Setting up InMotion Hosting goes fast if you take the steps in the right order and know that the account has two separate panels (AMP for billing, cPanel for the website itself) that beginners often confuse. Skipping the domain configuration before installing WordPress forces you to redo the install, and installing WordPress before AutoSSL provisions means visitors hit a security warning the first time they load the site. This walkthrough is the order that avoids the reworks, the phone verification wait, and the DNS gotchas that catch most first-time InMotion signups.
What You Need Before You Start
Three things make the setup smooth. An InMotion plan that fits the site (Core for a single hobby site, Launch for multiple domains, Power for anything that needs NVMe SSD and the faster UltraStack tier, Pro for WooCommerce or higher-traffic WordPress). A domain name, either registered through InMotion or at a separate registrar like Cloudflare, Porkbun, or Namecheap. A phone number that can accept a verification call in the next hour, because InMotion requires phone verification for new customers before the account activates. For the broader plan comparison and pricing math, the InMotion Hosting guide covers the renewal math and which tier fits which use case.
Step 1: Complete Signup and Phone Verification
Pick your plan on the InMotion Hosting plans page, then choose a term length. Intro pricing scales with term length: 12 months gets the smallest discount, 24 months gets the biggest cut. A 12-month term is the safest first commitment because it locks the intro rate without betting two years on a host you have not used yet, and InMotion's 90-day money-back guarantee still gives you three months to test the fit.
During checkout, decline the recommended domain if you already have one, and decline the site-builder and priority-support add-ons unless you actively need them. After payment, InMotion places most new accounts on a fraud-prevention hold that requires phone verification. You will receive an email with a phone number to call, or a callback within 15 to 60 minutes. International signups can take longer, sometimes several hours. The account does not activate and cPanel does not provision until verification completes, so make the call from the phone number that matches your billing address to avoid a second round of checks.
Step 2: Log In to AMP and Orient the Two Panels
InMotion has two control panels and they do different jobs. AMP (Account Management Panel) is where you manage billing, add or remove domains, request migrations, upgrade or downgrade plans, and open support tickets. cPanel is where you actually configure the website: file manager, databases, email accounts, SSL, and one-click WordPress installs. AMP lives at amp.inmotionhosting.com and cPanel lives at a per-account URL that AMP links to.
Log in to AMP first using the credentials from your welcome email. Confirm that your primary domain is listed and that the account status shows Active. From the AMP dashboard, click the cPanel button next to your hosting package to open cPanel in a new tab. You will bounce between these two panels for the rest of the setup, so keep both tabs open.
Step 3: Add or Connect Your Domain
If you registered the domain through InMotion, it is already attached to your account and cPanel is already configured to serve it. Skip to the next step.
If your domain is registered elsewhere, you have two paths. The simplest is to change the nameservers at your registrar to point at InMotion, which hands full DNS control to InMotion. The nameserver values depend on which data center your account is provisioned on:
- East Coast (Ashburn, Virginia): ns.inmotionhosting.com and ns2.inmotionhosting.com
- West Coast (Los Angeles): ns1.inmotionhosting.com and ns2.inmotionhosting.com
Your welcome email lists the exact nameservers assigned to your account; use those values, not a generic pair. Log in to your registrar, edit the domain's nameservers, save, and wait for propagation (usually 15 minutes to 4 hours, up to 24 hours in rare cases). The alternative is to keep DNS at your registrar and only point an A record at InMotion's server IP, which is useful if you want Cloudflare or another DNS provider in front. AMP shows the server IP under Hosting Overview.
Step 4: Enable Free AutoSSL
InMotion includes Free AutoSSL on every plan, provisioned automatically through Let's Encrypt and set to auto-renew every 90 days. In most cases the certificate installs itself within an hour of the domain being added, but the trigger is DNS resolution: AutoSSL cannot verify domain ownership until your domain resolves to the InMotion server.
Open cPanel, scroll to the Security section, and click SSL/TLS Status. If your domain shows a green padlock, the certificate is already installed. If it shows red or "Not Installed", check that your nameservers or A record are pointing at InMotion (Step 3), then click Run AutoSSL to trigger provisioning manually. Provisioning normally completes in 5 to 15 minutes once DNS has propagated.
Once the certificate installs, force HTTPS by editing the .htaccess file in the public_html directory (File Manager > public_html > .htaccess) and adding a mod_rewrite block that turns on the rewrite engine, matches every request where HTTPS is off, and 301-redirects to the same host and URI over HTTPS. The three-line block is documented in InMotion's knowledge base and drops directly into the top of .htaccess without modification.
Step 5: Install WordPress
InMotion offers three WordPress install paths in cPanel, and the right one depends on how much control you want and which plan you are on.
- Softaculous (recommended): cPanel > Softaculous Apps Installer > WordPress > Install Now. Takes 3 to 5 minutes, installs a clean copy of WordPress with only the plugins you select, and gives you full control over the site name, admin username, and database prefix. This is the right choice for most sites.
- WordPress Manager by Softaculous: cPanel > WordPress Manager. Same underlying install as Softaculous but managed through a dedicated dashboard that also handles automatic updates, staging clones, and one-click backup/restore. Better if you plan to run several WordPress sites on the same account.
- BoldGrid: cPanel > Softaculous > BoldGrid. InMotion's bundled page builder built on top of WordPress. Skip this unless you actively want the drag-and-drop editor; it adds four preinstalled plugins that most users end up removing.
During the Softaculous install, choose "In Directory" as blank (installs at your root domain, not in a subfolder), set the admin username to something other than "admin" (default usernames are the first target for brute force attacks), set a 16+ character admin password, and enable Limit Login Attempts under the Advanced Options if the choice is offered. Uncheck any BoldGrid or theme extras unless you want them.
Step 6: Configure WordPress Basics
Log in to /wp-admin at the URL Softaculous shows you. Under Settings > General, set the site title, timezone, date format, and week start day. Under Settings > Permalinks, switch from the default query-string style to "Post name"; the default is bad for SEO and changing it after publish breaks every inbound link to your posts. Under Settings > Reading, uncheck "Discourage search engines from indexing this site" once you are ready for launch.
Delete the default "Hello world!" post and the "Sample Page" page (Posts and Pages, then Move to Trash, then Empty Trash) so they cannot get indexed. Delete the Hello Dolly and Akismet Anti-Spam plugins if you do not use them, and delete every default theme except the one you plan to use. Fewer inactive plugins and themes means fewer things to update and fewer attack surfaces.
Step 7: First-Week Security Checklist
WordPress on InMotion is secure by default but most attacks target lazy configurations rather than exploits. Six changes close the common doors.
- Use a 16+ character admin password stored in a password manager, never emailed or reused.
- Enable two-factor authentication on your AMP account under AMP > My Account > Security. This protects the panel that controls every site and domain on your account.
- Install Wordfence, Solid Security, or Limit Login Attempts Reloaded to throttle brute force attempts at /wp-admin.
- Change the WordPress admin username away from "admin" if Softaculous defaulted to it. Create a new admin user, log in as the new user, delete the old admin.
- Disable XML-RPC unless you actively use the Jetpack app. XML-RPC is the most common WordPress attack surface and most sites do not need it enabled.
- Enable Sucuri or the InMotion Malware Protection add-on for weekly scans. InMotion bundles a basic Sucuri layer on WordPress-optimized plans; you can also install the free Sucuri Security plugin regardless of plan.
Step 8: Set Up Backups
InMotion runs its own server-level backups (Backup Manager in cPanel) but does not guarantee restoration timing, so an independent backup is worth the 5 minutes. Install UpdraftPlus from Plugins > Add New, activate it, then go to Settings > UpdraftPlus > Settings and set a daily backup schedule for both files and database. Point the remote destination at Google Drive, Dropbox, or Amazon S3 (Google Drive is free up to 15 GB and takes two clicks to authorize).
Test the restore path now while the site is empty. Restoring from a backup is the worst time to discover that the backup did not actually capture your database, so run one manual backup, download the archive, then trigger a test restore to confirm the workflow works.
Step 9: Connect Search Console and Analytics
Add your site to Google Search Console and verify ownership through the DNS TXT record method (cPanel > Zone Editor > Add Record > TXT). Submit an XML sitemap once WordPress generates one (Yoast SEO or Rank Math do this automatically after install). Add Google Analytics 4 through Site Kit by Google or directly through your SEO plugin.
Do this on day one, even if you are pre-launch. Search Console needs weeks to accumulate signal, and you want the data flowing as soon as the site has real content.
Common Setup Problems and Fixes
First-time InMotion setup goes smoothly most of the time. When it does not, these are the six issues that come up most often.
- Phone verification stalls past 60 minutes. If the callback never arrives, open AMP > Support > Live Chat and ask an agent to trigger verification manually. International customers sometimes need to email support with a copy of the payment card and an ID; the process is annoying but usually completes within 24 hours.
- cPanel login shows "Access Denied" from AMP. This usually means the SSO token expired between the two panels. Log out of both, clear cookies for inmotionhosting.com, log back in to AMP, and click the cPanel button again. If it still fails, cPanel provisioning may not be complete yet; check AMP > Hosting Overview for the current status.
- AutoSSL shows "Not Installed" or the SSL/TLS Status page shows a red padlock. AutoSSL requires DNS to resolve to InMotion's server before it can verify ownership. If you changed nameservers less than 4 hours ago, wait for propagation and try again. If propagation is complete but AutoSSL still fails, open cPanel > SSL/TLS Status and click Run AutoSSL to trigger provisioning manually.
- Site shows "This domain is not configured" or an InMotion parking page after WordPress install. Your DNS is not pointing at InMotion yet. Either wait for nameserver propagation, or use the temporary URL (yourdomain.com.inmotionhosting.com format) to confirm the install is working while DNS catches up.
- WordPress shows "Error establishing a database connection." The wp-config.php credentials do not match the database Softaculous created. Open cPanel > MySQL Databases, find the database, reset the user password, then update the DB_PASSWORD value in wp-config.php via File Manager (public_html > wp-config.php).
- Emails from WordPress (contact forms, WooCommerce order confirmations) go to spam or do not arrive. InMotion sends outgoing PHP mail from the shared server IP, which most email providers flag. Configure SPF and DKIM records in cPanel > Zone Editor, and install WP Mail SMTP with authentication through Gmail, Amazon SES, or SendGrid for reliable delivery.
What to Do Next
With the site set up, the next decisions are content, design, and traffic. For the full picture of what InMotion does well and where it falls short, the InMotion review covers real TTFB numbers, uptime data, and support response times against Bluehost, Hostinger, and Cloudways. For the plan-by-plan trade-offs and how the renewal math actually works, see the InMotion Hosting guide. If the site needs to be fast for international visitors, the InMotion Content Delivery Network add-on (about $6 per month) puts cached copies of your static assets on edge servers worldwide; Cloudflare's free tier does the same job at zero cost if you are comfortable managing DNS externally.
