Creative Passion

Why your website needs to be mobile-first – not just mobile-friendly

Creative Passion — Wed, 15 Oct 2025 02:26:31 +0000

For years, having a “mobile-friendly” website was enough – meaning your site layout would adjust to suit smaller screens like phones and tablets. That was fine when most people browsed on desktops, but today, mobile-first design isn’t just a nice extra – it’s essential for user experience and Google search rankings.

Mobile-first vs Mobile-friendly

A traditional mobile-friendly website is designed for desktop, and then adjusted for smaller screens – resizing fonts, reducing images, and stacking elements vertically.

Mobile-first design turns this upside down: it’s designed for smartphones first – fast, simple and clear – and then enhanced for tablets and desktops. In other words, you start with the essentials (content, speed, clarity), and then layer-on extra design features for larger screens.

The result is cleaner code, faster load times, and a layout that feels natural on the device most people use.

Why Google now prioritises mobile-first sites

Google prioritises mobile-first sites because most people now browse the web on their phones. To give users the best possible experience, Google wants to rank websites that load quickly, are easy to read, and work smoothly on smaller screens.

To support this, Google now uses the mobile version of your website as the primary version for indexing and ranking. If the mobile version is slow, hard to navigate, or missing content, Google will assume the page offers a poorer experience – and rank it lower.

Why it matters for real people (not just Google)

Mobile-first isn’t just about search engines – it’s about the needs of the people who actually browse.

A mobile-first site ensures:

Faster load times, even on slower connections
Larger tap targets for buttons and links
Readable text without zooming
Simple, clutter-free navigation
Optimised images that reduce data use

All of this adds up to a better overall experience – and happier users stay longer, engage more, and are more likely to become customers.

Does my site need a mobile-first update?

If your website was built more than a few years ago, it’s probably mobile-friendly but not truly mobile-first. You can check a few simple things:

Does the site load quickly on a smartphone?
Is all your desktop content visible on mobile?
Do fonts and buttons resize without zooming?
Is the design clean and easy to read on small screens?

If not, it may be time to consider an update. Moving to mobile-first doesn’t necessarily mean starting from scratch – it may just involve reworking styles, layout and performance to prioritise mobile users.

The payoff: better rankings, faster site, happier visitors

By switching to mobile-first, you’re aligning your website with how users and Google view it. It’s one of the simplest ways to:

Improve search visibility (SEO) – Google is more likely to rank your site higher if the mobile version loads quickly and is easy to use.
Lower bounce rates – visitors stay longer when pages load quickly, are easy to use, and stay stable while loading.
Create a better experience – when your site feels smooth and clear, people are more likely to take action.

Need help assessing your website?

If you’re unsure whether your current site is genuinely mobile-first, we can run a quick mobile performance check. You’ll get a clear picture of what’s working, what could be improved – often without a full redesign.

Let’s help both Google and your visitors love your website on mobile. Call 3366 8166 or contact us to book a quick review or mobile-first update — it’s one of the most effective improvements you can make for both users and search engines.

The post Why your website needs to be mobile-first – not just mobile-friendly appeared first on Creative Passion.

Important password security tips

Creative Passion — Tue, 27 May 2025 23:34:01 +0000

Password attacks are the most common ways personal and business data is compromised. Follow these password protection tips to strengthen your security:

Don’t:

Write passwords down on paper or sticky notes
Use personal details (e.g., pet names, family names, birthdates) in passwords
Reuse the same password across multiple accounts or systems
Share passwords over unsecured channels like plain email or messaging

Always:

Use unique passwords for each app, website or system
Be cautious of unsolicited email links – they could be phishing attempts
Create strong passwords with a mix of uppercase and lowercase letters, numbers, and special characters
Use encrypted methods if you absolutely must email or message a password – but never include usernames or system details
Regularly review and update passwords, especially for critical systems

Where possible:

Avoid emailing passwords altogether
Use a password generator for stronger, unpredictable passwords
Store passwords in a secure password manager or vault
Enable multi-factor authentication (e.g., one-time codes, biometrics, or authentication apps)
Use passkeys or passwordless authentication instead of traditional passwords
Assign individual accounts to every staff member (no shared logins)
Audit user access periodically and revoke access when no longer needed

Ensure your website and systems:

Implement rate limiting and CAPTCHA to prevent brute-force login attempts
Detect and lock accounts after repeated failed login attempts
Monitor and block suspicious IP addresses to prevent unauthorised access
Immediately disable compromised accounts to limit damage
Require users to change weak or simple passwords

Protect what you love online. Call 3366 8166 or contact us for expert help keeping your WordPress site safe.

The post Important password security tips appeared first on Creative Passion.

Easily collate, standardise & add bibliography to Word, InDesign or WordPress

Creative Passion — Sat, 22 Mar 2025 06:09:41 +0000

Collating, standardising and adding bibliographies can be time-consuming. And when you have pages and pages of references, the last thing you want to do is manually fix the formatting.

Watch our video for practical tips to do it quickly and accurately – and then import your bibliography into Word, InDesign or WordPress.

When clients send mixed-format references (for example, full first names vs initials), manually tidying a long bibliography is painful. The quickest way to collate and standardise citations is to use BibGuru (bibguru.com) – paste a DOI or URL, click Add, choose your citation style, then copy the formatted bibliography.

Microsoft Word (keeps italics automatically)

Go to bibguru.com > Get started
Paste a DOI or URL > click Add
If it’s not found, use Search (title, author, ISBN) or More to add books, chapters, etc
Choose your citation style (APA, MLA, Chicago, etc)
Click Copy to copy the formatted bibliography
Paste into Word – italics come through correctly
Save the file as a .docx if you’ll place the list into InDesign later

Tip: The free version shows ads, but the output copies fine.

Adobe InDesign (retain italics via Place)

First paste the BibGuru bibliography into Word and save as .docx
In InDesign, go File > Place… and select the .docx
In Import Options, enable the text style options you prefer (for example, preserve styles and formatting)
Click into your text frame to place – italics are preserved

If you paste directly from the browser into InDesign, italics are likely to be lost; placing a .docx keeps them.

WordPress (paste in Visual mode)

Click into the post or page editor and switch to Visual (not Text/HTML) mode
Paste the copied BibGuru bibliography
WordPress imports italics as proper emphasis – no extra cleanup required
Update or preview the page to confirm headings, spacing and lists look right

Troubleshooting:

If a DOI doesn’t return the right record, try the article title or author in Search, or add via More > specific source type
After pasting, spot-check capitalisation and punctuation per your house style

Need help making your reports, white papers or research more consistent? Call 3366 8166 or contact us today — we’d love to help streamline your workflow.

The post Easily collate, standardise & add bibliography to Word, InDesign or WordPress appeared first on Creative Passion.

WordPress security vulnerabilities

Creative Passion — Thu, 13 Jan 2022 02:46:00 +0000

WordPress regularly releases security patches to prevent attackers exploiting vulnerabilities such as SQL injection, object injection and stored cross-site scripting.

Most WordPress sites have automatic short-cycle core updates enabled, and will receive these patches automatically — but it’s still possible for some websites to miss them if automatic updates are disabled.

As a general rule, we recommend:

Automatic short-cycle WordPress core updates (this is vital nowadays)
Against automatic major WordPress core updates
Against automatic plugin auto-updates
Regular WordPress maintenance

If you’re unsure, contact your web developer ASAP to prevent current and future exploits.

Regular WordPress maintenance can’t prevent every issue — but it greatly reduces risk and helps your site recover faster when problems occur.

Keep your website safe, fast and reliable with proactive care.

Call 3366 8166 or contact us today to discuss your maintenance needs.

The post WordPress security vulnerabilities appeared first on Creative Passion.

Who owns copyright of my brand logo, graphics, copy and photos?

Creative Passion — Thu, 16 Sep 2021 07:59:02 +0000

When you commission creative work – a logo, website, brochure, photoshoot or copywriting – it’s easy to assume you automatically own it because you paid for it. Unfortunately, that’s not always true.

In Australia, the creator automatically owns the copyright unless there’s a written agreement saying otherwise. So you need to talk to your designer, photographer, copywriter or illustrator about copyright before the project starts – and make sure it’s in writing.

Some professionals assign copyright to you automatically as part of their contract. Others license the work for limited use – for example, a one-off print run, or use on your website only. Some charge extra to transfer full ownership. It’s worth asking, because it affects what you can (and can’t) do with the work later.

Does copyright protect my logo, product name or business name?

Copyright is automatic in Australia, but it only protects original creative expression – not ideas, names, or simple shapes.

That means copyright can protect:

Your logo design, business name and product names (if they’re unique and artistic work)
Your marketing copy or taglines (as literary works)
Photographs and illustrations
Music, video, and website content

But it won’t protect a business name, product name or slogan on its own. Someone could still create a different logo with a similar concept, or a business name that sounds like yours, without breaching copyright – if their work was created independently.

For more detail, visit the Australian Copyright Council.

Are your brand assets protected?

Trademark design is worthwhile when investing in a great logo and identity — and the next step is protecting it properly.

Trademark registration goes further than copyright – it can protect:

Business and product names
Logos, taglines and symbols
Distinctive packaging, colours or sounds

You can register a trademark with IP Australia, giving you exclusive rights to use it in your industry and the ability to stop others using something confusingly similar.

Our advice

Before your next creative project:

Ask about copyright ownership – and get it in writing.
Keep a copy of all agreements and invoices.
Register your trademarks if your brand name, logo or tagline matter to your business.

Your brand is one of your most valuable assets. Protect it early to avoid expensive disputes later.

Love your brand? Let’s protect it properly. Call 3366 8166 or contact us today to secure your creative assets and peace of mind.

The post Who owns copyright of my brand logo, graphics, copy and photos? appeared first on Creative Passion.

WooCommerce critical vulnerability

Creative Passion — Thu, 15 Jul 2021 06:07:51 +0000

WooCommerce (which is used on many WordPress shopping carts) has announced a critical vulnerability in their plugin. We updated all client sites within hours of the notification.

Even though we have updated client sites with WooCommerce, this is a timely reminder:

Even if your site doesn’t use WooCommerce – if you have a shopping cart, online bookings, vital information and/or contact forms which collect client information, then multiple offsite backups and monthly maintenance are vital.
Regular website maintenance is still one of the best ways to make sure that plugins, WordPress, PHP and themes reduce your exposure. Learn more about regular maintenance
WooCommerce haven’t yet revealed the extent of the exploit or whether data has been compromised, but the potential exposed data could include order and customer information stored on your site if you use a WooCommerce shopping cart and we’ll let you know as soon as we learn more
Out of caution it is a good idea to update your WordPress passwords now since the patched version of WooCommerce has been installed and this potential exploit, which has existed since 30/1/2018, shows that regular password changes are always beneficial

A WooCommerce vulnerability doesn’t have to put your website or customers at risk.

Regular WordPress maintenance can’t prevent every issue — but it does significantly reduce vulnerabilities and speeds up recovery if problems occur.

Call 3366 8166 or contact us today to review your site’s security and keep your online store protected.

The post WooCommerce critical vulnerability appeared first on Creative Passion.

Hardening your website security headers

Creative Passion — Thu, 10 Jun 2021 01:26:29 +0000

HTTP security headers add defense-in-depth on top of TLS (SSL) to reduce risks like code injection, data leakage, and clickjacking.

How security headers protect your site

Always-HTTPS forces browsers to use HTTPS only, blocking insecure connections and downgrades
Allowlisted content only tells the browser where it’s allowed to load code, styles, images, and frames from, stopping most injection and XSS tricks
No clickjacking prevents your pages from being placed in someone else’s iframe to steal clicks or data
Less data leakage limits what referral information visitors’ browsers share with other sites
Powerful features off by default means camera, microphone, geolocation, and sensors are off unless explicitly needed
Origin isolation keeps your site’s browsing context separate and stops other sites reusing your resources without permission
No file-type spoofing blocks the browser from guessing MIME types, reducing drive-by download risks
Sane caching ensures public pages revalidate with the server, while logged-in, admin, REST, and AJAX responses aren’t cached

Reducing clues that assist targeted attacks

Strip fingerprints hides server and software versions and other about-this-server hints
Kill long-TTL HTML caching by removing long expiry headers on pages so they don’t get stuck in caches
Session hygiene when used, ensures cookies are secure, HTTP-only, and same-site to resist theft and CSRF

Does my site have hardened security headers?

You can check your site on securityheaders.com – a free scanner that grades your HTTP response headers and is a useful indicator of what’s missing or misconfigured (but it’s not a complete security review).

If your site doesn’t score an A+, contact Creative Passion®.

We’ll fine-tune your headers and security settings to reduce attack risks, limit data exposure and add protective guardrails — all while avoiding version leaks.

Ask us about regular maintenance to keep your site’s protections current, consistent and cared for.

The post Hardening your website security headers appeared first on Creative Passion.

$5,000 Grant for New Websites or Upgrades

Creative Passion — Tue, 18 May 2021 03:30:21 +0000

This up-front fixed grant of $5,000 opens 31 May 2021, so call 3366 8166 now!

Website build or upgrade
Adding e-commerce
Developing new website content (writing content, photo shoots, stock photo purchases)
Strategic marketing plans including search engine optimisation advice

Successful applicants do not have to co–contribute to this grant, however successful applicants must pay for any related expenses in excess of the $5,000 grant funding (e.g. hosting).

Do you have:

Fewer than 20 employees
An ABN
GST registration
Headquarters in Queensland
An expected turnover of $300,000 or less for the current financial year
Owners/directors that are not insolvent or an undischarged bankrupt

If so, please read the Basics Grants Program guidelines for more information on eligibility. We’ll write the proposal which you submit with your application.

Love to update your website with grant funding? Call 3366 8166 or contact us today for help with your application.

The post $5,000 Grant for New Websites or Upgrades appeared first on Creative Passion.

Does my WordPress site need regular maintenance?

Creative Passion — Fri, 28 Feb 2020 02:20:55 +0000

WordPress has many working parts: PHP, HTML, CSS, WordPress core, theme and plugins are often updated to improve security, to make them faster and to make them compatible with other upgrades. Sometimes they can break, be exploited and conflict with each other. That’s why we recommend regular maintenance.

Does my website really need maintenance?

Multiple offsite backups and monthly maintenance are vital if you have any of the following:

Contact forms (which bring you leads 24 x 7)
Shopping cart (which bring your income 24 x 7)
Online bookings (which bring you business 24 x 7)
Vital information (which inform your customers/prospects 24 x 7)
You rely on referrals from Google/search engines (which bring site visitors 24 x 7)

And even if you have a simple information website, then your business can still be affected. Can you afford to lose business while your site is fixed? In this case, maybe offsite backups and quarterly maintenance might do the trick.

Can I do website maintenance myself?

Updating PHP, WordPress core, themes and plugins is not as simple as clicking an update button (oh, how we wish it was). Each of these can conflict with each other.

Regular website maintenance by professionals can help avoid conflicts, optimise your website’s uptime, improve the security, health and speed of your site (which benefits visitors and Google rank).

Other optimisation

Depending on your needs, we also offer uptime monitoring, extensive backups, security and malware scans, premium caching and on-site optimisation to improve the speed of your site.

The real questions are: if your website breaks, how expensive will repairs be, how long will it take to repair, and can you afford to lose business or have your website offline for hours, days or weeks while it’s restored or fixed?

Regular WordPress maintenance can’t prevent every problem — but it does greatly reduce the risk and speeds up recovery if issues occur.

Keep your site safe, fast and reliable with proactive care.

Call 3366 8166 or contact us today to discuss your maintenance needs.

The post Does my WordPress site need regular maintenance? appeared first on Creative Passion.

Does website speed matter?

Creative Passion — Thu, 01 Apr 2021 06:17:06 +0000

Research shows that the speed of pages showing on the user’s screen (load time) can affect its performance in many areas. Accelerating page load time can:

Improve user experience
Increase page views (i.e. the number of people who visit the page)
Increase conversion rates (i.e. the number of people who email, phone, sign-up, join a mailing list, complete a booking form or contact form)
Improve search engine rank (page speed is one factor Google uses to determine rank)
Reduce bounce rates (people who visit your site and leave instantly)

Users might have a slow device, slow internet and/or be far from your servers – so you might need to harness multiple strategies to improve your site’s speed.

Choose quality hosting

High performance shared hosting is sufficient for most clients. Have a chat with us. We’re happy to recommend experts.

PHP version 7+ is a must (it’s significantly faster and more secure than PHP 5.6)
You also want servers that are physically close to your users, so if most of your clients are in Australia you shouldn’t host on an overseas server
If you’re using shared hosting, check that they allocate enough resources (server capacity) for your site to run fast

Optimise images

Images can make your site interesting, eye-catching, informative and engaging – but unnecessarily large images can grind your pages to a halt. Optimising images will improve user experience and even save money in server bandwidth.

When we create sites for clients, we crop images and compress them to reduce their size. If you (or your staff) are adding images to the site yourselves, then we may have to consider a crop and optimisation plugin. Have a chat with us about your needs.

Reduce plugins

Plugins are software which help WordPress execute additional functions and features. Plugins can increase the load on your server, increase background tasks, make the site SEO unfriendly and increase the chance of conflict with other plugins. The best practice is to limit plugins to those which are necessary.

Reduce external scripts

External scripts (such as comment systems, embedding videos, social sharing, chat widgets, Google Analytics and ads) can be a necessary evil. Use them only when necessary.

Caching pages

Caching can deliver your pages two to five times faster. Put simply, when a page is first loaded, it uses WordPress, PHP, the database and scripts. But subsequent users see a cached copy which is ready to be viewed.

Lazy loading images

Loading images only when needed helps to reduce the number of HTTP requests. So if the user doesn’t scroll down, the image doesn’t download.

Reduce HTTP requests

We can perform waterfall analysis of HTTP requests. Essentially we look at each image, video, CSS and script. We want to find those which took the most time, find non-optimised images, reduce the number of requests, and modify their order to help users to see images or text earlier.

Other site optimisation

Update regularly (PHP, WordPress core, theme and plugins)
Merging CSS and JavaScript files
Avoid embedded videos
Choose a speed-optimised theme (avoid unnecessary files, don’t depend on jQuery, minimise database calls)
Upgrade hosting to a virtual private server (VPS), dedicated server or even CDN
Schedule background processes to occur in low traffic time (such as backups, scheduled posts and updates
Reduce hot-linking of your images by other sites

Want a site your visitors and Google will love? Call 3366 8166 or contact us to discuss website optimisation and speed upgrades.

The post Does website speed matter? appeared first on Creative Passion.