Best security plugins for WordPress

External Links New Tab

Down in the last 7 days:1,408#34,687

by ATechSol1 year ago

Automatically opens external links in a new browser tab, improving user engagement and site security.

StayLogged

Down in the last 7 days:766#34,698

by وندا نوژن3 years ago

StayLogged is a WordPress plugin that automatically logs out users after any period of inactivity that you want, so you can keep users logged in for a …

GuardianKey

Down in the last 7 days:1,009#34,702

by gbernardes9 months ago

GuardianKey is a service to protect systems in real-time against authentication attacks. It implements GK Auth Security for login protection and GKTin …

Sigil

#34,717

by Jean Galea1 day ago

Passkeys and two-factor authentication for WordPress. Sign in without a password, and enrol before you require 2FA by role.

AccessDoor

Up in the last 7 days:4,533#34,773

by IT Path Solutions1 month ago

Change WordPress login URL, create role-based login URLs, customize login screen, manage admin accounts, and enable security hardening features.

Configify 2FA

Down in the last 7 days:1,349#34,812

by Configify4 months ago

Flexible Two-Factor Authentication for WordPress. Choose Google Authenticator (TOTP), Math CAPTCHA, or Google reCAPTCHA — with a security audit log.

MP3 Scraper

Down in the last 7 days:599#34,825

by foobar16 years ago

a simple and secure mp3 audio player

WAF Manager for Cloudflare

#34,836

by Jaime Alnassim12 days ago

Deploy five battle-tested Cloudflare WAF rules to any zone in one click, straight from WordPress. No expression language required.

Feature Flipper

Down in the last 7 days:2,089#34,837

by Thoriq Firdaus2 months ago

Disable Comments, Gutenberg, Emojis, and other features you might not need in WordPress®

LumenCache

Down in the last 7 days:1,072#35,348

by Celsius Anderson9 days ago

RAM-first full-page caching that serves pages before WordPress loads, with automatic WooCommerce and LMS integration.

NP Formshield

Down in the last 7 days:753#35,434

by Needs Plugin2 months ago

Advanced spam protection for Contact Form 7, Gravity Forms, Forminator, Ninja Forms, WPForms, Fluent Forms, Elementor Forms and custom forms.

Protect Ai Login

#35,441

by anouny10 years ago

Change default login site to a custom URL, block spam, bot registration, and brute-force using Google reCAPTCHA.

Whisper Comment Reloaded

#35,462

by Joshua Parker15 years ago

Whisper Comment Reloaded is a WordPress plugin for commenters to control comment visibility for other viewers.

Attentive security

Up in the last 7 days:3,789#35,679

by ThemeAtelier8 months ago

Attentive Security Plugin is a very simple Wordpress security plugin. With this plugin you can hide your current WordPress version from any resource, …

IOSEC HTTP Anti Flood/DoS Security Gateway Module

#35,848

by iosec14 years ago

This module provides security enhancements against (HTTP) Flood & Brute Force Attacks for Wordpress.

O-PLUX Fraudulent Order Detection

Down in the last 7 days:112#36,013

by Cacco2 months ago

The Leading E-commerce Fraud Detection System in Japan

Verifyne

Up in the last 7 days:12,040#36,056

by sruester10 years ago

Allows logging into you Wordpress site using the verifyne.me app.

Filtered HTML for Editors

Up in the last 7 days:6,844#36,081

by Andrew Nacin16 years ago

Editors and Administrators can publish content with unfiltered HTML. Use this plugin to force filtering of HTML from Editors.

Secure SVG Upload

Down in the last 7 days:3,075#36,109

by Fahim Reza1 year ago

Safely upload SVG files in WordPress with robust SVG support and automatic sanitization.

Force Password Reset

Up in the last 7 days:9,287#36,117

by Christian8 years ago

This plugin is designed to remind WordPress users to reset their password after certain number of days.

SaferCheckout Lite

#36,126

by nintechnet9 days ago

Fraud prevention for WooCommerce Stores.

SiaraShield

Up in the last 7 days:11,465#36,183

by SiaraShield13 days ago

Protect WordPress forms and logins from bots with CyberSiara's human verification and lockout security.

Password-policy

#36,199

by kirua7821 days ago

A plugin wordpress for enhance the password policy.

Wp UCanHide

#36,278

wp-ucanhide18 years ago

A very useful and simple plug-in that allows you to hide a part of a post (links,image...) for people who are not logged on your site.

WP Whoosh

Up in the last 7 days:10,070#36,653

by Russell Jamieson13 years ago

Build new feature-rich, fast and secure WordPress sites in a smarter way in under 60 seconds using WP Whoosh.

Cybershield Firewall

Down in the last 7 days:1,663#36,671

by SECURAS TECHNOLOGIES2 years ago

CyberShield, Your First Line of Defense Against Web Attacks.

Onionify

#36,730

by Ivijan-Stefan Stipic11 days ago

Serve WordPress cleanly over .onion with URL rewriting, Onion-Location, and privacy hardening.

TechnologyWisdom File Editor Access Lock

Up in the last 7 days:7,176#36,996

by Technology Wisdom1 month ago

Locks the built-in WordPress dashboard theme and plugin editors for improved security.

WPGear

Up in the last 7 days:24,222#37,066

by wpgear6 months ago

Automatic Scanning and Search for Modified, New, and Deleted Files. Send scan Reports via Email.

Tiny Comment Spam Blocker

Up in the last 7 days:9,267#37,239

by Kasuga2 months ago

A simple and lightweight yet rock-solid plugin that blocks comment spam using multiple automatic detection methods.

AB WP Security

#37,421

by abjelosevic9 years ago

Security plugin that stops User Enumeration in WordPress, removes WordPress Version Number, disable directory browsing and Disable XML-RPC

CS BioLogin

Up in the last 7 days:815#37,429

by Concatstring Solutions1 month ago

Secure biometric login (WebAuthn / FIDO2 / Passkeys) for WordPress and WooCommerce using Face ID, Touch ID, or fingerprint.

Tailwatch

#37,470

by wptailwatch20 days ago

WordPress security with backups, monitoring, SSL tracking, and file integrity checks, managed from a mobile app with real-time push alerts.

TSA Wait Times

Up in the last 7 days:4,563#37,520

by jdyken3 days ago

Retrieve estimated wait times for all TSA security checkpoints for U.S. airports.

dpabadbotwp

Up in the last 7 days:3,287#37,543

by peter achutha6 years ago

This plugin, dpaBadBotWP, automatically tells Bad Bot Exterminator firewall software, your current IP address and you will not be blocked from working …

userlog

Down in the last 7 days:1,809#37,607

by williewonka13 years ago

Allows you to see wich users have logged in when and from where.

PasswordSentry

Up in the last 7 days:10,137#37,834

by DJ Abrams2 years ago

Secure WordPress by detecting shared passwords, and blocking password sharing. The plugin integrates Password Sentry app into WP to track logins.

Square Bracket Hack Prevention

#37,919

by Miina Sikk10 years ago

The Square Bracket Hack Prevention plugin prevents hackers from adding a "[" to the URL.

SSL for Logged In Users

Up in the last 7 days:9,321#37,959

by G14 years ago

Forces all logged in users to stay on SSL connection

NF Captcha

Up in the last 7 days:9,319#37,979

by macnetic-labs10 years ago

NF Captcha adds Really Simple CAPTCHA element for human check.

cloudrebuesms

Up in the last 7 days:9,324#37,984

by cloudrebue3 years ago

Send Woocomerce Notifications, Access Bulk SMS Portal

Healthy Site SEO

Up in the last 7 days:5,350#38,261

by MMDeveloper6 years ago

Optimize/Secure your site today.

Safer Cookies

Up in the last 7 days:9,154#38,268

by Janis Elsts17 years ago

Ties the WP session cookie to your IP address so that it can't be used to get access to you blog from another computer.

Easy Bruteforce Protect

#38,346

by Doyle Lewis12 years ago

This plugin modifies your .htaccess file to provide protection from brute force attack bots.

Disallow Pwned Password

Up in the last 7 days:2,179#38,357

by Itineris Limited7 years ago

Disallow WordPress and WooCommerce users using pwned passwords.

Limit Login Attempts

Down in the last 7 days:1,591#38,383

by Theme Egg8 years ago

Limit rate of login attempts

Orbisius Limit Logins

Up in the last 7 days:2,178#38,389

by Svetoslav Marinov12 years ago

Protect your site from automated logins efficiently!

Behind Closed Doors

Up in the last 7 days:8,587#38,619

by spencersokol7 years ago

Keep your site behind closed doors, by redirecting visitors to a single page, optionally giving them a login form to view the remainder of your site.

Guard

Up in the last 7 days:5,834#38,923

by Mitch10 years ago

Guard protects your wp-admin against bruteforce attacks.

Safe Cookies

#39,096

by Subhransu Sekhar12 years ago

Secure your wordpress site by making the Auth Cookie more secure