Updated October 2026
Quick answer: websites seem to break by themselves because the world around them keeps changing. Browsers update, servers are upgraded, plugins release new versions, third-party services change their rules, and SSL certificates and domains expire. Your site can stop working even if nobody touched it. Regular maintenance, monitoring and backups catch most of these problems before your customers do.
One of the most frustrating parts of owning a website is that it sometimes “breaks” for no obvious reason. Yesterday the contact form was sending enquiries to your sales team; today it isn’t. Last week customers could pay online; this week they can’t. And everyone swears nobody changed anything.
How is that possible? Because a website isn’t a finished object like a brochure. It’s software running in a constantly changing (some would say hostile) environment.
Common reasons websites break by themselves
1. Software updates on the server
Hosts regularly upgrade the software your site runs on: the operating system, web server, database and programming language (such as PHP). These upgrades are essential for security, but older code that isn’t kept up to date can stop working when they happen. See why PHP upgrades matter.
2. Plugin, theme and CMS updates
WordPress and Drupal sites rely on plugins or modules from many different developers. An automatic update to one of them can clash with another, or with your theme. Sometimes a plugin is abandoned and quietly stops working with newer versions of everything else.
3. Browser and device changes
Chrome, Safari, Edge and Firefox update every few weeks, and new phones and operating systems appear every year. A small change in how a browser handles a feature can make part of a site misbehave for some visitors and not others.
4. Changes to third-party services
Most websites depend on outside services: payment gateways, email delivery, maps, social media feeds, booking systems, CRMs and APIs. When one of those services changes its rules, retires an old version or has an outage, the feature on your site that relies on it can break. For example, in 2024 Google and Yahoo tightened their rules for incoming email, and many website forms that sent email without proper authentication suddenly had their messages rejected. See why mail servers reject emails.
5. Things that expire
- SSL certificates: browsers show a scary warning when they lapse.
- Domain names: if a domain isn’t renewed, your website and email stop working. See how to renew and keep your .com.au domain.
- Premium plugin licences and API keys: when they lapse, updates stop or features switch off.
6. Hacking and malware
Out-of-date websites are regularly scanned and attacked by automated bots. A compromised site can redirect visitors, send spam, slow down or be blocked by Google, often without the owner noticing for weeks.
7. Well-meaning changes by users
Modern content management systems give editors a lot of power. A change in one place can have unexpected effects elsewhere. We recommend limiting administrator access to one or two people, and giving everyone else an editor role.
8. Problems at the visitor’s end
Sometimes the website is fine but the visitor’s browser cache, security software, office firewall or internet connection is the problem. Government and corporate networks are often locked down. See why a website can be down for you but not for others.
9. Hardware and hosting failures
Disks fail, servers run out of space and data centres have outages. Good hosting reduces the risk; good backups reduce the damage.
How to stop your website breaking
- Keep everything patched. Apply security updates promptly and other updates regularly, testing larger ones on a staging copy of your site first. Read our guide to WordPress maintenance.
- Monitor the site for downtime, malware and expiring certificates and domains.
- Keep backups off the server, and test that they can be restored.
- Use fewer, well-supported plugins and integrations.
- Make it easy to report problems. A clear, detailed report saves hours of detective work. See what makes a great bug report.
- Plan for end of life. When your CMS or framework version stops receiving security updates, plan an upgrade before it becomes urgent. See when to update your software.
Frequently asked questions
Why did my contact form suddenly stop working?
The most common causes are a change in how email is delivered or authenticated, a plugin update, or a spam-protection service changing. Check your spam folder, then ask your developer to check the form’s email settings and logs.
Can a website break without anyone changing it?
Yes. Browsers, servers, plugins and outside services all change around your site, and certificates and domains expire.
How can I tell if my website has been hacked?
Warning signs include unfamiliar pages or links, redirects to other websites, Google warnings, a sudden drop in traffic, or your host suspending the site. A malware scan will usually confirm it.
Want fewer website surprises?
Itomic’s website security contracts keep WordPress, Drupal and Laravel websites patched against the latest security threats, closing the gaps attackers look for. Talk to us about looking after your site.
