguous. In other words, you can’t just send unsolicited emails to people who gave you their business card or filled out your website contact form because they DID NOT opt-in for your marketing newsletter (that’s called SPAM by the way, and you shouldn’t be doing that anyways).
For it to be considered explicit consent, you must require a positive opt-in (i.e no pre-ticked checkbox), contain clear wording (no legalese), and be separate from other terms & conditions.
Rights to Data – you must inform individuals where, why, and how their data is processed / stored. An individual has the right to download their personal data and an individual also has the right to be forgotten meaning they can ask for their data to be deleted.
This will make sure that when you hit Unsubscribe or ask companies to delete your profile, then they actually do that (hmm, go figure). I’m looking at you Zenefits, still waiting for my account to be deleted for 2 years and hoping that you stop sending me spam emails just because I made the mistake of trying out your service.
Breach Notification – organizations must report certain types of data breaches to relevant authorities within 72 hours, unless the breach is considered harmless and poses no risk to individual data. However if a breach is high-risk, then the company MUST also inform individuals who’re impacted right away.
This will hopefully prevent cover-ups like Yahoo that was not revealed until the acquisition.
Data Protection Officers – if you are a public company or process large amounts of personal information, then you must appoint a data protection officer. Again this is not required for small businesses. Consult an attorney if you’re in doubt.
To put it in plain English, GDPR makes sure that businesses can’t go around spamming people by sending emails they didn’t ask for. Businesses can’t sell people’s data without their explicit consent (good luck getting this consent). Businesses have to delete user’s account and unsubscribe them from email lists if the user asks you to do that. Businesses have to report data breaches and overall be better about data protection.
Sounds pretty good, in theory at least.
Ok so now you are probably wondering what do you need to do to make sure that your WordPress site is GDPR compliant.
Well, that really depends on your specific website (more on this later).
Let us start by answering the biggest question that we’ve gotten from users:
Is WordPress GDPR Compliant?
Yes, as of WordPress 4.9.6, the WordPress core software is GDPR compliant. WordPress core team has added several GDPR enhancements to make sure that WordPress is GDPR compliant. It’s important to note that when we talk about WordPress, we’re talking about self-hosted WordPress.org (see the difference: WordPress.com vs WordPress.org).
Having said that, due to the dynamic nature of websites, no single platform, plugin or solution can offer 100% GDPR compliance. The GDPR compliance process will vary based on the type of website you have, what data you store, and how you process data on your site.
Ok, so you might be thinking what does this mean in plain English?
Well, by default WordPress 4.9.6 now comes with the following GDPR enhancement tools:
By default, WordPress used to store the commenters name, email and website as a cookie on the user’s browser. This made it easier for users to leave comments on their favorite blogs because those fields were pre-populated.
Due to GDPR’s consent requirement, WordPress has added the comment consent checkbox. The user can leave a comment without checking this box. All it would mean is that they would have to manually enter their name, email, and website every time they leave a comment.
Data Export and Erase Feature
WordPress offers site owners the ability to comply with GDPR’s data handling requirements and honor user’s request for exporting personal data as well as removal of user’s personal data.
The data handling features can be found under the Tools menu inside WordPress admin.
These three things are enough to make a default WordPress blog GDPR compliant. However, it is very likely that your website has additional features that will also need to be in compliance.
Depending on which WordPress plugins you are using on your website, you would need to act accordingly to make sure that your website is GDPR compliant.
A lot of the best WordPress plugins have already gone ahead and added GDPR enhancement features. Let’s take a look at some of the common areas that you would need to address:
Like most website owners, you’re likely using Google Analytics to get website stats. This means that it is possible that you’re collecting or tracking personal data like IP addresses, user IDs, cookies and other data for behavior profiling. To be GDPR compliant, you need to do one of the following:
Anonymize the data before storage and processing begins
Add an overlay to the site that gives notice of cookies and ask users for consent prior to tracking
Both of these are fairly difficult to do if you’re just pasting Google Analytics code manually on your site. However, if you’re using MonsterInsights, the most popular Google Analytics plugin for WordPress, then you’re in luck.
They have released an EU compliance addon that helps automate the above process. MonsterInsights also has a very good blog post about all you need to know about GDPR and Google Analytics (this is a must read if you’re using Google Analytics on your site).
If you are using a contact form in WordPress, then you may have to add extra transparency measures especially if you’re storing the form entries or using the data for marketing purposes.
Below are the things you might want to consider for making your WordPress forms GDPR compliant:
Get explicit consent from users to store their information.
Get explicit consent from users if you are planning to use their data for marketing purposes (i.e adding them to your email list).
Disable cookies, user-agent, and IP tracking for forms.
Make sure you have a data-processing agreement with your form providers if you are using a SaaS form solution.
Comply with data-deletion requests.
Disable storing all form entries (a bit extreme and not required by GDPR). You probably shouldn’t do this unless you know exactly what you’re doing.
The good part is that if you’re using WordPress plugins like WPForms, Gravity Forms, Ninja Forms, Contact Form 7, etc, then you don’t need a Data Processing Agreement because these plugins DO NOT store your form entries on their site. Your form entries are stored in your WordPress database.
Simply adding a required consent checkbox with clear explanation should be good enough for you to make your WordPress forms GDPR compliant.
WPForms, the contact form plugin we use on WPBeginner, has added several GDPR enhancements to make it easy for you to add a GDPR consent field, disable user cookies, disable user IP collection, and disable entries with a single click.
Email Marketing Opt-in Forms
Similar to contact forms, if you have any email marketing opt-in forms like popups, floating bars, inline-forms, and others, then you need to make sure that you’re collecting explicit consent from users before adding them to your list.
This can be done with either:
Adding a checkbox that user has to click before opt-in
Simply requiring double-opt-in to your email list
Top lead-generation solutions like OptinMonster has added GDPR consent checkboxes and other necessary features to help you make your email opt-in forms compliant. You can read more about the GDPR strategies for marketers on the OptinMonster blog.
OptinMonster – advanced lead generation software that offers clever targeting features to boost conversions while being GDPR compliant.
Shared Counts – instead of loading the default share buttons which add tracking cookies, this plugin load static share buttons while displaying share counts.
We will continue to monitor the plugin ecosystem to see if any other WordPress plugin stands out and offer substantial GDPR compliance features.
Whether you’re ready or not, GDPR will go in effect on May 25, 2018. If your website is not compliant before then, don’t panic. Just continue to work towards compliance and get it done asap.
The likelihood of you getting a fine the day after this rule goes in effect are pretty close to zero because the European Union’s website states that first, you’ll get a warning, then a reprimand and fines are the last step if you fail to comply and knowingly ignore the law.
The EU is not out to get you. They’re doing this to protect user’s data and restore people’s trust in online businesses. As the world goes digital, we need these standards. With the recent data breaches of large companies, it’s important that these standards are adopted globally.
It will be good for all involved. These new rules will help boost consumer confidence and in turn help grow your business.
We hope this article helped you learn about WordPress and GDPR compliance. We will do our best to keep it updated as more information or tools get released.
We are not lawyers. Nothing on this website should be considered legal advice. Due to the dynamic nature of websites, no single plugin or platform can offer 100% legal compliance. When in doubt, it’s best to consult a specialist internet law attorney to determine if you are in compliance with all applicable laws for your jurisdictions and your use cases.
The rules have changed about what good website security means—starting with a new minimum requirement for all website pages to support encrypted connections. The good news is you’ll gain other valuable benefits by adhering to this new standard. First, let’s get on the same page by reviewing a few basics.
When your customers land on a web page that’s not protected by any type of SSL Certificate they’ll see http:// at the beginning of the website address in the browser bar. This used to be perfectly fine unless your webpage involved a login ID, password, form or payments. Enter the era of mega cybercrime.
HTTP has one glaring flaw—it’s not secure. Any information transmitted via an HTTP connection is vulnerable to being tampered with, misused or stolen. Your visitors deserve to know any data they share with you is safe from prying eyes.
Installing an SSL Certificate changes the browser bar address to https:// to clearly show visitors the connection is encrypted, meaning the server is authenticated and data is protected in transit. No wonder web browsers have made HTTPS the new standard for website security.
HTTPS Is Good for Your Bottom Line
Enabling encrypted connections is one great reason to protect your website with an SSL Certificate. But, it’s not the only reason. Here are some other ways HTTPS brings value to your business:
Speeds Up Performance—Being the slow kid on the block and the last one picked for dodgeball is a bummer. Being slow online could cost you everything. HTTP is being replaced by a newer faster version—HTTP/2. Encrypted connections are required to unlock the latest speed and security features.
Increases Search Engine Traffic—Google includes SSL as a ranking factor. How’d you like to boost your search visibility up to 5%? Be found above the competition by encrypting every page of your website.
Enables Mobile Options—Salesforce reports 71% of marketers believe mobile is core to their business. Mobile’s most popular features—geolocation, motion orientation, microphone, fullscreen and camera access—require HTTPS to be enabled by most browsers
Protects Your Brand Reputation—A recent CA Security Council Report shows a mere 2% of customers would proceed past the “Not Secure” warnings that are due to kick in July 1 for all web pages without HTTPS connections. Show visitors your brand values their security by protecting your website with an SSL Certificate.
Delivers a Seamless Experience—Don’t let visitors engage with several pages on your site only to be get broadsided with a “Not Secure” warning on pages you haven’t protected. They’ll reward you for taking the extra steps to give them an end-to-end encrypted experience.
Identity Validation Matters, Too
HTTPS is no longer optional if you want to build relationships and a business online. The good news it adds a lot of value to your business. But, SSL Certificates do more than enable HTTPS. They also authenticate or validate your identity so visitors know it’s really you on the other end of their connection. We’re here to help you find the right level of validation based on your goals.
Click here to learn more and request pricing for the purchase and installation of your SSL Certificate.