Category: Joomla

Joomla 6 is the current major CMS line. Joomla 3 reached end of life on 17 August 2023, and paid extended security support ended on 17 February 2025. A Joomla 3 site in 2026 is running core software the Joomla Project will not patch. Joomla 4 is not the destination either. Its security window closed on 14 October 2025. If you still have a 3.x site, the supported landing zone is Joomla 6.1.x (6.2 is next), not a 2021-era Joomla 4 install.

This page used to compare Joomla 4 and Joomla 3. That framing is outdated. Joomla 4 shipped on 17 August 2021 as the way off Joomla 3. Four years later, Joomla 4 is also unsupported. The question in 2026 is simpler: stay on an unpatched 3.x stack, or move to Joomla 6 on modern PHP.

Infyways has migrated Joomla sites since the Mambo era. If you want a managed cutover, use Joomla Upgrade. For the current 6.x train, see Joomla 6.

What you will learn

• How Joomla 6 vs Joomla 3 compares on support, PHP, speed, security, templates, and SEO
• What share of Joomla sites still run version 3, and why that majority is in the danger zone
• Why Joomla 4 is no longer the upgrade target
• Official dates you can cite (EOL, eLTS, current 6.x support)
• The real upgrade path: 3.10 to 4.4 to 5.4 to 6.x (you cannot jump 3 to 6)
• What usually breaks: Protostar, K2, old page builders, abandoned extensions
• When to call Joomla upgrade or support help

How many Joomla sites still run version 3

W3Techs (7 September 2026) reports this mix among websites it detects as Joomla:

Joomla version	Share of detected Joomla sites	Project patch status in Sep 2026
3.x	52.6%	None. Community support ended 17 Aug 2023. Paid eLTS ended 17 Feb 2025
5.x	20.6%	Supported (bugfix until 13 Oct 2026, security until 12 Oct 2027)
4.x	8.4%	None. Security support ended 14 Oct 2025
6.x	8.1%	Current line (bugfix until 17 Oct 2028, security until 16 Oct 2029)
2.x	5.9%	None. Retired years ago
1.x	4.3%	None. Retired years ago

How to read it:

• About 1 in 2 Joomla sites is still on Joomla 3. That is not a rounding error. It is the majority of the public install base W3Techs can fingerprint.
• About 71% are in the danger zone: versions 1, 2, 3, and 4 together (52.6 + 8.4 + 5.9 + 4.3). Those majors do not get official core patches.
• Only about 29% are on a supported train: Joomla 5 plus Joomla 6 (20.6 + 8.1).

This is a website census, not a poll of “people.” W3Techs counts public sites it can identify. It will miss locked-down intranets. It can also lag a recent upgrade until the next crawl. Treat 52.6% as the public web’s Joomla 3 share, not as Infyways telemetry.

The share is falling, slowly. W3Techs’ version history had Joomla 3 around 61% in July 2025. A year later it is still over half. Migrations are happening. They are not happening fast enough to empty the unpatched pool.

Why Joomla 3 sites are in the danger zone

“Danger zone” here means unpatched core on the public internet, not a marketing label.

1. The core will not get another official fix. Any new Joomla 3 vulnerability stays open. Firewalls and Admin Tools lower noise. They do not replace a vendor patch. Community “dot 999” hardening is a stopgap, not a support contract.
2. Attackers prefer the popular leftover. When more than half of detected Joomla sites still answer as 3.x, scanners and exploit kits keep Joomla 3 fingerprints in rotation. You are not an interesting target. You are a matching banner.
3. The PHP under it is usually old too. Joomla 3 can boot on PHP 5.3.10. Many live 3.x sites sit on PHP 7.4 or 8.0 because a template or checkout dies on 8.3. Old PHP means old OpenSSL, ended distro packages, and a host that will someday force an upgrade and white-screen the site.
4. The extension layer is abandoned. Template and page-builder vendors have stopped Joomla 3 security work. A “patched” builder on unpatched core is still an unpatched CMS.
5. Joomla 4 is not a safe parking spot. Another 8.4% of detected sites are on 4.x, which lost security support on 14 October 2025. Migrating 3 to 4 and stopping leaves you in the same danger zone under a newer number.
6. Compliance already failed. PCI questionnaires, cyber insurance, and enterprise IT reviews ask whether the CMS still receives vendor patches. “Joomla 3.10.12” is a no. “We have not been hacked yet” is not a control.

If you are in that 52.6%, the risk is not theoretical. It is the default condition of an EOL CMS that most of the remaining Joomla web has not left. Upgrade path below. Incident first if you are already compromised: repair a hacked Joomla website.

Joomla 6 vs Joomla 3 at a glance

These figures are from the Joomla Project roadmap, the Joomla 6.0 / 5.4 announcement, Joomla 3 downloads, and the Joomla 6 technical requirements. Current stable 6.x at writing (September 2026) is 6.1.3.

Area	Joomla 3.10	Joomla 4.4	Joomla 6.1
Last official core	3.10.12 (11 July 2023)	4.4.x, security ended 14 Oct 2025	6.1.3 (18 Aug 2026), 6.1.4 due 29 Sep 2026
Community support	Ended 17 Aug 2023	Security ended 14 Oct 2025	Bugfix until 17 Oct 2028, security until 16 Oct 2029
Paid eLTS	Ended 17 Feb 2025	None	Not needed while 6.x is current
PHP minimum	5.3.10	7.2.5	8.3.0
PHP recommended	8.0 (late 3.x docs)	8.2	8.4
MySQL minimum	5.1 (InnoDB)	5.6	8.0.13
Frontend template	Protostar (Bootstrap 2 era)	Cassiopeia (Bootstrap 5)	Cassiopeia plus Cassiopeia Extended child
Admin template	Isis	Atum	Atum with CSS transitions
Core updates	Manual, unsigned in the old model	Manual, later TUF on 5.x	TUF-signed plus automatic core updates
Native child templates	No	From 4.1	Yes, including the Extended child in 6.0
MFA in core	Plugin era	First-class MFA	MFA plus POW captcha in 6.1
Web Services API	Limited / add-on era	Core web services	Core APIs, Framework 4
You should run this in 2026	No	No	Yes

Read that table as a support clock, not a feature brochure. Joomla 3 is not “old but patched.” It is unpatched core.

Joomla 4 vs Joomla 3: what actually changed

Joomla 4 (released 17 August 2021) was a rebuild, not a facelift: it replaced Joomla 3’s Bootstrap 2 templates, legacy MVC classes and MooTools with Bootstrap 5, namespaced code and the Web Asset Manager, and raised the PHP minimum from 5.3.10 to 7.2.5. That is why moving from 3 to 4 breaks old extensions and templates, and why Joomla calls it a migration. Everything Joomla 4 introduced carried forward into Joomla 5 and 6, so the comparison below is also a list of what your Joomla 3 site gains on the way to Joomla 6.

Area	Joomla 3	Joomla 4
Minimum PHP	5.3.10 (3.10)	7.2.5
Front-end framework	Bootstrap 2	Bootstrap 5
Default templates	Protostar (site), Isis (admin)	Cassiopeia (site), Atum (admin)
JavaScript	MooTools and jQuery loaded by core	MooTools removed; assets managed by the Web Asset Manager
Code base	Legacy J-prefixed classes (JFactory, JText)	Namespaced classes; old names only via the Backward Compatibility plugin
Web Services API	None in core	Built-in REST API
Content workflows	Publish / unpublish only	Optional workflows with stages and transitions
Email	Hard-coded strings	Editable mail templates
Upgrade type from 3	Migration (Joomla calls 3.10 → 4 a “mini-migration”): core moves in one click, extensions and templates often need replacing
Security support	Ended 17 August 2023	Ended 14 October 2025

Should you stop at Joomla 4? No. Both columns above are end-of-life. Treat Joomla 4.4 as the bridge you must cross, then continue to 5.4 and 6. Before you start, check which extensions will break with a Joomla 6 compatibility check, and follow the full Joomla 3 to 6 upgrade guide.

Why you should upgrade now

Waiting made sense in 2022, when Joomla 4 was new and many extensions lagged. It does not make sense in September 2026.

1. There is no official Joomla 3 patch at any price. Community support ended 17 August 2023 (project announcement). The commercial eLTS programme closed 17 February 2025. Community hardening repos exist as a stopgap. They are not a product roadmap.
2. Joomla 4 is also closed. Teams that migrated 3 to 4 and stopped there are on another EOL line as of 14 October 2025. Stopping at 4 only delays the same job.
3. Hosts are dropping the PHP Joomla 3 was built for. Joomla 6 requires PHP 8.3 (8.4 recommended). Shared hosts that still offer PHP 7.4 or 8.0 are shrinking. A 3.x site that “works” on an old PHP pool is one host policy change away from a white screen. If the site is already down, treat it as an incident, then upgrade. Do not patch PHP on production and hope 3.x survives.
4. Extension vendors have left 3.x. Major template and page-builder shops have stopped Joomla 3 security work. A patched Helix or SP Page Builder on top of unpatched core is not a secure site.
5. Joomla 5.4 bugfix ends 13 October 2026, the same week Joomla 6.2 is planned. If you start from 3.x now, you still pass through 4.4 and 5.4. Starting after those windows close makes the staging work harder, not easier.
6. Insurers, payment processors, and enterprise IT questionnaires ask for supported software. “We are on Joomla 3.10.12” fails that test. PCI and cyber policies do not care that the site “has not been hacked yet.”

If the site is already compromised, fix the incident first: repair a hacked Joomla website. Then upgrade. Patching malware on Joomla 3 and staying there repeats the incident.

Speed: Joomla 6 vs Joomla 3

Joomla 3 can feel fine on a tiny brochure site with a CDN in front. The gap shows up in admin, multilingual sites, and anything that loads a pile of modules.

PHP is the largest lever. Joomla 3 can boot on PHP 5.3.10. Plenty of live 3.x sites still sit on PHP 7.4 because a template or VirtueMart fork dies on 8.x. Joomla 6 will not install below PHP 8.3. You pick up years of Zend engine, JIT, and opcode-cache work the 3.x codebase was never written to use. That is not a lab synthetic. It is the language runtime your host actually executes.

Joomla 6 caches language file parsing. The 6.0 release notes added a cache layer around languageHelper::parseIniFile. Multilingual and large language-pack sites spend less time re-parsing INI on every request. Joomla 3 does this the old way.

Asset loading is no longer “jQuery and Bootstrap 2 on every page.” Joomla 3’s Protostar stack is a custom Bootstrap 2.3.2 plus a jQuery era front end. Joomla 4 introduced the Web Asset Manager. Joomla 6 still uses it on Bootstrap 5.3. Extensions that opt in ship only the CSS and JS they need. A 3.x site with five club templates and a page builder often ships several jQuery copies. That is why speeding up Joomla on 3.x is mostly caching and images, while 6.x can also drop unused JS.

Admin is a different application. Isis on Joomla 3 was built for another decade of screens. Atum on 4/5/6 is the accessibility-first admin. Joomla 6 added CSS transitions in Atum and Cassiopeia so admin navigation feels less like a full reload. Editors on 3.x still complain that “Joomla admin is slow.” Often it is PHP workers plus Isis plus uncached language strings. Front-end caching help is in how to speed up Joomla.

Media and images. Joomla 6’s media manager can generate thumbnails for more file types, and 6.1 adds audio, video, and document custom fields. Joomla 3’s media manager is a drag for large libraries. Pair the CMS move with modern formats: WebP for Joomla.

Do not expect a magic “Joomla 6 is 40% faster” number. Measure TTFB and LCP on staging after PHP 8.4, cache, and image work. The consistent pattern we see: origin time drops when you leave PHP 7 and a Bootstrap 2 template, then front-end LCP drops when you stop shipping unused JS.

Security: Joomla 6 vs Joomla 3

Security is the reason to move, not a bullet on a marketing slide.

Unpatched core is the whole story on Joomla 3. New CVE-class bugs in 3.x stay open. Firewalls and “we have Admin Tools” reduce noise. They do not patch core. If you need the honest incident path, we wrote how to repair a hacked Joomla site.

Joomla 6 still gets a security train. Roadmap: regular bugfix for 6.x until 17 October 2028, security-only until 16 October 2029. That is years of project-signed fixes Joomla 3 will never receive.

Updates are signed and can be automatic. Joomla 5.1 introduced TUF-secured updates. Joomla 5.4 and 6.0 added automatic core updates for minor releases (example: 6.1.2 to 6.1.3). Joomla 3’s updater was a manual, often skipped, ritual. Sites die in the gap between “we will update next quarter” and a disclosed exploit.

MFA and bot friction are core. Joomla 4 made multi-factor authentication a first-class system plugin. Joomla 6.1 added a built-in proof-of-work captcha as a core alternative to Google reCAPTCHA. Joomla 3 sites still bolt this on, if they bother.

Password hashing and session handling moved with PHP. Staying on 3.x often means staying on old PHP. Old PHP means old OpenSSL, old hash APIs, and host packages that nobody is backporting.

SVG and media uploads. Joomla 6 improved SVG validation errors in Media Manager so a failed upload is a real diagnostic, not a vague XSS warning. Joomla 3 media uploads are a frequent malware drop if the site allows untrusted users.

Security is also template PHP. Protostar forks and “null” templates from 2016 execute on the same PHP as core. Joomla 6 child templates (how to set up a Joomla child template) let you keep CSS without forking core files that need patches.

Feature comparison: daily CMS work

Job	Joomla 3	Joomla 6
Edit an article	TinyMCE of that era, fewer field types	TinyMCE 8.x, notes and number custom fields, versioning that includes custom fields
Customise the design	Edit Protostar or duplicate the whole template	Child template of Cassiopeia; Cassiopeia Extended ships extra colour and font params
Run two languages	Native multilingual exists, incomplete packs leave gaps	Native multilingual plus a language fallback chain in 6.2
Keep core patched	Manual, then impossible after EOL	TUF updates, optional automatic minor updates
Workflow	Limited	Graphical workflow editor in 6.1
Headless / app backend	Thin	Core Web Services, Framework 4
Accessibility	Partial	WCAG-oriented admin and frontend from the J4 rewrite onward
SEO defaults	SEF plus third-party SEO extensions	Same SEF model, cleaner HTML, better default robots/accessibility; still use a capable SEO extension if you need it

One correction to older “Joomla 4 vs 3” posts, including the 2023 version of this URL: Joomla 3 already had native multilingual. Joomla 6 does not “add languages.” It makes incomplete language packs less painful and keeps the rest of the stack on a supported PHP line.

What usually breaks on the way off Joomla 3

Plan for these. They are why a 3 to 6 job is a migration, not a one-click installer.

• Protostar and Isis. They do not come across as Cassiopeia and Atum. Rebuild the look as a Cassiopeia child, or replace with a Joomla 6-ready commercial template. Do not copy Protostar PHP into 6.
• K2. K2 is a Joomla 3-era content stack. Move K2 items into core articles or a J6-ready CCK. Infyways runs this as K2 migration.
• VirtueMart and old checkout. Test every payment plugin on PHP 8.3. Some gateways never shipped J4+ builds. That is a commerce project, not a core bump. See VirtueMart upgrade.
• Page builders and Helix/SP Page Builder 3-era sites. Vendor J6 builds exist for current product lines. Joomla 3-only licences do not. Budget a rebuild of landing pages if the builder is abandoned.
• Overrides. html/com_content copies from 2014 will fatal on namespaced J6 classes. Inventory overrides before you touch production.
• SEO URLs. Most menu aliases survive. Third-party sh404SEF or similar needs a J6-native replacement or a redirect map. Do not go live without a 301 sheet.

You cannot jump from Joomla 3 to Joomla 6

The installer will not let you. GitHub’s 6.0 notes are explicit for the last hop: do not update to 6.x from anything below 5.4. Get to 5.4 first.

Practical path we use on client sites:

1. Joomla 3.10.12 (last official 3.x) with a full backup
2. Staging clone, PHP raised as far as 3.10 will run (often 8.0) so the pre-update checker works
3. Migrate 3.10 to 4.4 (this is the hard hop: templates and extensions)
4. Upgrade 4.4 to 5.4 (upgrade, not a second migration, if extensions dropped J3-only APIs)
5. Enable the Behaviour – Backward Compatibility 6 plugin on 5.4, then upgrade 5.4 to 6.1.x
6. Retest, then plan to turn the compatibility plugin off once vendors are native

Official notes: Joomla 5.4 to 6.0 migration. For the 3 to 4 hop, Joomla’s 3.10 pre-update checker is still the right first screen. We also keep a dedicated walkthrough at Joomla 3 to Joomla 4 upgrade because that hop is where most sites stall.

Step 1: Inventory the Joomla 3 site

1. Record Joomla version, PHP, MySQL/MariaDB, and host.
2. Export the extension list (core, libraries, templates, modules, plugins).
3. Mark each item: Joomla 6-ready, replace, or drop.
4. List overrides, custom cron, payment callbacks, and multilingual associations.
5. Capture Search Console, analytics, and a crawl of indexable URLs.

Filter the Joomla Extensions Directory by Joomla 6. If a vendor vanished in 2019, budget a replacement now. Do not discover it on launch night.

Step 2: Fix hosting and PHP first

Joomla 6 needs PHP 8.3+, MySQL 8.0.13+ or MariaDB 10.4+ (10.6 supported, 12.0 recommended), and enough PHP memory (plan 256MB). Raise staging to the J6 target PHP before you chase template bugs. If production cannot offer PHP 8.3, change host before you change CMS. A 6.x site on an old PHP pool will not install.

Step 3: Stage, never upgrade live first

1. Full files plus database backup, stored off the server.
2. Clone to staging with the same PHP you will use in production for the current hop.
3. Disable or remove junk extensions on the clone.
4. Run 3.10 to 4.4 on staging until frontend, login, forms, and checkout work.
5. Only then continue 4.4 to 5.4 to 6.1.x on that clone.

If staging is not possible, do not improvise on production. That is how “upgrade” becomes an outage. Infyways can run the clone under Joomla Upgrade or outsource Joomla services.

Step 4: Rebuild the template as a child, not a fork

On Joomla 6, create a child of Cassiopeia (or use Cassiopeia Extended) and move only CSS, logo, and overrides you still need. Do not paste Protostar index.php into 6. Details: Joomla child template setup. For a full visual rebuild, Joomla design services.

Step 5: QA, SEO, and production cutover

1. Frontend: home, menus, articles, category blogs, search, forms, login, checkout.
2. Admin: article edit, media, installer, users, MFA.
3. SEO: aliases, canonicals, redirects, XML sitemap, Search Console comparison crawl.
4. Performance: cache, CDN, WebP, PHP-FPM workers.
5. Security: latest 6.1.x patch, automatic updates policy, failed-login limits.

Cut over in a low-traffic window with a restore point. Then watch logs for 48 hours. Ongoing patching belongs on a retainer: Joomla support and maintenance.

Key takeaways

1. Most detected Joomla sites are still on 3.x. W3Techs (7 Sep 2026): 52.6% on version 3. About 71% sit on 1.x, 2.x, 3.x, or 4.x, none of which get official core patches.
2. Joomla 6 vs Joomla 3 is not a style debate. Joomla 3 has had no official core patches since August 2023. eLTS ended February 2025.
3. Do not migrate 3 to 4 and stop. Joomla 4 security support ended 14 October 2025. Land on Joomla 6.1.x.
4. Speed comes from PHP 8.3/8.4, Web Assets, language-file caching, and dropping Bootstrap 2 templates, not from a slogan.
5. Security comes from a supported train: TUF-signed updates, optional automatic minor updates, MFA, and vendors who still ship J6 builds.
6. You cannot jump 3 to 6. Path is 3.10 to 4.4 to 5.4 to 6.x on staging.
7. Budget template, K2, and checkout work. Core is the easy part. Overrides and abandonware are the project.
8. Infyways can run the cutover: Joomla Upgrade.

Frequently asked questions

What percentage of Joomla sites still use Joomla 3?

W3Techs reported 52.6% of detected Joomla sites on version 3 on 7 September 2026. About 71% are on any unsupported major (1, 2, 3, or 4). Source: W3Techs Joomla usage.

Is Joomla 3 still supported in 2026?

No. Official community support ended 17 August 2023. Paid eLTS ended 17 February 2025. There is no official Joomla 3 core patch at any price. That is why the 52.6% still on 3.x are in the danger zone.

What is the difference between Joomla 4 and Joomla 3?

Joomla 4 moved from Bootstrap 2 to Bootstrap 5, replaced the Protostar and Isis templates with Cassiopeia and Atum, removed MooTools, switched to namespaced code, added a REST Web Services API, workflows and mail templates, and raised the PHP minimum from 5.3.10 to 7.2.5. Both versions are now end-of-life, so use Joomla 4.4 only as a step towards Joomla 6.

Should I upgrade Joomla 3 to Joomla 4 or Joomla 6?

Go to Joomla 6. Joomla 4 is a required hop on the path, not the destination. Joomla 4 security support ended 14 October 2025.

Can I upgrade directly from Joomla 3 to Joomla 6?

No. Update to 3.10, migrate to 4.4, upgrade to 5.4, then to 6.x. Do not skip 5.4. The project tells you not to update to 6 from anything below 5.4.

What PHP version does Joomla 6 need compared with Joomla 3?

Joomla 6 requires PHP 8.3.0 minimum and recommends 8.4. Joomla 3.10’s absolute minimum is PHP 5.3.10. That gap is why many 3.x sites cannot even install 6 until hosting changes.

Is Joomla 6 faster than Joomla 3?

Usually yes on real hosting, because you leave PHP 7 and Bootstrap 2, and 6.x caches language parsing and uses the Web Asset Manager. Measure on staging. Do not quote a fake percentage.

Will my Joomla 3 template work on Joomla 6?

Almost never if it is Protostar or a 2016 club fork. Rebuild as a Cassiopeia child or replace with a Joomla 6-ready template.

What about K2 sites still on Joomla 3?

Migrate K2 content before or as part of the CMS move. Core articles or a J6-ready CCK, not a K2 install on Joomla 6. See Joomla K2 migration.

How long does a Joomla 3 to Joomla 6 upgrade take?

A small brochure site with a replaceable template can be days on staging. A VirtueMart plus page-builder plus 80 extensions site is weeks. Inventory first. Infyways quotes after that list, not before: Joomla Upgrade.

Conclusion

Joomla 6 vs Joomla 3 is a supported CMS versus an unpatched one. W3Techs still finds 52.6% of detected Joomla sites on version 3. Speed and UX are real. They are not why you should move this quarter. You should move because that majority is already in the danger zone: no official core patch, aging PHP, abandoned extensions, and Joomla 4 already closed behind you.

Inventory extensions, raise PHP on a clone, walk 3.10 to 4.4 to 5.4 to 6.1.x, and rebuild the template as a child. If you want that done without gambling on production, start with Joomla Upgrade or hire Joomla developers.

Short answer: To enable caching, go to System → Global Configuration → System and set System Cache to Conservative. To disable it, set it to OFF (and disable the System – Page Cache plugin). To clear it, go to System → Clear Cache, select all and delete. Then purge any server, CDN or browser cache. For choosing the right caching setup, read our Joomla caching strategy guide.

Joomla caching stores generated HTML or module output so the next visitor gets a faster response without rebuilding the page from the database every time. You control three layers: Global Configuration System Cache (Off, Conservative, or Progressive), the System – Page Cache plugin for full-page snapshots (guests), and module-level cache choices. Clearing cache is System → Clear Cache (or Maintenance → Clear Cache on some layouts). The same model applies on Joomla 3, 4, 5, and 6. Official overview: Joomla Cache documentation.

This guide is the operations playbook: when to turn each layer on, how to turn it off for debugging, how to purge safely, and how to stop fighting CDN or browser cache that is not Joomla at all. If Clear Cache does nothing to storage, see Joomla cache not clearing. If you published and still see yesterday’s HTML, see cache showing old content. For speed work beyond cache: speed up Joomla.

What you will learn

• What each Joomla cache layer actually stores
• Conservative vs Progressive vs Page Cache (and when Progressive bites)
• Step-by-step enable, disable, and clear flows
• Handler choices: File, APCu, Redis, Memcached
• Guest vs logged-in behavior
• A go-live checklist and troubleshooting matrix

Infyways: Joomla website optimization · Joomla support · Joomla development.

Cache layers at a glance

Layer	What it caches	Who it usually serves	Where you control it
System Cache: Off	Nothing from global view/module caching	N/A	Global Configuration → System → Cache Settings
Conservative	Views/modules you allow (module Advanced → Use Global / No caching)	Guests mainly for shared output	Global Configuration + per-module
Progressive	Broader module combinations; overrides many per-module “No caching” expectations	Guests; easy to show wrong modules on wrong pages	Global Configuration
System – Page Cache	Full HTML page snapshot	Guests only (logged-in users bypass)	Plugins → System – Page Cache
CDN / host / browser	Edge or client copies	Everyone who hits that layer	Cloudflare, LiteSpeed, browser

Global System Cache alone does not equal full-page caching. Page Cache is a separate plugin. That distinction is the number one agency misunderstanding.

Recommended defaults (production vs build)

Situation	System Cache	Page Cache plugin	Notes
Active development / styling	Off	Disabled	Otherwise you chase ghosts
Content-heavy marketing site	Conservative	Enable after testing	Set dynamic modules to No caching
Rarely changing brochure site	Conservative or carefully tested Progressive	Often enabled for guests	Progressive needs QA on module assignment
Membership / cart / personalized UI	Conservative + strict module exclusions	Use exclusions or keep Off on private paths	Never assume Page Cache is safe on personal pages

Step 1: Open Cache Settings

1. Log in to Administrator.
2. Go to System → Global Configuration.
3. Open the System tab.
4. Find Cache Settings.

Typical fields (labels vary slightly by version):

Field	Meaning
System Cache	Off / Conservative / Progressive
Cache Handler	Usually File; APCu, Redis, or Memcached when PHP extensions and host support them
Cache Time	Minutes until an entry expires (default often 15)
Path to Cache Folder	Leave blank for default cache/ unless you have a deliberate custom path
Platform Specific Caching	Adds device-type flavor to cache IDs when Yes

Official walkthrough: Cache docs.

Step 2: Enable Conservative caching (safe default)

1. Set System Cache to ON – Conservative caching.
2. Set Cache Handler to File unless your host already standardized on Redis/Memcached and you know how to flush it.
3. Set Cache Time (start at 15–60 minutes; raise after you trust purge habits).
4. Save.
5. For each module that must stay dynamic (cart, login, personalized greetings), open the module → Advanced → set Caching to No caching.
6. Leave stable modules on Use Global.

Conservative is the default you should prefer on client sites unless you have a reason and a test plan for Progressive.

Step 3: Enable Progressive caching only with eyes open

1. Set System Cache to ON – Progressive caching.
2. Save and clear cache.
3. Walk key menu items as a guest. Confirm modules appear only where assigned.
4. If a module “follows” you across pages incorrectly, switch back to Conservative immediately.

Progressive is faster on paper and famous for wrong-module-on-wrong-page tickets. Treat it as an advanced mode, not a trophy setting.

Step 4: Enable System – Page Cache (full pages for guests)

1. Go to System → Manage → Plugins (or Extensions → Plugins on older menus).
2. Search for System – Page Cache.
3. Enable it.
4. Review plugin options (browser cache, exclusions) for your version.
5. Clear cache.
6. Test as guest in a private window, then as a logged-in user.

Page Cache is the biggest win for anonymous traffic. Logged-in sessions normally bypass it. If editors say “I see the update but visitors do not,” clear the page cache group and check CDN.

Step 5: Disable caching for debugging

Use this order when something looks stale or broken:

1. Disable System – Page Cache plugin.
2. Set Global System Cache to OFF – Caching disabled.
3. Clear Cache (Delete All).
4. Bypass CDN (origin URL or development mode) and use a private browser window.
5. Reproduce the bug.
6. Re-enable Conservative (and Page Cache if needed) only after the fix is confirmed.

Do not leave production on Off after a support call ends.

Step 6: Clear cache in Administrator

Clear all

1. Go to System → Clear Cache (sometimes under Maintenance).
2. Check all groups or use Delete All / equivalent.
3. Confirm the list empties or refreshes.

Clear one group

1. Open Clear Cache.
2. Tick a group such as page (Page Cache plugin) or a component/module group.
3. Delete.

After content edits on a Page Cache site, clearing the page group is the move that fixes “guest still sees old article.”

CLI (when you automate)

From the site root, modern Joomla installs can use the console cache clean command provided by your version (joomla.php / CLI entry). Wire it into deploy hooks so releases purge File or Redis consistently. If the Admin broom works but Redis still serves old HTML, the handler was not File: cache not clearing.

Step 7: Clear what is not Joomla

Layer	How to purge
Cloudflare / CDN	Purge URL or cache everything after major publishes
LiteSpeed / host page cache	Host panel or LSCache purge
Browser	Private window or hard refresh
Opcode (APCu/OPcache)	Host restart or panel tools after PHP deploys

Joomla Clear Cache never empties Cloudflare by itself.

Handler cheat sheet

Handler	Use when	Watch-out
File	Default shared hosting	Permissions on cache/; disk full
APCu	Single-server PHP with APCu	Not shared across multiple app servers
Redis / Memcached	Multi-node or high traffic	Must flush the right instance; FTP delete of cache/ does nothing

Always match Clear Cache expectations to the handler you configured.

Guest vs logged-in checklist

1. Publish the change.
2. Open a private window logged out. That is the Page Cache audience.
3. Open the same URL logged in. You may see fresher HTML.
4. If only guests are stale, purge Page Cache + CDN.
5. If both are stale, check Progressive/Conservative and module cache, then CDN.

Deep dive: cache showing old content.

Troubleshooting matrix

Symptom	Likely cause	Fix
Changes invisible to guests only	Page Cache or CDN	Clear page group; purge CDN; test private window
Wrong module on wrong page	Progressive caching	Switch to Conservative; clear cache
Clear Cache “works” but Redis still old	Handler is Redis/Memcached	Flush that store; see not clearing
CSS/JS look cached	Browser or CDN, not view cache	Version assets; purge CDN; hard refresh
Site slow after turning cache Off	Expected	Re-enable Conservative after debug
Cart/login weirdness	Module cached	Module Advanced → No caching
Admin slow unrelated to front cache	Different problem	Profile Admin separately

Related guides and services

• Joomla caching strategy – which settings to choose and why
• Speed up a Joomla website
• Joomla support and maintenance

Key takeaways

1. Conservative + selective module exclusions is the safe production baseline.
2. Page Cache is separate and mainly for guests. It is the big anonymous speed win.
3. Progressive is optional and easy to misconfigure.
4. Clear the layer that served the response: Joomla groups, then CDN, then browser.
5. Match purge method to Cache Handler (File vs Redis).

Frequently asked questions

How do I enable cache in Joomla?

Open Global Configuration → System → Cache Settings, set System Cache to Conservative (recommended) or Progressive, save, then optionally enable the System – Page Cache plugin for guest full-page caching.

How do I disable cache in Joomla?

Set System Cache to Off and disable the System – Page Cache plugin, then Clear Cache. Also bypass CDN while debugging.

How do I clear cache in Joomla?

Use System → Clear Cache and Delete All, or delete specific groups such as page. Flush Redis/Memcached if that is your handler.

What is the difference between Conservative and Progressive caching?

Conservative respects module-level “No caching” choices more sanely for mixed sites. Progressive caches module combinations more aggressively and often causes assignment bugs.

Does Page Cache work for logged-in users?

Normally no. System – Page Cache is aimed at guests. Logged-in users generate personalized output.

Why do visitors still see old content after I clear cache?

Another layer is hot: CDN, host cache, or browser. Or Page Cache was not cleared. See cache showing old content.

Should I use Redis instead of File?

Use Redis when traffic or multi-server architecture needs it and your team can flush it on deploy. File is fine for many sites.

Does this guide apply to Joomla 4, 5, and 6?

Yes. Menu labels move slightly, but Off / Conservative / Progressive, handlers, Clear Cache, and System – Page Cache remain the core model.

Can Infyways tune caching on my site?

Yes: Joomla website optimization and support and maintenance.

Joomla SEF URLs (Search Engine Friendly URLs) turn long query strings into readable paths built from menu and content aliases. Enable Search Engine Friendly URLs in Global Configuration so Joomla builds paths like /index.php/news/my-article. Enable Use URL Rewriting and activate the server rewrite file (.htaccess, web.config, or nginx rules) so index.php disappears and you get /news/my-article. The same settings apply on Joomla 3, 4, 5, and 6. Official overview: Search Engine Friendly URLs.

SEF is not a ranking switch. It is URL hygiene: clearer links for people, crawlers, and analytics. Pair it with solid aliases, one canonical host, and redirects when you rename paths. Deep server rewrite help: Joomla .htaccess guide. Redirect layers: Joomla Redirect Guide. Broader SEO: full Joomla SEO checklist.

What you will learn

• What SEF URLs are in Joomla (and what they are not)
• The difference between SEF URLs and URL rewriting
• Exact Global Configuration switches, including Unicode aliases and .html suffixes
• Step-by-step setup on Apache/LiteSpeed, IIS, and nginx
• How menus and aliases actually build the path
• Duplicate URL traps, multilingual SEF, and API routes on Joomla 4+
• A verification and troubleshooting matrix agencies use on go-live

Infyways: Joomla development · Joomla on-page optimization · Joomla website optimization.

Quick URL transformation table

Stage	Example URL	What turned it on
Raw (non-SEF)	/index.php?option=com_content&view=article&id=42&Itemid=101	SEF Off
SEF without rewrite	/index.php/news/42-my-article (pattern varies by menu)	Search Engine Friendly URLs = Yes
SEF with rewrite	/news/my-article	Use URL Rewriting = Yes + server rewrite file
Broken “pretty” links	404 on /news/... while /index.php/news/... works	Rewrite file missing, RewriteBase wrong, or AllowOverride blocked

SEF vs rewriting: do not conflate them

Setting	Job	Needs .htaccess / nginx / IIS rewrite?
Search Engine Friendly URLs	Joomla generates human-readable path segments from aliases	No
Use URL Rewriting	Server strips index.php from those paths	Yes
System – SEF plugin	Rewrites many hard-coded links inside article HTML toward SEF forms	No (plugin), but still benefits from correct site SEF

You can run SEF with index.php still visible. Many thin guides skip that and blame Joomla when rewriting fails.

Official Apache steps: Enabling SEF URLs on Apache.

Global Configuration SEO panel (all modern versions)

Path: System → Global Configuration → Site (SEO / Search Engine Friendly block). Labels vary slightly by version, but the controls match.

Option	Recommended default	Notes
Search Engine Friendly URLs	Yes	On by default since Joomla 1.6-era configs for new sites
Use URL Rewriting	Yes only after rewrite file works	Rename htaccess.txt first on Apache/LiteSpeed
Add Suffix to URLs	Usually No	Adds .html. Cosmetic; changing later creates redirect debt
Unicode Aliases	No for ASCII-first sites; Yes when you need native script in aliases	Affects future auto-aliases, not a mass rewrite of old ones (Global Configuration guide)
Site Name in Page Titles	Project choice	Not an SEF path setting, but sits in the same SEO mental model

Tip from the official guide: after changing SEO settings, hard-refresh open front-end tabs. Stale browser tabs make internal links look broken when they are only cached against the old format.

Do not casually flip SEO settings on a live indexed site. Changing suffix, Unicode behavior, or rewrite mode can orphan old URLs. Plan 301 redirects first.

Step 1: Decide the target URL shape

Write down three example URLs you want live:

1. Home
2. A category/blog listing
3. One article under a menu item

Agree on:

• www vs bare host
• HTTPS only
• Trailing slash policy (be consistent; do not mix randomly)
• Whether .html suffixes are required (usually not)

If those are undecided, fix hosting and redirects before SEF theater.

Step 2: Activate the server rewrite file

Apache / LiteSpeed / OpenLiteSpeed

1. In the Joomla root (same folder as configuration.php), rename htaccess.txt to .htaccess.
2. If the site lives in a subdirectory, set RewriteBase /yourfolder/.
3. If you get HTTP 500, comment Options +FollowSymlinks as hosts often forbid it.
4. On OpenLiteSpeed, restart the server after edits.

Full breakdown: htaccess-joomla.

IIS

Rename web.config.txt to web.config, then enable Use URL Rewriting.

nginx

.htaccess does nothing. Use try_files to index.php (and /api/ → api/index.php on Joomla 4+). Keep Use URL Rewriting aligned with that nginx config.

Step 3: Turn on SEF, then rewriting

1. Open System → Global Configuration.
2. Set Search Engine Friendly URLs to Yes. Save.
3. Confirm front-end links look like /index.php/... style SEF paths.
4. Set Use URL Rewriting to Yes. Save.
5. Confirm index.php is gone from normal menu URLs.
6. Enable System – SEF plugin if it is not already enabled (Plugin Manager). It helps SEF-ify many links embedded in content HTML.

Order matters: rename/configure rewrite first (or immediately before enabling rewriting). Enabling rewriting with no rewrite engine produces widespread 404s.

Step 4: Control aliases like a product manager

Aliases are the vocabulary of your URLs.

1. Set a clear menu alias for each important Itemid path.
2. Set article/category aliases deliberately. Auto-alias from title is fine for drafts; edit before publish for money pages.
3. Avoid duplicate aliases under the same parent context.
4. Prefer short, stable aliases. Do not stuff every keyword into the slug.
5. When you rename an alias on an indexed URL, add a 301 the same day.

Joomla builds paths from the active menu tree more than from “category folders” alone. Two menu items pointing at similar content can create two valid URLs. That is an IA problem, not an SEF bug.

Step 5: Multilingual SEF

On multilingual sites:

1. Each language needs its own menu tree and associations where required.
2. Language codes or domains must be planned (subdirectory vs domain).
3. Do not enable Unicode aliases casually if half your audience cannot type those characters.
4. Test language switcher targets resolve to associated items, not 404s.

Native multilingual is a Joomla strength. SEF mistakes show up as “wrong language URL” tickets faster than on monolingual sites.

Step 6: Joomla 4+ API routes vs site SEF

Modern stock .htaccess routes /api/ to api/index.php for Web Services. Site SEF and API routing share the rewrite engine but different front controllers. If pretty site URLs work but /api/v1/... 404s, your .htaccess may be an old Joomla 3-era file missing the API block. Merge forward from current htaccess.txt.

Duplicate URLs and canonical hygiene

Common duplicate classes:

Pattern	Cause	Fix
/index.php/alias and /alias both 200	Rewrite on, but old links still circulate	301 index.php variants to clean URLs at server or redirect component
Same article under two menus	Two Itemids	Pick one primary menu path; redirect or noindex the other
www and non-www	Host not canonicalized	Server 301 (redirect guide)
HTTP and HTTPS	TLS not forced	Server 301 + HSTS when ready
Alias change without 301	Editor renamed slug	Immediate redirect

Search engines tolerate some duplication. Humans and analytics do not.

Performance notes

SEF itself is cheap compared with uncached page generation. Rewriting is handled by the web server before PHP for the route hop. Performance work still belongs in caching, images, and extension hygiene (speed up Joomla if you maintain that URL). Do not disable SEF “for speed” unless you have measured a real rewrite misconfiguration.

Verification checklist

curl -I https://www.example.com/
curl -I https://www.example.com/your-menu-alias
curl -I https://www.example.com/index.php/your-menu-alias

Pass criteria:

1. Canonical host and HTTPS in one hop where possible
2. Clean alias returns 200
3. index.php variant 301s to clean URL (ideal) or at least is not the only working form
4. CSS/JS still load (broken RewriteBase often breaks assets)
5. Administrator login still works

Troubleshooting matrix

Symptom	Likely cause	Fix
Pretty URLs 404; /index.php/... works	Rewrite not active	Rename htaccess.txt, fix nginx/IIS, check AllowOverride
Entire site 500 after rename	Options +FollowSymlinks	Comment that line
Assets 404 in subfolder	Bad RewriteBase	Set /subfolder/
SEF On but URLs unchanged	Cache / CDN / wrong site	Clear Joomla and CDN cache; confirm you edited the live Global Config
Only some article links stay ugly	Hard-coded non-SEF links in content	Enable System – SEF; edit content; use Joomla link picker
Works on Apache staging, fails on nginx prod	.htaccess unused	Write nginx try_files
API 404 on J4+	Old rewrite file	Add /api/ block from modern htaccess.txt
Sudden ranking dip after SEO flips	URL shape changed	Restore pattern or 301 old → new

Key takeaways

1. SEF URLs make paths readable. Rewriting removes index.php. They are separate switches.
2. Activate the server rewrite file before or as you enable Use URL Rewriting.
3. Aliases and menu structure define the URL vocabulary more than a mythical “category folder” alone.
4. Changing SEO settings on a live site without redirects creates avoidable debt.
5. Keep .htaccess / nginx / IIS rules current when you move across Joomla 3 → 4 → 5 → 6.

Frequently asked questions

What are Joomla SEF URLs?

They are human-readable Joomla URLs built from aliases instead of long option= query strings. See the official SEF documentation.

How do I enable SEF URLs in Joomla?

Set Search Engine Friendly URLs to Yes in Global Configuration. To remove index.php, also enable Use URL Rewriting after configuring .htaccess, web.config, or nginx.

Why do I still see index.php in my URLs?

Use URL Rewriting is Off, or the server rewrite file is missing or ignored. SEF alone keeps index.php in the path.

Do I need .htaccess for SEF?

Not for SEF generation. Yes for Apache/LiteSpeed rewriting that removes index.php. Details: htaccess-joomla.

Should I add .html suffixes to Joomla URLs?

Usually no. Suffixes are optional cosmetics. Changing them later forces redirects across the site.

What are Unicode aliases?

When Yes, Joomla can keep native characters in new aliases instead of transliterating to ASCII. Choose based on audience and keyboard reality. It does not mass-convert existing aliases.

Will enabling SEF improve Google rankings by itself?

Not by itself. Clean URLs help usability and consistency. Rankings still need content, links, crawl health, and technical SEO.

How do I fix SEF 404 errors after enabling rewriting?

Turn Use URL Rewriting Off to confirm, restore or fix the rewrite file, set RewriteBase for subfolders, then re-enable. Use the troubleshooting matrix above.

Does this apply to Joomla 4, 5, and 6?

Yes. The Global Configuration switches and rewrite workflow are the same family. Modern files add /api/ routing for Web Services.

Can Infyways help with SEF and SEO setup?

Yes: Joomla SEO services, on-page optimization, and development.

The benefits of using Joomla are strongest when you need native multilingual sites, fine-grained access control, workflows, and structured content without assembling five plugins to get a baseline CMS. Joomla is not the most popular CMS on the public web. Measured by W3Techs in September 2026, it powers about 1.7% of sites with a known CMS (about 1.1% of all websites). WordPress leads by a wide margin. The case for Joomla is architectural fit, upgrade discipline on the modern 5.x/6.x line, and total cost when “plugin glue” becomes the real product.

This article is the honest, evidence-first version of “why Joomla.” It uses public telemetry, a version mix chart most “benefits” posts ignore, and a capability scorecard that separates popularity from product strength. For equal-weight CMS comparison, see Joomla vs WordPress and Joomla 6.1 vs WordPress 7.1. For the current release line, see Joomla 6.

What you will learn

• What public market-share numbers actually say (and what they do not)
• Why more than half of detected Joomla sites still run version 3, and what that means for buyers
• The core benefits that show up in real projects: multilingual, ACL, fields, workflows, SEO controls, Web Services
• Where WordPress or Drupal still win
• A decision checklist before you commit budget

Infyways has shipped Joomla since the Mambo era: Joomla development · Joomla upgrade · CMS development.

The one-sentence verdict

Choose Joomla when the site is a system of permissions, languages, and structured sections. Choose WordPress when the site is a content marketing machine with maximum plugin gravity. Choose Drupal when you want enterprise information architecture and can staff for it.

Popularity is a hiring and ecosystem signal. It is not a feature checklist.

Stat pack: what the data shows in 2026

CMS market share (known CMS)

W3Techs (August 2026 snapshot family) reports roughly:

CMS	Share of known CMS	Share of all websites
WordPress	~59%	~41%
Joomla	~1.7%	~1.1%
Drupal	~1.0%	~0.7%

CMS market share among sites whose CMS W3Techs can identify. Source: W3Techs, August–September 2026.

How to read this without fooling yourself

• WordPress wins the density war: freelancers, themes, WooCommerce, tutorials.
• Joomla still outranks Drupal on overall public install share in these surveys, while Drupal often punches above its weight in higher-traffic bands (see W3Techs ranking breakdowns).
• SaaS builders (Shopify, Wix, Squarespace) took much of the “easy brochure site” demand that older open-source CMS fought over a decade ago. That is market structure, not a feature score for ACL or multilingual.

Version mix among Joomla sites (the chart almost nobody publishes)

On 6 September 2026, W3Techs reported this mix among sites that use Joomla:

Version	Share of Joomla sites
Joomla 3	52.6%
Joomla 5	20.6%
Joomla 4	8.4%
Joomla 6	8.0%
Joomla 2	5.9%
Joomla 1	4.3%

Over half of detected Joomla sites still report version 3. Modern 5.x/6.x share is rising but is not the majority yet. Source: W3Techs, 6 September 2026.

Why this chart belongs in a “benefits” article

1. It proves a large installed base still needs migration and upgrade work.
2. It shows the product story for 2026 is not “everyone already left.” It is “many estates are lagging the modern core.”
3. Benefits of current Joomla (5.4 LTS bridge and 6.1.x) only apply if you are actually on those lines. Staying on unmaintained 3.x is not a Joomla benefit. It is technical debt.

Current stables as of late August 2026: Joomla 6.1.3 and Joomla 5.4.8 (release announcement). Confirm downloads on downloads.joomla.org.

Project health signals (not market share)

Signal	Evidence
Age and governance	Forked from Mambo on 17 August 2005; GPL-2.0; Open Source Matters (project history)
Codebase activity	joomla/joomla-cms on GitHub: on the order of 5k+ stars, thousands of forks, continuous release train into 2026
Security cadence	Parallel 5.4.x and 6.1.x security/bugfix drops (example: 18 August 2026)
Extension ecosystem	Thousands of listings on the Joomla Extensions Directory, smaller than WordPress.org plugins, stronger specialist density for Joomla-native problems

Capability scorecard: where Joomla actually scores

The chart below is an editorial score out of 5 for mid-market sites that need more than a blog. It is not W3Techs data. It exists so buyers stop confusing “most websites use X” with “X has the best native ACL.”

Editorial core-capability scores for typical mid-market builds. Plugin density and hiring favor WordPress. Multilingual and ACL favor Joomla. Drupal remains strong on complex IA and ACL with higher staffing cost.

Benefit 1: Native multilingual without a plugin maze

Joomla ships language packs, content associations, language switcher patterns, and per-language menus as first-class concepts. For associations, government, education, tourism, and regional brands, that core model reduces “which plugin owns translations this year” risk.

Proof in practice: fewer moving parts means fewer upgrade breakages when language plugins churn. You still need translation workflow and quality control. The CMS does not invent good copy.

Benefit 2: Access Control Lists that match real organizations

Joomla’s ACL (user groups, access levels, asset permissions) is designed for multi-role publishing: editors who can change Category A but not Category B, front-end submitters, department sites, extranets.

WordPress roles are simpler out of the box. Fine grain usually means membership plugins or custom capabilities. Drupal also has deep permissions. Joomla’s advantage is depth with a friendlier mid-market curve than Drupal for many agency teams.

Benefit 3: Structured content in core (fields, categories, tags, workflows)

Custom Fields, nested categories, tags, and workflows let you model products, directories, people, and case studies without bolting on a second content engine on day one. That is the modern replacement path for many K2-era patterns (K2 migration notes).

Benefit 4: SEO controls that sit next to content

SEF URLs, menu-driven information architecture, metadata per item, sitemaps via extensions or core-adjacent tooling, and clean .htaccess rewriting on Apache/LiteSpeed (htaccess guide). Joomla does not magically rank. It gives editors structured places to set canonical intent when the IA is planned well. Broader SEO playbook: Joomla SEO.

Benefit 5: Security model that starts with permissions, not “install a shield plugin”

No CMS is “secure by brand.” Joomla’s benefit is that least-privilege ACL, MFA options on modern lines, and a serious core security release process exist before you buy a firewall extension. You still must patch core and extensions. August 2026 core advisories are a reminder that updates are the benefit, not a slogan (6.1.3 / 5.4.8). Field hardening: Joomla security.

Benefit 6: Web Services and modern PHP for headless or hybrid builds

From Joomla 4 onward, the Web Services API and stock rewrite rules for /api/ support headless and hybrid fronts (including Next.js cases). That matters when marketing wants a modern front end but operations still need Joomla’s content and ACL model.

Benefit 7: Total cost when the alternative is plugin debt

WordPress can be cheaper to start. Joomla can be cheaper to own when the alternative is five premium plugins for multilingual, membership, fields, workflow, and role editors, plus the labor to keep them compatible every quarter.

Run the spreadsheet: licenses + hours + failure risk. That is the real benefit calculation.

Benefit 8: Open source with no per-seat CMS tax

Joomla is GPL-2.0. You pay hosting, people, and extensions you choose. You do not pay a CMS vendor per editor seat for the core. Governance longevity past 20 years is documented in the project’s own 21st anniversary retrospectives.

Feature table: benefits vs common alternatives

Need	Joomla benefit	Watch-out
Multilingual corporate site	Native associations and language framework	Plan IA and fallback languages early
Departmental publishing rights	Native ACL	Design groups before content volume explodes
Brochure site for a local shop	Possible, but often overkill	WordPress or a site builder may be faster
Woo-style commodity commerce	VirtueMart and others exist	WooCommerce ecosystem is larger
Maximum freelance supply	Smaller pool	Budget for specialists; quality can be high
Long-lived custom portal	Overrides, components, fields, API	Needs coding standards and staging discipline
Staying on Joomla 3 forever	Not a benefit	Upgrade path to 5.4 then 6.x

Who should use Joomla in 2026

Strong fit

1. Multilingual public-sector, education, association, and tourism sites
2. Intranets / extranets with real permission matrices
3. Content estates migrating off Joomla 3 or K2 into modern com_content
4. Hybrid headless where ACL still lives in Joomla
5. Agencies that already staff Joomla and want predictable core features

Weak fit

1. Solo marketers who live inside Gutenberg and WooCommerce tutorials
2. Teams that cannot hire or retain a Joomla-capable maintainer
3. Projects that need the absolute largest plugin marketplace as a first principle
4. Sites that will never leave unmaintained Joomla 3

Myths the data kills

Myth	Reality
“Nobody uses Joomla anymore.”	~1.1% of all sites and ~1.7% of known-CMS sites is smaller than WordPress, not zero (W3Techs).
“Market share proves WordPress is always better.”	Share proves ecosystem density. Feature fit is separate (see scorecard).
“Joomla 6 means everyone upgraded.”	Detected mix still shows a Joomla 3 majority among Joomla sites as of 6 Sep 2026.
“Benefits articles should only cheerlead.”	Honest constraints build trust and better project selection.

Implementation checklist if you choose Joomla

1. Target Joomla 5.4.x or 6.1.x, not legacy 3.x for new work.
2. Inventory extensions for J6 readiness before go-live.
3. Design ACL groups and languages in week one, not month six.
4. Use staging, backups, and a written upgrade path (upgrade services).
5. Keep .htaccess / nginx rewrite rules correct for SEF and API (htaccess guide).
6. Measure success as editor throughput and permission incidents, not vanity CMS rankings.

Key takeaways

1. Joomla’s best benefits are native multilingual, ACL, structured content, and open-source ownership, not winning a popularity contest.
2. W3Techs puts Joomla near 1.7% of known CMS and 1.1% of all sites in 2026 snapshots. Use that for ecosystem planning.
3. More than half of detected Joomla sites still report version 3. Modern benefits require modern versions.
4. WordPress still wins plugin density and hiring ease. Drupal remains an enterprise IA peer.
5. Pick Joomla when the product is a permissioned, multilingual system. Otherwise pick the tool your team can operate.

Frequently asked questions

What are the main benefits of using Joomla?

Native multilingual support, fine-grained ACL, custom fields and workflows, solid SEO building blocks, Web Services for hybrid builds, and GPL licensing without a core seat tax.

Is Joomla still used in 2026?

Yes. W3Techs still measures it at roughly 1.7% of known CMS sites and 1.1% of all websites as of September 2026.

Is Joomla better than WordPress?

Not universally. Joomla is often better for multilingual and ACL-heavy sites. WordPress is often better for marketing sites that need maximum plugins and freelancers. See Joomla vs WordPress.

What is the latest Joomla version?

Joomla 6.1.3 is the current 6.x stable as of the 18 August 2026 security release, with 5.4.8 on the 5.x line. Verify on downloads.joomla.org.

Why do so many Joomla sites still run version 3?

Upgrades need extension readiness, budget, and testing. W3Techs’ September 2026 mix shows 52.6% of detected Joomla sites still on version 3. That is debt, not a feature.

Does low market share mean Joomla is dying?

Low share means a smaller mainstream funnel. The project still ships modern majors, security releases, and GitHub activity into 2026. Fit matters more than podium finishes.

When should I avoid Joomla?

Avoid it when your team only knows WordPress plugins, when you need commodity WooCommerce depth, or when nobody will maintain upgrades.

Can Infyways help evaluate or build on Joomla?

Yes. Start with Joomla development, Joomla upgrade, or CMS development.

Updated 15 October 2026 · By Abhilash Sahoo, Founder, Infyways

I tested every rule below on a real Joomla 5.4.10 site running on Apache 2.4 (XAMPP 8.2.12), installed in the /j5/ subfolder. I also compared the stock file against the Joomla 6.2.0 package. The images marked “real output” show the actual HTTP responses and log lines. Sources: Joomla’s htaccess.txt guide, Joomla’s SEF troubleshooting page and the Apache mod_rewrite docs.

What is the Joomla .htaccess file and do I need it?

On Apache and LiteSpeed, .htaccess holds per-folder server rules. Joomla’s version does four jobs:

• it turns off directory listings
• it adds two security headers
• it blocks some common exploit query strings
• it routes clean SEF URLs to index.php (and /api/ to api/index.php)

You need it if you want URLs without /index.php/. Nginx ignores the file, and IIS uses web.config.txt, which Joomla also ships. As Joomla’s security checklist notes, updates never change your live .htaccess. They only replace htaccess.txt, so after a major upgrade, compare the two files yourself.

What’s in Joomla 6.2’s htaccess.txt?

Section	What it does	Tested result
Options +FollowSymlinks, -Indexes, IndexIgnore *	Lets mod_rewrite work and turns off folder listings	No listings
X-Content-Type-Options "nosniff"	Stops browsers guessing MIME types	Header present
SVG Content-Security-Policy "script-src 'none'"	Blocks scripts when an SVG file is opened directly	Header present on .svg
Commented-out CORP/COEP headers	Optional cross-origin isolation	Off by default
Exploit rules (base64_encode, <script>, GLOBALS, _REQUEST)	Returns 403 Forbidden	403, 403, 403
Custom redirects block	Empty placeholder for your redirects	See below
# RewriteBase /	For setups where URLs don’t map to file paths	Not needed in my subfolder test
SEF section: API, then front end	Sends non-file requests to the right index.php	200, and the API needed a subfolder fix
RedirectMatch 302 ^/$ /index.php/ when mod_rewrite is missing	Keeps the site usable without rewriting	—
GZIP & Brotli section	Serves pre-compressed .css.gz and .js.gz files and avoids double compression	—

How do I enable .htaccess and remove index.php from Joomla URLs?

1. Back up any existing .htaccess. Your host may have added rules, such as the PHP version handler.
2. Copy htaccess.txt to .htaccess in the Joomla root, using the file manager or FTP. Copying keeps the original for later comparison. If a .htaccess already exists, merge the host’s lines into the new file.
3. Go to System → Global Configuration → Site → SEO Settings, set Search Engine Friendly URLs and Use URL Rewriting to Yes, and save.
4. Open an inner page. If it loads without /index.php/, it’s working.

The order matters. I turned on URL Rewriting before renaming the file, and every inner URL returned 404. Old /index.php/… links returned a 301 to the clean URL, which Apache then couldn’t serve:

If the file is named correctly and inner pages still 404, Apache is ignoring it. The server needs AllowOverride All (or at least FileInfo Options) for your folder, and mod_rewrite must be loaded. Joomla’s docs suggest a quick test: put only RewriteEngine On and a single redirect rule in the file and see whether the redirect fires.

How do I force HTTPS and www with .htaccess in Joomla?

First, set Global Configuration → Server → Force HTTPS → Entire Site. For a server-level 301, put these lines inside the stock file’s Custom redirects block. That block sits after the exploit rules and before the SEF section, inside <IfModule mod_rewrite.c>:

	## Begin - Custom redirects
	# Force HTTPS
	RewriteCond %{HTTPS} off
	RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
	# Force www
	RewriteCond %{HTTP_HOST} !^www\. [NC]
	RewriteRule ^(.*)$ https://www.%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
	## End - Custom redirects

To go the other way (www to non-www), use RewriteCond %{HTTP_HOST} ^www\.(.+)$ [NC] with RewriteRule ^ https://%1%{REQUEST_URI} [R=301,L].

Behind Cloudflare or a load balancer, Apache sees plain HTTP, and %{HTTPS} off loops forever. Add RewriteCond %{HTTP:X-Forwarded-Proto} !https to the HTTPS rule. Also set Global Configuration → Server → Behind Load Balancer to Yes. Test redirects with a 302 first, because browsers cache 301s.

Which security rules should I add to Joomla’s .htaccess?

Each of these was tested on the site and is written in Apache 2.4 syntax. Many older guides, including Joomla’s own, still show Apache 2.2’s Order Deny,Allow, which only works if mod_access_compat is loaded.

1. Stop PHP running in upload folders

This was the most useful rule in testing. A test images/evil.php ran before and returned 403 after. Put it in images/.htaccess, and also in media/ and tmp/ if no extension needs PHP there:

<FilesMatch "\.(php|phtml|phar|php[0-9])$">
	Require all denied
</FilesMatch>

2. Limit /administrator to your IP

# administrator/.htaccess
<RequireAny>
	Require ip 203.0.113.10
</RequireAny>

In my test, the allowed IP got 200 and another IP got 403. Only use this if your IP is fixed. Otherwise use Joomla’s Multi-factor Authentication or the Administrator Secret URL feature of a security extension.

3. Hide files that reveal versions or settings

<FilesMatch "\.(ini|log|sql|bak|sh|dist|md)$|^(htaccess\.txt|web\.config\.txt|README\.txt|LICENSE\.txt|configuration\.php-dist)$">
	Require all denied
</FilesMatch>

All three test files returned 403, and robots.txt still returned 200. configuration.php is PHP, so the web server doesn’t show its contents. Protect it with file permissions (444 or 440) instead.

4. Don’t duplicate security headers Joomla already sends

Joomla’s System – HTTP Headers plugin is enabled by default. It already sends X-Frame-Options and Referrer-Policy. When I also set them in .htaccess, every response carried each header twice. Configure headers, including HSTS and CSP, in the plugin, or turn the plugin off if you manage them in Apache. Our Joomla security guide covers the rest of the hardening.

Should I add caching and compression to .htaccess?

The stock GZIP section only serves .css.gz and .js.gz files that already exist. It doesn’t compress anything itself. If your host doesn’t already compress responses, add mod_deflate and browser caching:

<IfModule mod_deflate.c>
	AddOutputFilterByType DEFLATE text/html text/css text/javascript application/javascript application/json image/svg+xml
</IfModule>
<IfModule mod_expires.c>
	ExpiresActive On
	ExpiresByType image/webp "access plus 1 year"
	ExpiresByType image/png "access plus 1 year"
	ExpiresByType image/svg+xml "access plus 1 year"
	ExpiresByType font/woff2 "access plus 1 year"
	ExpiresByType text/css "access plus 1 month"
	ExpiresByType text/javascript "access plus 1 month"
</IfModule>

With these rules, HTML and CSS responses came back with Content-Encoding: gzip, and CSS files returned Cache-Control: max-age=2592000 (30 days). Joomla’s own warning in the file still applies: if you see ERR_CONTENT_DECODING_FAILED or a broken layout, the server is already compressing, so remove one of the two. Don’t also turn on Global Configuration → Server → Gzip Page Compression if the server compresses HTML.

Why does .htaccess cause a 500 Internal Server Error?

Apache refuses to serve any page in a folder whose .htaccess contains an invalid line. A single typo did this on my test site, and the error log named the exact problem:

Symptom	Cause	Fix
500 right after the rename	Options +FollowSymlinks isn’t allowed by the host	Comment it out, as the file itself suggests
500 with “Invalid command ‘php_value’”	PHP runs as FastCGI or FPM, not mod_php	Remove it and use .user.ini (see Joomla php.ini settings)
500 with “Invalid command ‘Header’” or “‘Expires…’”	The module isn’t loaded	Wrap the lines in <IfModule> or ask the host
Home page works, inner pages 404	File not renamed, AllowOverride None, or mod_rewrite off	Rename the file, then check the server config
Subfolder site: inner pages 404	URLs don’t map to file paths (aliases, userdir)	Uncomment RewriteBase /yourfolder
Subfolder site: API returns the front-end 404	Stock rule matches ^/api/ only	Change it to ^/yourfolder/api/
ERR_TOO_MANY_REDIRECTS	HTTPS rule behind a proxy, or Joomla’s Force HTTPS fighting the proxy	Add the X-Forwarded-Proto condition and turn on Behind Load Balancer
Broken CSS or JS, ERR_CONTENT_DECODING_FAILED	Double gzip	Comment out the GZIP section
Changes have no effect on OpenLiteSpeed	Rules are read at startup	Restart the web server, as noted in the file

Read the exact error in your host’s error log, or in logs/error_log on Apache. For a mod_rewrite-specific 500, see our Joomla mod_rewrite 500 fix.

Does .htaccess work for Joomla in a subfolder?

Mostly. With Joomla in /j5/, front-end SEF URLs worked without changing RewriteBase, because the folder maps directly to the URL. The API didn’t work. The stock condition RewriteCond %{REQUEST_URI} ^/api/ never matched /j5/api/…, so API calls went to the front end and returned 404. Changing both API lines fixed it:

	RewriteCond %{REQUEST_URI} ^/j5/api/
	RewriteCond %{REQUEST_URI} !^/j5/api/index\.php

A .htaccess in the parent folder also applies. If another CMS lives in the root, make sure its rules don’t capture /j5/ requests.

What is the Nginx equivalent of Joomla’s .htaccess?

Nginx doesn’t read .htaccess. The routing part translates to try_files in the server block:

location /api/ {
    try_files $uri $uri/ /api/index.php?$args;
}
location / {
    try_files $uri $uri/ /index.php?$args;
}
location ~* /(images|media|tmp)/.*\.php$ {
    deny all;
}

Add the HTTPS redirect, headers and caching as Nginx directives, then run nginx -t and reload Nginx.

Frequently asked questions

Where is the .htaccess file in Joomla?

Joomla ships it as htaccess.txt in the site root, next to configuration.php. It only works once you rename or copy it to .htaccess. Turn on “show hidden files” in your file manager to see it.

Is the Joomla 6.2 htaccess.txt different from Joomla 5?

No. The file in the Joomla 6.2.0 package is identical to the one in 5.4.10. When upgrading from 5 to 6, you don’t need to change your .htaccess unless you edited the stock rules.

Does a Joomla update overwrite my .htaccess?

No. Updates only replace htaccess.txt. Your live .htaccess stays as it is, so compare it with the new htaccess.txt after major upgrades.

How do I remove index.php from Joomla URLs?

Rename htaccess.txt to .htaccess first. Then set both Search Engine Friendly URLs and Use URL Rewriting to Yes in Global Configuration → Site.

Why do I get a 500 error after renaming htaccess.txt?

Usually Options +FollowSymlinks isn’t allowed on the host, so comment it out. Otherwise check the error log for an “Invalid command” line naming the bad directive.

Where do I put custom redirects in Joomla’s .htaccess?

Inside the “Begin – Custom redirects” block. It comes after the exploit rules and before the SEF section, so your 301s run before Joomla’s routing.

Can .htaccess make Joomla secure on its own?

No. It blocks some attack patterns and can stop uploaded PHP from running, but updates, file permissions, MFA and backups matter more.

Should I use RewriteBase in Joomla?

Only when URLs don’t map to file paths, for example with aliases or user directories. A normal subfolder install worked without it in my test, but its API rules needed the folder name.

Does Joomla’s .htaccess work on Nginx or IIS?

No. Nginx needs try_files rules in its config, and IIS uses Joomla’s web.config.txt, renamed to web.config. LiteSpeed reads .htaccess, and OpenLiteSpeed needs a restart after changes.

Do I still need .htaccess on Joomla 6?

Yes, on Apache or LiteSpeed, if you want clean URLs without index.php, the exploit filters and the API routing. Joomla 6.2 runs without it, but URLs then include /index.php/.

Planning the move to the latest version? Run our Joomla 6 compatibility check or see our Joomla upgrade service.

K2 does not work on Joomla 5 or Joomla 6 because there is no supported K2 release for those versions. If you upgraded first, K2 views fatal, but the data usually still sits in #__k2_* tables. The fix is not “force K2 to load.” The fix is to copy K2 into native Joomla articles on a Joomla 3.10 site with Migrate K2 Pro, then uninstall K2 and climb to Joomla 5 or 6.

That is why so many owners feel stuck on Joomla 3: security pressure goes up, K2 will not follow, and a manual move of thousands of items looks impossible. Migrate K2 Pro (by Infyways Solutions / JoomlaX) is the operator path listed on the Joomla Extensions Directory: one component run for items, categories, tags, extra fields, images, and 301 redirects, with live progress, export, and full rollback.

Product page: Migrate K2 Pro on JoomlaX. Docs: Migrate K2 Pro documentation. Deep how-to for the copy-and-upgrade ladder: Migrate K2 to Joomla articles.

What you will learn

• Why K2 breaks on Joomla 4, 5, and 6
• What to do if you already upgraded and K2 is dead in admin
• Why uninstalling K2 without a content copy destroys SEO
• What Migrate K2 Pro migrates (and what it exports only)
• Step-by-step recovery and migration on Joomla 3.10
• When to use the tool vs Infyways K2 migration services

Two ways to fix it: run the migration yourself with Migrate K2 Pro (steps below), or let us do it: our K2 to Joomla articles migration service moves items, categories, extra fields, images, tags and URLs, then upgrades the site to Joomla 5 or 6.

Why K2 fails on Joomla 5 and 6

K2 was a full content stack on Joomla 3: items, nested categories, extra fields, tags, galleries, attachments, and images under media/k2/. Joomla core later grew custom fields, tags, and nested categories. The K2 project did not ship a supported Joomla 4 / 5 / 6 line.

So in 2026 the failure mode is mechanical:

What you did	What you see	What the data is doing
Still on Joomla 3 with K2	Site works, but you cannot upgrade safely	K2 tables are readable
Upgraded to Joomla 4/5/6 with K2 still installed	White screens, fatal errors, missing menus	Rows often remain in #__k2_* but PHP will not run
Uninstalled K2, then upgraded	404s on old URLs, empty content areas	Content may be gone or orphaned

You cannot “patch K2 to work on Joomla 5.” You migrate off K2 while Joomla 3 can still execute it.

If K2 already broke after a Joomla 5 or 6 upgrade

Do not uninstall K2 on the broken production site until you know the tables and a backup exist.

1. Take a full backup (files + database) of the broken site.
2. Restore a Joomla 3.10 copy to staging (from a pre-upgrade backup if that is all you have).
3. Confirm K2 loads on that Joomla 3 staging copy and item counts look right.
4. Run Migrate K2 Pro there (next sections).
5. Only after articles, fields, tags, images, and redirects look correct, plan the upgrade ladder on staging: 3.10 → 4.4 → 5.4 → 6.x as your extensions allow.
6. Cut over with a tested plan, or hand the estate to Joomla K2 migration services / Joomla upgrade.

If you have no Joomla 3 backup and only a dead Joomla 5/6 site with K2 tables left, stop and get a recovery plan. Exporting raw #__k2_* tables is possible, but rebuilding without a working K2 admin is a service job, not a one-click afternoon.

The wrong fixes people try

Approach	Result
Stay on Joomla 3 forever	Temporary peace, rising security and hosting risk
Hack K2 PHP for Joomla 5	Unsupportable. Breaks again on the next core update
Upgrade first, keep K2	K2 fatals. Content trapped
Uninstall K2, hope articles appear	They do not. URLs and extra fields vanish
Manual SQL copy	Easy to miss images, tags, fields, and redirects

The correct row: copy to com_content on Joomla 3.10, then upgrade.

Migrate K2 Pro: the JED migration fix

Migrate K2 Pro is a professional Joomla 3.10+ component from Infyways Solutions. It reads K2 and writes native Joomla content. It does not delete or rewrite K2 rows. JED summary: items, categories, tags, extra fields, images, URL redirects, live progress, AJAX batches, CSV/JSON/SQL export, full rollback, migration log.

Store listing: joomlax.com/migrate-k2-pro.html (Joomla 3, v1.2.1, 30-day money-back). Requirements from the listing: PHP 7.2+, MySQL 5.6+ / MariaDB 10.1+, K2 installed with data, writable images/, ZipArchive for CSV export.

What it migrates

K2	Native Joomla
Items	Articles (title, alias, intro/full text, meta, author, dates, state, featured, hits, access, language)
Categories	Content categories with parent/child hierarchy
Tags	com_tags plus article associations
Extra fields + values	Custom field groups, fields, and per-article values
Item images, captions, credits	Files under a configurable path (default images/k2-migrated) plus intro/full image JSON
Item URLs	com_redirect 301s for /component/k2/item/{id} and /component/k2/item/{alias}

What it does not turn into core articles

Comments and attachments are available via export (CSV, JSON, SQL), not as core article comments. Author profile pages have no native K2 equivalent. Plan those before you delete K2. Field display chrome after migration is covered in Joomla custom fields.

Operator features that matter on large sites

• AJAX batches so 10,000+ items do not time out the browser
• Live progress (for example 4,521 / 10,000) with phase steps: Categories → Fields → Tags → Items
• Pause / resume and auto-retry on network errors
• Idempotent re-runs without duplicate categories
• One-click rollback of migrated articles, fields, tags, and MigrateK2-tagged redirects
• Dashboard checks: K2 detection, counts, media folder

Step 1: Back up and install on Joomla 3.10

1. Full backup of the Joomla 3 site (or the restored Joomla 3 staging copy).
2. Download from JoomlaX or follow the JED listing.
3. Extensions → Manage → Install and upload the com_migratek2pro_….zip package.
4. Open Components → MigrateK2 Pro.
5. Confirm the dashboard sees K2 and sensible item/category counts.

Step 2: Configure options

1. Click Options.
2. Set Image Base Path (default images/k2-migrated).
3. Leave Skip Trashed on unless you need trashed K2 rows.
4. Set Fallback User if some K2 authors have no matching Joomla user.
5. Save.

Optional: use dashboard CSV / JSON / SQL export for an offline archive before you migrate.

Step 3: Run the migration

1. Click Start Migration and confirm you have a backup.
2. Watch the live progress bar until completion.
3. Open Content → Articles, categories, tags, and custom fields. Spot-check intro images and a few extra field values.
4. Enable System – Redirect if it is off, then hit a sample old /component/k2/item/... URL and confirm a 301.
5. Only then uninstall K2 on that staging site and begin the core upgrade path.

Full phase notes and field map: Migrate K2 to com_content and documentation.

Step 4: After native articles exist, leave Joomla 3

Suggested ladder (adjust for your extensions):

1. Joomla 3.10 with native articles and redirects verified
2. Joomla 4.4
3. Joomla 5.4
4. Joomla 6.x when your template and extensions are ready (Joomla 6 guide)

Need a managed cutover: Joomla upgrade services and K2 migration services.

Tool vs done-for-you

Situation	Use
Clean Joomla 3.10 + standard K2	Migrate K2 Pro on staging
Already on Joomla 5/6, no Joomla 3 backup	Recovery + service
Custom K2 templates, heavy attachments, comments product	Service or hybrid
Agency multi-site rollouts	Tool + outsource Joomla or white-label support

Support: support.joomlax.com.

Short on time? Send us your site details through the K2 migration service page and we will review the K2 setup and quote the migration and upgrade.

Related guides and services

• K2 to com_content: manual migration notes
• Joomla custom fields (replacing K2 extra fields)
• Joomla upgrade services

Key takeaways

1. K2 will not run on Joomla 5 or 6. That is the whole problem.
2. Do not uninstall K2 until content lives in native articles.
3. Migrate on Joomla 3.10 with Migrate K2 Pro.
4. Keep SEO with automatic com_redirect 301s, then upgrade core.
5. Use Infyways K2 migration services when the site is already broken or non-standard.

Frequently asked questions

Why is K2 not working in Joomla 5 or 6?

Because there is no supported K2 release for those versions. The component’s PHP targets Joomla 3. After an upgrade, K2 views fail even if database tables remain.

What is the easiest migration fix?

Copy K2 into native Joomla articles on Joomla 3.10 with Migrate K2 Pro, verify redirects, uninstall K2, then upgrade. That is the path Infyways documents and ships.

Will I lose my K2 data?

Migrate K2 Pro only reads and copies. It does not modify K2 tables. Always take a full backup first. Rollback removes migrated Joomla content, not original K2 rows.

Can it handle large K2 sites?

Yes. AJAX batch processing, live progress, resume, and auto-retry are built for large libraries (thousands of items). Export first if you want an offline safety copy.

Does Migrate K2 Pro run on Joomla 5?

No. It runs on Joomla 3.10+ where K2 still executes. After migration, the content runs on Joomla 5 and 6 as native articles.

Do I need coding knowledge?

No for a standard K2 site. Install, configure image path, start migration, verify. Custom templates and attachment workflows may need a developer.

Where do I get the extension?

Joomla Extensions Directory listing, JoomlaX product page, and documentation.

Prefer a done-for-you service?

Use Joomla K2 migration services when production is already on Joomla 5/6, backups are incomplete, or content rules are custom.

Joomla CSS changes are not showing when the browser never loads the file you edited, or it still loads an old copy. On Joomla 4.1, 5, and 6 the live sheet is media/templates/site/{template}/css/user.css on the active template. A child does not load the parent’s user.css. The Joomla 4.0 path templates/cassiopeia/css/user.css is ignored. Cache, Page Cache, and a CDN can keep the previous sheet after the path is already right.

This is the operator checklist. It is not a design tutorial. Put the file on the template style the public page actually uses, prove the Network tab requests it, then purge every layer in front of PHP. Safe placement (child, not core) is covered in Customize Joomla without editing core. Click-by-click child setup is How to set up a Joomla child template.

The old Joomla 4.0 folder is a dead end. The child media folder is the live sheet. The child does not inherit the parent’s user.css.

What you will learn

• Where Cassiopeia actually loads user.css on Joomla 4.1, 5, and 6
• Why a child looks stock after you already styled the parent
• How to create the file in Template Manager (filename user, no suffix)
• How to prove the sheet is requested (or 404) in the browser Network tab
• Which cache layers still serve yesterday’s CSS after a good save
• When the file loads and the page still looks unchanged (selector weight)

Official references: Cassiopeia Template Customisation, Child Templates (User Manual), Cache.

What you see	Likely cause	Wrong rabbit hole
No change anywhere	File is on the parent, the old 4.0 path, or a template style that is not assigned	Editing template.min.css
Change on Home, not on a landing page	That menu item uses a different template style	“Joomla CSS is broken”
Child site looks stock	You styled Cassiopeia. The child does not load parent user.css	Recreating the child
Network 404 on user.css	File is missing in that template’s media/…/css/ folder, or you named it user.css.css	Clearing cache only
Network 200, still old colours	Joomla cache, Page Cache, browser disk cache, or CDN	Rewriting selectors
File 200, still no visual change	Selector does not match, or a later sheet / inline style wins	Reinstalling Cassiopeia

Step 1: Confirm which template style the page uses

CSS lives on a template, not on “the site.”

1. Open the public URL that should show the change. Note the exact page, not a random inner article.
2. System → Site Template Styles. Note the default (star).
3. Open the menu item for that URL. Template Style may override the default.

If Home uses cassiopeia_brand and the page you tested uses stock Cassiopeia, you can edit the child all day and the landing page will stay stock. Assigning styles is not the same as creating a child. Creating a child does not switch the frontend until a style is assigned.

Club templates (Helix, T4, Gantry, YOOtheme) often have their own “custom CSS” fields. Those are not Cassiopeia user.css. If the site is not Cassiopeia, use that template’s documented custom-CSS slot, still on a child if the vendor supports one. Do not paste into compiled Bootstrap in media/.

Step 2: Put user.css on the media path of that template

On Joomla 4.1 and later (5 and 6 included), Cassiopeia loads:

media/templates/site/{template}/css/user.css

Examples:

• Parent Cassiopeia: media/templates/site/cassiopeia/css/user.css
• Child named cassiopeia_brand: media/templates/site/cassiopeia_brand/css/user.css

The Template Manager css folder is that media folder. It is not templates/cassiopeia/css/ on current Joomla.

The Joomla 4.0-only path templates/cassiopeia/css/user.css was moved into media/ when child templates landed. A file that still sits there will not run. Copy the rules into the media path, then delete or ignore the old copy so you do not edit the ghost next month.

In Template Manager:

1. System → Templates → Site Templates.
2. Open the active template (the child if you use one).
3. New File. Select the css folder.
4. Filename: user with no suffix in the name field. File type: .css.
5. Create, paste rules, Save.

If you type user.css in the name field and also pick .css, you often get user.css.css. The template looks for user.css. The extra suffix 404s. Name the file user only.

Cassiopeia registers user.css with a high asset weight so it loads after the template sheet. Keep !important rare. If a rule still loses, the file is loading and the selector is the problem (Step 7), not the path.

Do not edit template.min.css, vendor/bootstrap, or files under media/templates/site/cassiopeia/ on the parent if you already assigned a child. Parent updates replace those files. The child media folder is the overlay. Setup: Joomla child template.

Step 3: Copy parent rules into the child (they do not inherit)

A child does not load the parent’s user.css.

That is the usual “I created a child and the site went stock” report. You already had rules in Cassiopeia. You created cassiopeia_brand, assigned it, and left the CSS on the parent. The child starts with an empty css folder. Cassiopeia’s file is still on disk. The public style does not read it.

Fix:

1. Open the parent user.css (if it exists).
2. Copy the rules into media/templates/site/{child}/css/user.css.
3. Save. Leave the parent stock going forward so the next Cassiopeia update cannot wipe the live sheet.

Two user.css files on purpose (parent plus child) is not a cascade. Only the assigned template’s file loads. If some menu items still use the parent style, those pages will keep the parent sheet. That can look like “CSS works on Home only.” It is two styles, two files.

Joomla 6 Cassiopeia Extended is already a child. Put user.css on Extended (or on your child of Cassiopeia), not on the parent. Colour and font params on the style write CSS variables such as --headerbg. You can reuse those variables inside user.css. You still need the child’s file for rules the params cannot do.

Step 4: Prove the browser requests user.css

Guessing from “I saved” wastes time. Use the Network tab.

1. Open the public page. Hard refresh once so you are not looking at a frozen inspector session.
2. DevTools → Network → filter CSS.
3. Reload.

You want a request whose URL contains user.css under /media/templates/site/{the-active-template}/css/.

Read the status:

• 404: the file is not in that folder, or the name is wrong (user.css.css, custom.css, user.min.css). Create it again with filename user.
• 200, tiny file, your rules missing: you are viewing a different template’s sheet, or you edited FTP on the parent while the site uses the child.
• 200, body has your rules, page still old: cache or CDN (Step 5), or selector weight (Step 7).
• No user.css request at all: the active template is not Cassiopeia (club template custom-CSS field), or the template’s asset map never registered template.user. Club docs win. Do not invent a Cassiopeia path on Helix.

View Source and search user.css. If the <link> href points at /media/templates/site/cassiopeia/css/user.css while you edited cassiopeia_brand, the assigned style is still the parent.

Step 5: Purge Joomla cache, Page Cache, browser, and CDN

A correct user.css can still look unchanged because something in front of the file is serving bytes from earlier.

Order:

1. System → Maintenance → Clear Cache → Delete All. If Cache Handler is Redis or Memcached, emptying cache/ in FTP does nothing. Handler and permissions: Joomla cache not clearing.
2. If System – Page Cache is enabled, guests get a full HTML snapshot that still points at a hashed or cached CSS URL. Clear cache again, then test logged out. Guest vs login layers: Joomla cache showing old content.
3. Hard refresh the browser (or a private window). “Use Browser Caching” on the Page Cache plugin will not be fixed by Joomla Clear Cache.
4. Purge the CDN (Cloudflare, host “Optimize,” a LiteSpeed cache plugin). Origin can already show the new sheet while the orange-cloud hostname does not.

Conservative Joomla cache does not usually compile user.css into one blob, but page-level HTML can keep an old <link> with a stale query string. Progressive cache can keep an old module wrapper class you were targeting. Clear, then retest as a guest.

If you use a CSS extension or a page builder “compile” button, that is a fifth store. Joomla Clear Cache does not empty a builder’s CSS cache. Purge that UI too.

Step 6: Confirm you did not hide the change with CSS

If Network shows 200 and the response body contains your property, Joomla loaded the file. The cascade lost.

Check:

• The class or id you targeted exists on this template. Cassiopeia class names are not Protostar. .container-header is not .header. Inspect the live node.
• A later rule wins: template params (Joomla 6 colour settings), a custom module with inline style, or a page-builder CSS file loaded after user.css.
• You set display: none on a parent while testing and forgot. The “change” is that the block is gone, not that colour failed.
• You edited a print or RTL sheet. Cassiopeia has direction-specific presets. Test the same language and direction as the public page.

Specificity beats “I used user.css.” Raise the selector to match the live markup. Do not edit core Bootstrap to “make it stick.”

Need a layout change rather than a colour? That is an html/ override, not more CSS. Decision tree: customize without editing core. Visual work you do not want to own: Joomla design services.

Path first. Then child vs parent. Then cache. Then CDN and the browser. Then selector weight. Do not skip to !important.

Key takeaways

1. On Joomla 4.1, 5, and 6, Cassiopeia user.css is media/templates/site/{template}/css/user.css on the active template.
2. A child does not load the parent’s user.css. Copy the rules into the child’s media folder when you switch styles.
3. The Joomla 4.0 path templates/cassiopeia/css/user.css is a dead file. The Template Manager css folder is media.
4. New File: name user with no suffix, type .css. user.css.css 404s.
5. Prove the Network tab requests the sheet under the assigned template name. 404 is a path problem. 200 with old colours is cache or CDN.
6. Clear Joomla cache, watch Page Cache for guests, hard-refresh the browser, purge the CDN.
7. If the file body already has your CSS, fix the selector. Do not reinstall the template.
8. Keep the file on a child template so the next Cassiopeia update cannot wipe the live sheet.

Frequently asked questions

Why are my Joomla CSS changes not showing?

The public page is not loading the user.css you edited. The file is on the parent, on the old templates/…/css/ path, or on a template style that is not assigned. Or cache and CDN still serve the previous sheet. Confirm the Network URL, then purge.

Where is Cassiopeia user.css on Joomla 5 and 6?

media/templates/site/{template}/css/user.css. For a child, replace {template} with the child element name such as cassiopeia_brand. Official overview: Cassiopeia Template Customisation.

Does a Joomla child template inherit the parent user.css?

No. Cassiopeia loads user.css only from the template that is assigned. Copy parent rules into the child file when you create the child. User manual: Child Templates.

Why did the Template Manager create user.css.css?

The name field already had user.css and the type was .css. Joomla concatenated them. Create the file again as user plus type .css.

I cleared cache and the old CSS is still there. What next?

Clear Cache only empties Joomla’s handler. Guests may still hit System – Page Cache, the browser disk cache, or Cloudflare. Test a private window against origin, then purge the CDN. See cache not clearing if Delete All does nothing.

Can I edit template.min.css instead of user.css?

No. Updates replace compiled template CSS. user.css on the active (child) template is the supported overlay. Same rule as other custom files: customize without editing core.

My CSS file loads but a module still looks stock. Is that CSS?

Maybe. Confirm the module actually rendered. Unpublished, Access, and dates are a different diagnosis: Joomla module not showing. If the HTML is present and unstyled, you are still on this article.

Conclusion

When Joomla CSS changes are not showing, believe the Network tab before you believe the Template Manager save message. The live sheet is user.css under media/templates/site/ for the assigned template. Children do not borrow the parent file. The old templates/cassiopeia/css/ location is Joomla 4.0 history. After the path is right, purge Joomla cache, Page Cache, the browser, and the CDN. If the response already contains your rules, inspect the node and fix the selector. If the change you wanted was behaviour, not colour, that is user.js: Add custom JavaScript to Joomla and Joomla JavaScript not working.

If the site is a mix of club CSS fields, a CDN, and a half-assigned child, Joomla support and maintenance is faster than guessing folders on production.

Joomla 6.2.0 “Mwezi” is the latest Joomla release, published on 13 October 2026. It is a minor release on the Joomla 6 line, so a 6.1 site updates in place, and a Joomla 5.4 site can upgrade straight to 6.2. 6.2 brings TinyMCE upgrades, more control over article images, new Login module options, security flags for extension updates, and XOAuth2 for email. Joomla 5.4.10, released the same day, is the last bugfix release for Joomla 5. This guide covers what 6.2 adds, what 6.x changed from 5.x, and how to upgrade safely.

Joomla 6.0 shipped in October 2025 and 6.1 followed. 6.2.0 is now the version to run (download 6.2.0, Joomla 6.2 announcement). The project says 6.2 is the result of more than 130 pull requests from volunteers. The next patch, 6.2.1, is planned for 24 November 2026.

Did the 6.2 update fail or break something? The checksum or JSON error, “not compatible” warnings, the language switcher and override notices are covered in Joomla 6.2 update problems.

If you need a managed path from 3.x, 4.x, or 5.x onto 6.2, use Infyways Joomla Upgrade services.

What you will learn

• Where Joomla 6.x stands after the 6.2.0 release on 13 October 2026
• What Joomla 6.2 shipped, checked against the official release notes
• The 6.2 release timeline and the planned 6.2.x patch dates
• How 6.x differs from 5.x and 4.x
• A practical upgrade checklist for site owners and developers
• When to call in Joomla upgrade or support help

Official schedule source: Joomla Project Roadmap.

What’s new in Joomla 6.2?

Joomla 6.2 is a feature release focused on content editing, site-builder options and safer updates. It does not change the architecture. The main changes, from the Joomla 6.2 announcement and the 6.2.0 changelog:

Area	What changed in 6.2	Why it matters
TinyMCE editor	Image and media buttons open the Joomla Media Manager. A unified link selector modal serves the article, contact and menu buttons. Native Read More button. TinyMCE follows Joomla’s text filter by default. TinyMCE updated and untranslated toolbar-builder buttons fixed	Fewer clicks for editors. HTML follows your Global Configuration filters instead of TinyMCE’s own allowed elements, so test custom markup
Articles and categories	Separate CSS class fields for an intro or full-text image and its surrounding figure. Subcategory images in category lists and blogs (content, contacts, newsfeeds). Fix for categories that looked empty when their articles were scheduled for the future	More styling control without overrides
Modules	Login module options to hide the “Forgot your password?” and “Forgot your username?” links. Submenu toggling fixed for deeper levels in the standard menu layout	Removes two common reasons for template overrides
Administrator	Fancy Select search results show their group name (useful for module positions). Redesigned backend Help page	Faster admin work
Installation and updates	More precise web installer errors. Developers can flag an extension release as a security update (severity None to Critical). Flagged updates are highlighted in System → Update → Extensions and on the dashboard quick icon	You can see which extension updates are security fixes
Email	Generic XOAuth2 for SMTP authentication: Joomla stores a refresh token from the mail provider instead of the account password	Relevant for Microsoft 365 and Google Workspace mail
Developers	Reorganised JavaScript and CSS asset build pipeline. Also in the changelog: an Enum form field, a language fallback chain, the option to prefer the highest-severity update, and clearer SVG upload errors	Extension developers should rebuild and retest assets

Article preview without a frontend login is not in 6.2.0. It was added during the betas and then reverted (pull request #48325). Do not plan around it.

Joomla 6.2 release timeline

Milestone	Date	Status
Alpha 1 to 3	26 May to 21 July 2026	Done
Beta 1 (feature freeze)	18 August 2026	Done
Beta 2 and Beta 3	1 and 15 September 2026	Done
Release Candidate	29 September 2026	Done
6.2.0 stable	13 October 2026	Released, latest
6.2.1	24 November 2026	Planned
6.2.2 to 6.2.4	5 January, 16 February, 30 March 2027	Planned

Planned dates can change with volunteer availability (Joomla roadmap). Release managers for 6.2: Viviana Menzel and Martin Kopp.

Production rule: run Joomla 6.2.0 on live sites once your extensions are verified on staging. If an extension you depend on is not ready, stay on 6.1.4, the newest 6.1 release, while you wait, and keep it patched. Test on a staging copy first. launch.joomla.org is fine for quick experiments.

Joomla 5.4 after 13 October 2026: 5.4.10 was the last bugfix release for Joomla 5. Security fixes for 5.4 continue until 12 October 2027. The project calls 5.4 to 6.2 an upgrade, not a migration: most extensions work with the Behaviour – Backward Compatibility 6 plugin enabled.

Upgrade notes for 6.2

Read the official Joomla 6.1 to 6.2 upgrade notes and the 6.2.0 changelog before you upgrade. Developers should note the deprecations retargeted to Joomla 7, the deprecated CMS Crypt package, and the rebuilt asset pipeline.

What Joomla 6.x already changed vs 5.x and 4.x

Joomla 6.0 was the architectural jump. 6.1 and 6.2 are incremental on that base.

Area	Joomla 4.x	Joomla 5.x	Joomla 6.x
Focus	Bootstrap 5 admin, accessibility	Modern PHP, compatibility plugin era	Framework cleanup, new packages, stricter future path
PHP	7.2+ era evolving to 8.x	PHP 8+ focus	PHP 8.3.0 minimum, 8.4 recommended
Extensions	Many older extensions still ran	Compat plugin smoothed upgrades	Test every extension; compat is a bridge, not a forever plan
APIs	Mixed legacy	Deprecations increasing	Renderer, Console, Preload, DB/HTTP modernization
Support clock	Ended	5.4 bugfix ended 13 Oct 2026 (5.4.10)	6.2.0 current; bugfix to 17 Oct 2028

Core 6.0 themes that still matter for upgrades: stronger database patterns, HTTP / cryptography modernization, console tooling, preload helpers, and the compatibility plugin for migration. Details live in Joomla 6 migration docs and the roadmap.

Joomla 4, 5 and 6 support timeline (end of life dates)

Joomla 4 is end of life. Its regular bugfix support ended on 15 October 2024 and security fixes ended in October 2025, so a Joomla 4 site no longer receives patches. Move it to 5.4 and then to Joomla 6.

Version	Released	Bugfix support ends	Security support ends
Joomla 3.10	August 2021	Ended	17 August 2023 (end of life)
Joomla 4.4	October 2023	15 October 2024	October 2025 (end of life)
Joomla 5.4	14 October 2025	13 October 2026	12 October 2027
Joomla 6.x	14 October 2025	17 October 2028	16 October 2029

What Joomla 4 introduced (still in 6)

Many features people still call “new” arrived in Joomla 4: the Atum administrator and Cassiopeia front-end templates, the Web Asset Manager, the rebuilt Media Manager, Workflows, Web Services API, two-factor authentication and a cleaner routing system. Joomla 5 and 6 kept these and removed the legacy layers around them. Dates from the Joomla roadmap; upgrade steps in How to upgrade Joomla 3 to Joomla 6.

How do I upgrade to Joomla 6.2?

From 6.1, it is a normal minor update in System → Update → Joomla. From 5.4, disable Behaviour – Backward Compatibility, enable Behaviour – Backward Compatibility 6, and upgrade. Older versions go through 5.4 first. The steps below apply to every path.

Why you should upgrade now

1. Support calendar. Joomla 5 bug fixes ended with 5.4.10 on 13 October 2026. Security patches continue until 12 October 2027, but bug debt stacks up if you stay behind.
2. Extension vendors. Good vendors already ship builds that declare Joomla 6.2. Check each vendor’s changelog before you update.
3. 6.2 editor and language changes. TinyMCE filter defaults and language fallback can change what editors see. Staging catches that before clients do.
4. Email security. If your SMTP runs on Microsoft 365 or Google Workspace, XOAuth2 lets you stop storing the mailbox password in Joomla.

Need hands-on help: Joomla Upgrade, ongoing Joomla support and maintenance, or hire Joomla developers. For K2 sites stuck on old stacks, pair the CMS upgrade with K2 migration services.

Step 1: Inventory and hosting check

1. Export installed extensions, templates, custom overrides, and PHP version.
2. Confirm hosting meets Joomla 6 PHP requirements (modern 8.x). Upgrade hosting before the CMS if needed.
3. Mark every extension as: J6-ready, needs compat plugin, or replace. A Joomla 6 compatibility check with the free Migration Scanner lists the exact files and lines for each one.
4. Filter the Joomla Extensions Directory by Joomla 6 where vendors list readiness.

Step 2: Stage, never upgrade live first

1. Full backup (files + database).
2. Clone to staging with the same PHP version you will use in production.
3. From 5.x, update to the newest 5.4.x first, then upgrade the staging copy to 6.2.0.
4. From 6.1.x, update the staging copy to 6.2.0 and test editors, menus and multilingual switching.

Download packages from downloads.joomla.org. Report core issues at issues.joomla.org.

Step 3: Compatibility plugin, then remove the crutches

1. Enable the Joomla compatibility / BC plugin only while you patch or replace broken extensions.
2. Retest logins, checkout, forms, multilingual switching, and search.
3. Fix or replace templates that assume removed APIs.
4. Plan to turn the compat plugin off once everything is native-ready. It is a bridge.

Upgrade notes: Joomla 6.1 to 6.2 upgrade notes. If the update itself fails, see Joomla 6.2 update problems.

Step 4: QA before production cutover

1. Frontend: home, menus, articles, category blogs, media, forms.
2. Admin: article edit (TinyMCE readmore/links), installer update view, language strings.
3. SEO: SEF URLs, redirects, sitemaps, canonical tags.
4. Performance: cache, CDN, image formats (WebP converter for Joomla).
5. Security: install the current 5.4.x or 6.x security releases on whatever you run today. Do not wait for the upgrade to patch.

When staging is green, schedule production during low traffic, restore plan in hand. Infyways can run that cutover under Joomla Upgrade or white-label via outsource Joomla services.

Developer action plan for 6.2

1. Test extensions on 6.2.0 now, and on 6.2.1-dev nightly builds before 6.2.1.
2. Rebuild and retest any assets that depend on the core JavaScript and CSS pipeline.
3. Adopt EnumField where enums already model your options.
4. Re-test TinyMCE integrations after the text-filter default change.
5. Watch language packs for fallback-chain behavior on incomplete translations.
6. Flag security releases in your update server so 6.2 highlights them for users.
7. Read the 6.1 to 6.2 upgrade notes for deprecations now targeted at Joomla 7.

Agencies maintaining many client sites: outsource Joomla services and Joomla extension development.

Key takeaways

1. Latest: Joomla 6.2.0, released 13 October 2026. Next patch 6.2.1 is planned for 24 November 2026.
2. 6.2 is a minor release: 6.1 updates in place, and 5.4 upgrades directly.
3. Headline 6.2 changes: TinyMCE Media Manager and link picker, Read More button, article image classes, Login module options, security flags for extension updates, XOAuth2 email.
4. Joomla 5 bug fixes have ended (5.4.10). Plan the move to 6.2 now.
5. Upgrade on staging first. Use Infyways Joomla Upgrade if you want a managed migration.

Frequently asked questions

When was Joomla 6.2 released?

Joomla 6.2.0 was released on 13 October 2026 and is the latest version. 6.2.1 is planned for 24 November 2026 on the roadmap.

Is Joomla 6.2 safe for live sites?

Yes. 6.2.0 is a stable release. Test your extensions and template on a staging copy first, then update the live site.

What is the current stable Joomla version?

Joomla 6.2.0, released 13 October 2026, on downloads.joomla.org. For Joomla 5, the last release is 5.4.10.

How is Joomla 6.2 different from Joomla 6.0?

6.0 was the major platform jump. 6.2 is a minor release that adds TinyMCE improvements, article image and figure classes, Login module options, security flags for extension updates and XOAuth2 email, on the same architecture.

Can I upgrade from Joomla 5.4 directly to 6.2?

Yes. The project calls it an upgrade, not a migration. Disable Behaviour – Backward Compatibility, keep Behaviour – Backward Compatibility 6 enabled, and test on staging.

What should I do if the Joomla 6.2 update fails?

Check for updates again, or upload the 6.2.0 package with Upload & Update. Fixes for the common errors are in Joomla 6.2 update problems.

Will my Joomla 5 extensions work on Joomla 6?

Some will, some need the compatibility plugin, some need vendor updates. Inventory and test on staging. Replace abandonware before you cut over.

Does Joomla 5.4 still get updates?

Only security fixes. 5.4.10 (13 October 2026) was the last bugfix release, and security support runs until 12 October 2027.

How do I upgrade to Joomla 6 safely?

Backup, clone to staging, update hosting/PHP, update or replace extensions, test, then schedule production. Infyways documents and runs this under Joomla Upgrade services.

Where do I get help if the upgrade breaks?

Start with staging logs and vendor docs. For a full recovery or multi-site rollout, use Joomla support and maintenance or hire Joomla developers.