The advertised price of hosting is rarely what it costs to run a website for a year. Nothing here is dishonest (the extras are real products) but they are easy to meet one at a time and be surprised by in total.
The renewal price is the real price
Introductory rates on a multi-year term are normal, and the renewal rate is what you will pay for most of the time you are a customer.
Find it before signing. If it is not on the page, ask. A provider whose renewal price is easy to find is being straightforward when it is cheapest for them not to be.
Check also whether the headline figure is monthly or the monthly equivalent of an annual prepay. Those differ by a large margin, and the prepay is usually what is advertised. Understanding Billing Cycles and Renewal Options sets out the terms.
The domain is a separate, permanent cost
Often free for the first year and never free afterwards. Renewal prices vary enormously by extension, and some are several times the registration price.
Privacy protection may be included or an add-on. So may the lock. Both are worth having, so their cost belongs in the total. For what it does, see What Is WHOIS Privacy Protection and Why You Need It.
What is genuinely included
Ask specifically rather than assuming, because the answers vary between providers.
Certificates. Free automatic certificates are standard now. A charge for basic HTTPS is a reason to look elsewhere.
Backups. Whether they exist, how far back, and whether restoring is self-service or a paid request. A restore fee is a cost you meet on your worst day.
Migration. Free migration usually means the website. Ask whether mail and DNS are included, because those are the awkward parts.
Email. Included on most shared hosting, and a separate subscription on many cloud platforms.
The costs that arrive later
Four that catch people, none of which appear in a comparison table.
Overage. Exceeding transfer or disk is billed at a rate usually much higher than the plan implies. Ask what happens at the limit: throttled, charged, or suspended.
Outgrowing the plan. The upgrade path and its price, not just the current tier.
Add-ons that become necessary. A dedicated IP, a control panel licence on a VPS, extra mailboxes, a staging feature.
Your own time. On an unmanaged server this is the largest line and the one nobody costs. For what becomes yours, see How to Move from Shared Hosting to a VPS.
Count the third-party subscriptions
The hosting bill is often the smaller half of running a site.
Premium plugins and themes with annual renewals. A mail sending service. A backup service. A CDN. Monitoring. A consent tool.
Each is modest and they add up, and several renew automatically on dates nobody tracks. List them once a year with their renewal dates, which is also how you find the two nobody uses.
Match the plan to the site, not to the ceiling
Most sites use a fraction of what they buy. Paying for capacity against a traffic level you do not have is a recurring cost with no return.
Start smaller and upgrade when measurement says to. Upgrading is usually quick; the money spent in the meantime is not recoverable. There is more on knowing where you actually are in How to Monitor Your Hosting Resources.
The exception is memory on a VPS, where running short fails badly rather than gradually. Be generous there and modest elsewhere.
Term length is a trade, not a saving
A three-year prepay is cheaper per month and locks you in with a provider you have not yet tested under pressure.
For a first year with a new provider, take the shortest term you can. Once you know how their support behaves on a bad day, a longer term is a reasonable saving.
Check the refund terms either way, and note the notice period for cancellation, some providers bill a full cycle if cancelled after a date.
Budget for the things you hope not to need
Two line items worth having.
Backups you control, stored somewhere that is not your host. Small, and the difference between an incident and a disaster.
An hour or two of someone's time for when something breaks and you cannot fix it. Deciding that during an outage is expensive in a different way.
A realistic annual total
Hosting at the renewal rate. The domain at its renewal rate. Any add-on you actually need. Third-party subscriptions. Your own time, at whatever it is worth.
Write that down once. It is usually more than the advertised figure and less than people fear, and knowing it turns hosting from a recurring surprise into a line in a budget. How to Choose a Hosting Provider goes into the questions that surface these before you commit.
Write down what you are actually paying
Hosting costs are spread across several providers and renewal dates, which is how the total stops being known.
Make one list with a line per recurring charge: what it is, who bills it, how much, in what currency, on what date, and which card. Nothing else is needed and almost nobody has it.
Two things usually surface immediately. Something is being paid for twice, typically a certificate or a backup service that the hosting already includes. And something renews on a card that has been replaced.
Review it annually. The list takes an hour to build the first time and ten minutes to check thereafter. Reading your hosting invoice covers where the figures come from.
The costs that appear when the site succeeds
A plan chosen for a quiet site meets different economics when the site starts working.
Transfer is the one that scales fastest, particularly on a site with images or video. Storage grows steadily with mail and backups. And the constraint people meet first is rarely disk, it is the limit on how much simultaneous work the account may do.
awk '{s+=$10} END {printf "%.1f GB\n", s/1073741824}' ~/logs/example.com
du -sh ~/public_html ~/mail 2>/dev/null
Read those monthly and note the direction. Three readings give a slope, and a slope tells you which limit you reach first and roughly when, which is the difference between planning an upgrade and being forced into one.
Budget for the work, not only the hosting
The hosting is usually the smallest line in the real cost of running a site, and the others are the ones nobody plans for.
Updates have to be applied and tested. A broken site has to be fixed by somebody. A migration takes a day. A security incident takes considerably more. None of these appears on any invoice and all of them are costs.
The honest way to budget is to decide who does that work and what their time is worth. A site that nobody is responsible for maintaining is not cheaper, it is accruing the cost silently and paying it all at once later. A yearly maintenance checklist covers what the work actually is.