CAll Us: +1 888-999-8231 Submit Ticket

Chrome 62 Will Extend “Not Secure” Warnings To All User Input

Chrome 62 Will Extend 'Not Secure' Warnings To All User Input

Photo by MichaelGaida on Pixabay

From October, Google’s Chrome browser will warn users that all non-HTTPS pages that ask for user input are insecure. If your site has forms that accept user input and doesn’t have an SSL certificate, you may see a reduction in conversions as Chrome users are discouraged from submitting information. Google Chrome has a market share of 64%, according to W3Counter.

HTTP is the protocol used by web browsers to communicate with websites. HTTPS — note the additional “S” at the end — is a secure version of HTTP. HTTPS uses SSL certificates validated by a Certificate Authority to encrypt data as it moves between the browser and the server on which a site is hosted. Data sent over an HTTPS connection cannot be intercepted by third-parties or modified as it traverses the network. HTTPS makes sure that no-one on the network — either the local network or the Internet — can intercept or interfere with data as it travels between the browser and the server.

Until recently, browsers displayed a warning for sites that had obvious security problems. Sites that allowed users to connect with HTTPS were considered secure. Sites without HTTPS were considered neutral — no warnings were displayed. Last year, Google announced a change in the way it viewed the security of web pages: all sites without HTTPS are now considered insecure. The only secure sites are those that have a valid SSL certificate.

Google and other browser developers didn’t immediately begin to flag all non-HTTPS sites as insecure, but they have gradually increased the scope of “Not secure” warnings. Since January, Chrome has displayed “Not secure” warnings for all non-HTTPS pages with credit card or password fields. With the expected release of Google Chrome 62 in October, the range of sites Chrome considers insecure will be extended to unprotected pages that take user input.

Any HTTP page on which users submit data will be considered insecure. That includes email submission forms, comments, and any other page with a form element.

The general trend towards increased security on the web makes sense. A few years ago, implementing HTTPS was beyond the technical capability of many; it was complex, expensive, and easy to get wrong. Today, with the wide availability of free SSL certificates from Certificate Authorities like Let’s Encrypt, setting up HTTPS is a breeze and there’s no real reason not to jump in with both feet.

In addition to pages on which users submit data, Google Chrome will display warnings on all HTTP pages visited in Incognito mode. Incognito mode is intended to keep a user’s browsing private. Pages that are served over HTTP can be viewed by users on the same network, defeating the purpose of browsing with Incognito mode turned on.

Google is likely to continue to increase the scope of “Not secure” warnings. They will eventually be displayed for any web page that is not served over an HTTPS connection.

Posted in:
Security, Webmaster

Source link

What Is An API?

What Is An API?

Photo by pawel blazewicz on Unsplash

The biggest buzz in the WordPress world is the REST API and how it will usher in a new age of freedom, flexibility, and functionality for WordPress users and developers. But the term “REST API” doesn’t mean much to anyone who isn’t a web developer, including most WordPress users. To help WordPress users understand why the REST API is a big deal for the WordPress community, I’d like to take a look at exactly what we mean by API.

First things first, API stands for Application Programming Interface. Knowing that isn’t particularly helpful unless you already know what an API is, so we’ll move swiftly on.

We’re all familiar with applications. Take a look at your phone’s home screen. It’s full of applications. Each application is a self-contained chunk of functionality. A weather application tells you what the weather will be. Your email applications lets you read email.

How does your weather application “know” what the weather will be? In most cases, the application asks a weather service on the internet, which returns the information the app needs to display a forecast. The weather application needs to know exactly what to say to the weather service to get it to send the right information. The weather service will only answer a small set of correctly formatted requests for information.

There’s a sort of contract between the weather app and the weather service: the weather app will respond with information in a format the app can understand if the app makes requests in a format the service can understand. That contract and format is an API.

In short, an API specifies how one piece of software should talk to another, and what responses it can expect. Neither piece of software cares what’s happening inside the other (the implementation). They don’t have to understand each other’s code. As long as the API remains stable, they can communicate.

The WordPress REST API specifies how other software should talk to WordPress and what WordPress will do in response to those requests. An application might use the API to ask WordPress to send a list of blog posts, and WordPress would respond with the blog posts in a format the app can understand.

You can see how useful this is for developers. Before the API, if a developer wanted to build a theme that displays blog posts, they’d have to write code that interfaces with WordPress’ internal code. With the REST API, any application that knows the API can interact with a WordPress site. A theme or front-end app, written in JavaScript or any other language, can ask a WordPress site for content or tell it to perform certain actions, like publishing a post.

The “REST” part of REST API denotes how the API should be interacted with — in the case of REST, requests are sent over HTTP. Each request is a specially formatted web address that WordPress knows how to respond to. REST implies other things too. If you want to deeper understanding of REST APIs, which are used all over the web, take a look at this excellent video.

The WordPress REST API is a standard interface that lets developers write software to use of all the content and user management functionality WordPress provides. Developers can create new themes, plugins, front-ends, back-ends, and applications that use the API, creating exciting opportunities to make the WordPress ecosystems even richer than it is already.

Posted in:
Webmaster, WordPress

Source link

Amazon’s 1-Click Patent Is About To Expire

Amazon's 1-Click Patent Is About To Expire

Photo by Pixabay

This September, Amazon’s US patent on 1-Click payments expires. Once the patent expires, any eCommerce retailer is free to implement 1-Click payments on their store. Amazon applied for the patent in September 1997 and it was granted — in the US — in 1999. Patents last for 20 years, so come September, we’re likely to see a proliferation of 1-Click payment systems on eCommerce stores around the web.

In the 90s, 1-Click payments were thought to confer a sizable competitive advantage. Amazon certainly thought so and made a remarkable investment in court actions to protect its 1-Click exclusivity. Only one other company has the right to use 1-Click payments: Apple licensed the patent from Amazon and that’s why it is able to offer the same slick checkout experience.

It’s worth distinguishing 1-Click payments from one-page checkouts. With 1-Click payments, customers complete the entire checkout process with a single action from anywhere on the site. Credit card information and delivery details are preconfigured.

One-page checkouts, which minimize the information shoppers have to submit when they checkout, reduce friction in the shopping process, but they aren’t frictionless in the way 1-Click payments are.

If you’re anything like me, 1-Click payments can be too frictionless. I’ve accidentally pressed the 1-Click payment button on many occasions, creating orders when I hadn’t quite made up my mind whether to make a purchase. That’s one of the major benefits of 1-Click payment: it removes any interval between a tentative decision and placing an order in which the shopper might change their mind.

Some eCommerce pundits claim the expiry of the 1-Click payment patent will “change the face of eCommerce.” I’m less enthusiastic. When only one retailer has 1-Click, there’s an obvious competitive advantage. When everyone has 1-Click, it becomes part of the everyday eCommerce experience.

I don’t image Jeff Bezos is particularly sad to see the end of his company’s monopoly on 1-Click payments, but there’s no doubt it contributed to Amazon’s dominance in the early years of online retail. Compared to the clunky checkout experiences most eCommerce retailers once offered, 1-Click was an asset.

The availability of 1-Click to every eCommerce retailer will mean that those who choose not to implement frictionless payments will be at a disadvantage. The wide availability of 1-Click payments will also diminish the difference between the experience Amazon can offer and that of smaller eCommerce retailers.

The only fly in the ointment is that 1-Click payments depend on technology that isn’t implemented by all payment processors, namely credit card vaults that allow for the secure storage of credit card data. While support for credit card vaults isn’t ubiquitous, you can bet that most payment processors are on the case and they, along with Magento and Magento extension developers, are working on 1-Click solutions in time for the coming holiday season.

Posted in:
General, News Releases

Source link

Why Do Spammers Attack WordPress Sites?

Why Do Spammers Attack WordPress Sites?

Photo by Ricardo Viana on Unsplash

A WordPress site with web-facing forms will be spammed. If there’s a form to be filled in, it will be filled in by spammers, even when there is no clear motivation for doing so. Spammers register for membership of any site they find, they fill in forms for gated content, they submit fake email addresses that clutter mailing lists, they take surveys, and they bombard comment forms with gibberish and SEO spam.

Spam is more than an annoyance: it skews the data web-based businesses have available to them, lands the site’s domain on email blacklists when it sends mail to people who didn’t sign up, presents a security risk, consumes hosting resources, and makes a mess. All of which takes time and money to deal with.

I’ve discussed spam registrations and random form-filling with many WordPress users, and a common question is why do spammers do it? What benefit does the spammer get from signing up to a membership site or submitting fake addresses to a mailing list? It’s hard to work out from the point of view of site owners because often there is no real benefit to the spammers.

WordPress spammers hope to find sites that let them send spam emails, submit spam comments, publish spam posts, or to join the site as a prelude to a deeper attack. All of this web form spamming is automated. Simple bots scour the web for forms to fill in. It’s not difficult to automate the filling in of web forms: the bots are unsophisticated and the spammers aren’t skilled developers. Because bandwidth is cheap, it’s easier to spam every form than it is to be selective. So, if a form has an email field, they’ll put an email in it, a name field gets a name, and so on.

In many cases, WordPress sites are spammed as a side effect. If the site is properly secured, the spammers don’t gain anything, but they don’t lose anything either, and in the morally challenged mind of the spammer, that means building more sophisticated bots isn’t worth the effort.

All of which is interesting, but it doesn’t help WordPress site owners handle spam. The only way to stop spam data reaching databases is to implement systems that can distinguish between authentic submissions and junk — preferably without asking users to jump through hoops to demonstrate their status as a human being.

The best way to filter out spam today is Google’s most recent iteration of reCaptcha: Invisible reCaptcha. Old versions of reCaptcha asked users to carry out vision-based tasks that were easy for humans and difficult for machines. This system annoyed users and is based on an outdated assumption: in 2017, sophisticated machine vision is accessible, accurate, and inexpensive. Invisible reCaptcha uses a mixture of on-page behavior and data analysis to automatically categorize visitors as bots or humans in a way that is largely transparent to users. If you’re having WordPress spam problems, take a look at the Invisible reCaptcha for WordPress plugin.

Posted in:
Security, WordPress

Source link

How To Use Live Chat To Boost Sales On Your Ecommerce Site

How To Use Live Chat To Boost Sales On Your Ecommerce Site

Photo by Gerd Altmann

Ecommerce is now a part of everyday life. According to a Pew Research report, 79% of Americans shop online. More than 40% make online purchases several times a month, and 15% do so on a weekly basis.

So, getting people to buy online is easy these days…right?

Nope! According to the same report, fully 64% of Americans say that, all things equal, they would rather buy from a physical store. Only 14% would buy online without at least checking the price at a physical location first.

Why the stubborn love for in-store shopping? Here’s a clue: 84% of Americans say that being able to ask questions about a first-time purchase is at least somewhat important. 42% say it’s extremely important.

But that doesn’t mean physical retailers get the last word! There are plenty of tools that will allow you to talk to online shoppers human-to-human, just like you would in a physical store. The most common is live chat.

Live chat (when staffed by a helpful, genuine person) is like the salesperson we all wish worked in every physical store. It’s there when your visitors need it, without being obnoxious or hard to get rid of if they prefer to browse on their own. And for you as a retailer, it’s even better—with live chat transcripts, you always have a record of feedback and a reminder to follow up.

Read on for some tips on making the most of live chat as a sales tool, or head to this page to add learn more about adding Olark Live Chat to your Hostdedi Magento store.

Tip #1: Make live chat available!

Just adding the option to talk to a human in real time can increase conversions among visitors who would otherwise have taken their questions to a competitor’s physical store. The questions you field will also help you improve your store pages—for example, if you receive a lot of chat inquiries about sizing, you might need to add detail to your size chart or make it more visible on your site.

“But if I add a chatbox to my site, doesn’t that mean I need to be available to answer questions all the time?”

That’s one of the most common questions we get here at Olark Live Chat, and the answer is no! Most live chat products, including Olark, offer an easy option to convert your chatbox to an email form when you’re offline. You’ll also be able to limit the number of chats you receive at one time so you don’t get overwhelmed.

If you want to encourage your site visitors to start a conversation about a specific product or service, you could even set the chatbox to appear only on certain pages—or add a click-to-chat button right next to a product listing on your site. For an example, check out how Apple’s chat placement on this page.

Tip #2: Chat proactively.

While many visitors will initiate a chat as soon as they have a question, others need a little nudge or a reminder that a real live human is available to help.

If someone’s been clicking around your site for a while without making a purchase, it’s a good indication that they have unanswered questions or can’t find what they’re looking for. Live chat tools like Olark give you visibility into this kind of visitor behavior pattern, so you can send a proactive chat of the “Hi there! Can I help you find something?” variety.

You can also send automated live chat messages based on particular behaviors. For example, you could trigger an automated message to send to anyone who visits the landing page for a new product, pointing out certain features and inviting questions. If a visitor replies to the automated message, you’ll receive a notification to take over and continue the conversation.

Wondering whether your visitors will answer an unsolicited chat? We did, do—so we did a little analysis, and found that over 30% of proactive chats receive a response from the visitor! For more data on the effectiveness of proactive chat, check out this post on the Olark blog.

Tip #3: Capture leads and follow up.

You may not close every sale in a single chat interaction, and that’s okay! The important thing is to start building a relationship with the visitors you engage through chat.

Try to collect basic information, such as a first name and email address, from everyone you chat with. You can do this by asking visitors to fill out a short survey when they start a chat, or simply by asking politely for their information so you can follow up.

If you use a CRM, such as Salesforce or Hubspot, integrate it with your live chat software so you can attach chat transcripts to customer records. Transcripts are packed with information that will help you tailor sales activities and marketing campaigns. If someone mentions in chat that they’re shopping for a wedding, that they have a five year-old, or that they’re trying to eat healthier, you can make sure they recieve content and product promotions related to their specific circumstances and needs.

Thinking about giving live chat a try? We’d love to help! Start a free two-week trial to get access to all of Olark Live Chat’s premium features and integrations, and be sure to stop by our website if you have questions—we’re available five days a week on chat.

Author

Kate Urban – As Olark’s Story Sherpa, Kate is responsible for shaping and shepherding human-centric stories of sales and support (say that ten times fast). In her free time, she enjoys mountain trails, bear hugs, and chocolate everything.

Posted in:
eCommerce

Source link

Are You Using A Staging Server For WordPress Development?

Are You Using A Staging Server For WordPress Development?

Photo by Andres Moreno

If you run a WordPress site, the following scenario is probably familiar to you. You have what seems like an excellent idea for a change to your site. You log in to the administration dashboard, make some changes, and everything looks good. Then you refresh your site’s homepage to find that instead of the elegantly-designed fast-loading front-end you’re used to, it either doesn’t load at all or loads something that looks like your server has forgotten how to put a web page together.

There’s always a risk of something going wrong when you make changes to a live site. WordPress installations are complex systems with many interacting parts, and it’s hard to predict how a change in one area will affect everything else. Avoiding situations like the one above is why you should consider deploying a staging server.

Why do you need a staging server?

Any time you make a change to a complex system, there’s a chance of unforeseen errors. For WordPress that might be upgrading, installing plugins, making tweaks to themes, changing settings, editing the database, and so on. Ideally, you’d be able to test everything you do on an identical replica of your site, so you can catch any potential disasters before they go live.

Creating a WordPress staging server

Identically replicating a hosting environment and WordPress installation, and syncing changes between the staging server and the production environment can be fraught with complexity, but there are plugins that will make the process more straightforward.

VersionPress

VersionPress, as we’ve discussed before, is a plugin that allows WordPress site owners to version control their sites. Under-the-hood, VersionPress uses Git, the version control system of choice for open source software development.

If you’re not familiar with version control, it’s a technique of storing every change that’s made to a piece of software. Storing changes in this way gives VC users a number of useful capabilities: changes can be rolled back to earlier versions, and, most importantly in the context of staging sites, different sets of changes can be merged together.

With VersionPress, it’s possible to create a copy of the live site to use as a staging or development site, make changes to both the live site and the staging site, and then merge the changes from the staging site back into the live site without losing changes made to either site.

WP Stagecoach

WP Stagecoach is a premium plugin that aims to make it incredibly easy to create a staging site and then merge the changes back into the main site. This plugin is not quite as feature rich as VersionPress, but it isn’t intended to be a full scale version control system. It does one thing and does it very well.

WP Stagecoach

WP Stagecoach will create a staging copy of your site, which can be password protected so that casual web browsers don’t stumble across it. What’s particularly good about WP Stagecoach is that it will allow you to copy changes on the staging server to your live production server. So, if you make a change to the staging installation that you want to push into production, it’s very straightforward. It allows you to choose which changes you import, and you can revert changes if things go awry.

A staging server or installation is an essential tool for anyone serious about publishing or selling on WordPress, and hopefully with the help of these plugins, you’ll have no reason not to use one.

Posted in:
WordPress

Source link

Find Out How Your WordPress Plugin Is Used With Wisdom

Find Out How Your WordPress Plugin Is Used With Wisdom

Photo by Luca Bravo on Unsplash

A few weeks ago we, wrote about a proposal to add data collection facilities to WordPress. The proposal was rejected, but that doesn’t mean the points it made weren’t valid. Collecting data about real-world software use can be valuable to developers. Wisdom is a premium WordPress plugin that allows plugin developers to collect information about how and where their plugin is used.

There’s often a disconnect between software developers and their users. It can be hard for plugin developers — who are WordPress experts — to put themselves in the shoes of the average WordPress user. What seems like a great idea to a developer may get no traction at all with users. Interfaces that seem intuitive to a developer might confuse users. And a developer could waste weeks of time building new features that aren’t used.

Real-world usage data helps developers focus on what matters most to users. But that’s not the only benefit. Armed with detailed information about usage patterns, developers can create user-friendly interfaces that reduce the amount of time they’re required to spend dealing with support requests. For developers with premium plugins or premium tiers, data collected from users can help increase conversions and revenue — if you know what users want, it’s easier to build a business providing features they’ll pay for.

Wisdom makes it easy for developers to collect useful information from sites that install their plugin. Developers simply install a snippet in their plugin files and tracker code on their website. When a plugin user agrees to have their data harvested, the developer will receive a variety of information, including the theme installed on the site, the WordPress version number, and which plugin settings are being used.

The WordPress plugin repository is strict about data collection from users. Plugin developers can’t collect data without getting an opt-in from users. Wisdom includes a two-part opt-in process. Firstly, users can opt in to having general usage data collected. Secondly, they can agree to have their email address collected. Email collection can be useful to developers, but users are often rightly wary of allowing emails to be transmitted to a third-party. Wisdom allows developers to deactivate the email collection opt-in altogether.

If you aren’t using the WordPress plugin repository, it’s possible to disable the opt-in altogether, but I’d advise plugin developers to be open about data collection.

Wisdom isn’t inexpensive, and the range of data it can collect isn’t as a rich as many full-blown analytics solutions, but it’s worth consideration if you want to know more about how your plugin is being used and make evidence-based decisions about future development.

Posted in:
Content, Webmaster, WordPress

Source link

Competing On Price Is Rarely The Best Way To Keep Customers

Competing On Price Is Rarely The Best Way To Keep Customers

Photo by Felix Russell-Saw on Unsplash

Pricing is one of the most difficult decisions to make for eCommerce store owners. Although shoppers aren’t as price sensitive as some like to make out, poor pricing decisions can have a huge impact on revenues. If prices are high compared to the value on offer or the brand perception of the seller, sales will suffer, but in this article I’d like to discuss pricing errors made in the other direction.

It’s tempting to compete on price. If a store sells into a competitive niche, undercutting the competition might seem to be an easy win. But starting a price war or basing your business’s competitive strategy on low pricing puts it on a short road to a difficult place.

Let’s get the exceptions out of the way. There are successful businesses that compete almost entirely on price. They sell the same products other merchants sell, but they sell them cheaper. Their business model is based on being the low-cost leader in a market.

Big retailers like Walmart and Ikea have enough heft that they can put pricing pressure on their suppliers and benefit from economies of scale, but they offer little added value compared to up-market brands. And of course, retailers of commodity goods usually only have price to compete on.

Being the low-cost leader is a difficult business model to sustain unless you have a size advantage. Most smaller eCommerce stores will find it impossible to source products at prices comparable to those afforded to their larger competitors.

And that’s one of the major problems with competing on price. There are two ways to lower prices sustainably in the short term. Reduce profits or reduce costs. Reducing costs means cutting support, staff, wages, marketing budgets, and in many other areas that contribute to the growth of a business and the loyalty of its customers.

If you adopt low price as your strategy, then your business must be continually focused on lowering and controlling costs–like Walmart. You are attracting the price buyers, customers who are not loyal, but are looking for the lowest price. Once a competitor figures out how to sell a similar product for less, they will charge lower prices and you will struggle.

Mark Stiving

A key point to consider here is that if you can charge less, so can your competitor. If you have larger competitors in the same space, they may be able to afford to cut costs to the point at which they’re making a loss just to drive your customers to their store — and these are customers that have little loyalty because you won’t be able to invest in areas of your business that cultivate loyalty.

None of which is to say that promotions are a bad idea or that temporary price reductions to bring new customers to your store are harmful. They aren’t. But it is harmful to your business if you lean too heavily on price as a competitive advantage.

Many companies manage to thrive in spite of charging more than the competition, sometimes much more. How do they do it? By investing in branding and customer service processes that increase actual and perceived value. Shoppers are loyal to retailers that make them feel good about their purchases and valued as a customer — all of which costs the retailer. But if you have to choose between knocking a few cents off the cost of your products and investing in better customer service, I’d advise adding value before cutting prices almost every time.

Posted in:
eCommerce

Source link

How Two-Factor Authentication Can Help Keep Your WordPress Site Safe

How Two-Factor Authentication Can Help Keep Your WordPress Site Safe

Image by RLJ Photography NYC

There are lots of hacked WordPress sites on the web. Hacked sites are often the victims of botnets that brute force the login process, trying lots of different combinations of usernames and passwords until they hit one that lets them in. After they have access they can plant malware or other undesirable content on a site.

The success of this sort of attack has almost nothing to do with the security of WordPress itself and everything to do with the behavior of WordPress users. In principle, username and password combinations are a very safe way of securing a site. In practice, people don’t understand how to use passwords properly and value convenience over security. If they can get away with having “pa55word” or an equally guessable combination as their password, many will.

We can rail against this sort of complacency all we like, but as responsible site owners we just have to accept lax password security as a part of the landscape. Education helps, but not much; we need to implement other mechanisms for ensuring that our sites don’t fall when the botnets come knocking.

Usernames and passwords work because the number of possible combinations is enormous. For a sufficiently long, complex, and random password, it would take even the most powerful computer many years to hit on the right combination. For a sufficiently simple password, it can take fractions of a second. If users aren’t willing to use random and complex passwords, the solution is to implement another verification mechanism — a second factor – that will ensure the chances of guessing a valid combination remain remote.

There are various ways of implementing two-factor authentication — biometrics such as fingerprinting are one, but that’s more complex to implement than the method I’m about to suggest, one-time passcodes.

Unlike a password, a one-time passcode works for a short amount of time, usually about 30 seconds. The TFA service and the user share a secret — frequently a long string of numbers — which is used in combination with the time to create a unique passcode known to the TFA service and the user without it ever having to be communicated between them. It’s much safer than using passwords alone and because the choice of passcode isn’t up to the user, they can’t circumvent security by using an easily guessable combination.

The typical scenario would go as follows: the user wants to log in to your WordPress site. They enter their username and password, after which they are asked for a further passcode. They will have an application from the TFA service provider installed on their smartphone or a dedicated device, which will generate a passcode that can only be used for a short time. When they enter the passcode correctly, they are logged in.

There are a several good TFA services that integrate well with WordPress, but I’m going to suggest you take a look at two: Duo Security and Authy 2FA.

If you run a multi-user WordPress site, particularly if you have several admin users, implementing two-factor authentication will make it almost impossible for casual brute-force attackers to successfully breach your site. It’s well worth the minimal effort to avoid the risk of becoming a vector for malware or a hacker’s playground.

Posted in:
Security, WordPress

Source link

A Holiday eCommerce Winning Combination

Site Performance and Optimization: A Holiday eCommerce Winning Combination Increasing eCommmerce conversion rate is important any time of the year, but especially during the two months of the traditional holiday online shopping season, when competition is fierce and many companies are willing to undercut margins to win customers. With holiday promotions starting earlier and earlier each year, running deep discounts for close to 25 percent of the year can seriously affect your profit, loss and margins; not to mention constant percent off promotions can exhaust customers already inundated with marketing offers.

Magento Business Intelligence research found that merchants can acquire up to 59 percent more new customers during the holidays, compared to post-holiday and the rest of the year, but a site that is not performing at its peak will never attain these impressive numbers.

So, what can you do? Here’s holiday health tips from the eCommerce team at Web Solutions NYC to get your online store in top-tier shape and make the customer journey as seamless as possible, potentially conversion and driving additional sales.

Data-driven Decisions

It’s hard to pinpoint a perfect conversion rate across-the-board for online merchants. For example, you’d expect a B2B medical supply site to have a lower conversion rate than a fast-fashion site. Checking your conversion trends year-over-year (YoY) can help you pinpoint the lift you want to see in sales, conversion and average order volume. While digging through your goldmine of data, be sure to be on the lookout for Key Performance Indicators (KPIs) that are decreasing or any blips on the radar. Decreasing performance or conversion could signal potential bottlenecks or issues in your site that have gone undetected. Some of the KPIs to check for anomalies are:

Bounce Rate: The number of visitors that exit your site after visiting only one page. An increase in site bounces could signal that your site is running slower than the norm, causing customers that are used to lightning-fast websites to migrate off the site before it loads. An optimal site load time is 1-3 seconds, anything above that could be causing a loss in potential customers.

It could also signal a user experience that could use some work. If a customer is confused by the homepage set-up, they will more often than not exit the site before spending time to figure out your UX.

Customer Source and Conversion: Looking at where your customers are coming from: tablet, desktop or mobile, can deliver key insights on whether there is room for optimization across your selling channels. If there is significantly less customer conversion on one selling channel versus another, self-check for speed, design, broken pages and other issues that could be causing customers to not complete a transaction. You can expect a bit less conversion on smartphones versus desktop traditionally, but if the gap increasing YoY, you may need to evaluate your omnichannel design or strategy.

Don’t Set a Goal without a Plan

Anticipating the spike in traffic pre-holiday can ensure that there is no need to deploy a site-fail emergency plan, or lose profits because of a lagging site that cannot handle the traffic and capacity of many customers buying from your site at once.

As a merchant selling during holiday, your web store is your lifeblood. Operationally, your server and eCommerce platform should be able to scale and accommodate load spikes on Black Friday, Cyber Monday and “Green Monday;” these are key times your site should be running at the same performance levels as the rest of the year. A non-functional site is a customer service nightmare and can cause lost revenue, and the loss of loyal customers post-holiday. Here are a few items to self-audit now, or work with a partner to audit, to eliminate operational roadblocks during holiday:

  • Review of all added Modules, Widgets and Extensions
  • Review of Server Performance and Function
  • Review of Security Patches and Upgrades
  • Review of Customizations
  • Review of Server architecture and Logs
  • Review of Front-end Work
  • Review of Site Speed
  • Clean-up of Old and Outdated Pages and Promotional Codes
  • Start Sooner

A scalable and agile approach is crucial to optimizing your holiday performance plan, being well informed of analytics and identifying potential issues well before holiday is on any consumer’s mind should begin in summer and early fall. Schedule a site audit with Magento Enterprise Solutions Partner Web Solutions NYC or a server test with Hostdedi to help identify potential issues and eschew the holiday hang-ups that can kill eCommerce revenue.

Guest Author: Karah Finan is the Marketing Manager for Web Solutions NYC, a Magento Commerce Solutions Partner and Magento 2-trained solutions provider. Karah has over five years in eCommerce, and a decades-long interest in technology, and she’s passionate about disruption and innovation in the online landscape.

Posted in:
eCommerce, Webmaster

Source link