Best security plugins for WordPress

Pro-AdBlock

#39,204

by sergej_k8 years ago

This plugin shows a warning message to users that have no adblocker enabled.

Capsquery Facial Authentication

Up in the last 7 days:2,437#39,206

by arijit19923 months ago

Face recognition login for users. Enroll your face, set a PIN, and log in without a password.

MJP Security Tools

Up in the last 7 days:2,410#39,224

by zackdesign8 months ago

Lightweight WordPress hardening — XSS database scanner, POST request logging, failed login logging, and file permission checker.

Gatewarden

Up in the last 7 days:2,247#39,462

by Tudor Constantin3 months ago

Protect WordPress and WooCommerce with CAPTCHA, login limits, categorized audit logs, security alerts, privacy controls, and optional SMTP delivery.

The CCPA Framework By Data443

Up in the last 7 days:8,899#39,490

by Data443 Risk Mitigation, Inc.1 day ago

Easy to use tools to help you meet CCPA compliance requirements. Fully documented, extendable and developer-friendly. Free, friendly support! Include …

Database Anonymization Free Edition

#39,675

by robinlopulalan5 months ago

Anonymize personal data (PII) in WordPress databases to prevent PII in dev/test environments.

Love, Brave Browser

Up in the last 7 days:1,247#39,690

by Alan Jacob Mathew2 years ago

Shout-out your love for Brave Browser. Supports Gutenberg Block Widget Editor as well as Classic Widget.

Was it you? Account login notifications

Up in the last 7 days:3,423#39,711

by bogdand6 years ago

Send an email notification to users each time someone logs in from a new IP. This helps users figure out if someone accessed their accounts without th …

Rabbit Builds Anti-Spam Comment Shield

#39,897

by Rabbit Builds24 days ago

Advanced, lightweight, GDPR-compliant anti-spam protection for WordPress comments. No setup required.

RoleMatrix

Up in the last 7 days:2,424#39,939

by Mohammadreza Maghsoudipour2 months ago

A powerful plugin to manage user roles, capabilities, and admin menu access with advanced URL restrictions.

RapID Secure Login

Up in the last 7 days:5,788#40,005

by intercede013 years ago

RapID Secure Login (RapID-SL) is a simple and convenient authentication plugin.

WebDoktoru Security

Up in the last 7 days:1,476#40,346

by WebDoktoru10 months ago

Simple and effective security measures for your WordPress site. Many security features you can activate with a single click.

Whook Security

Up in the last 7 days:5,629#40,389

by darteweb8 years ago

License URI: http://www.gnu.org/licenses/gpl-2.0.html Our plugin Scans other plugins vulnerabilities listed in the WPScan Database of vulnerabilitie …

WebDecoy Bot Detection

Up in the last 7 days:14,756#40,429

by WebDecoy19 days ago

Stop card testing, fake orders, comment spam, and AI crawlers with no CAPTCHA. 100% local, no account or API key, works instantly on activation.

PassClip Auth for WordPress

Up in the last 7 days:4,348#40,431

by Passlogy6 years ago

"PassClip Auth" provides strong and easy authentication. "PassClip Auth for WordPress" is the plugin to launch PassClip Auth to Wo …

BlogCutter Activity Log & Security Audit

Down in the last 7 days:305#40,435

by Blog Cutter AI2 months ago

Activity log and security audit for WordPress. Track logins, content changes, and admin actions from a clear dashboard.

Unlock Digital (No Passwords)

Up in the last 7 days:5,630#40,444

by Jack Reichert11 years ago

Log into your WordPress site using a smartphone... No typing and no passwords! (almost)

Banana Defender

Up in the last 7 days:1,871#40,464

by flexxdev7 days ago

WordPress Security — Made in Germany. Firewall, Virtual Patching, Malware Scanner & Login Protection. GDPR-compliant, cookie-free, no cloud.

Restrict By Category for WooCommerce

Up in the last 7 days:4,748#40,513

by EDGARROJAS2 years ago

Restrict access to WooCommerce product categories.

Login Telegram Notifier

Down in the last 7 days:4,668#40,924

by Phil1 month ago

This plugin sends real-time Telegram alerts when someone logs into the WordPress admin panel. Includes IP, location, user agent and more.

VulnCue

Down in the last 7 days:2,141#40,950

by vulncue11 days ago

Scans your WordPress security and tells you what to fix. Connect an account for alerts on new vulnerabilities.

Filesystem Unlocker

Up in the last 7 days:2,577#40,963

by duke_justice10 years ago

Plugin to completely lockdown the wordpress filesystem so that no hacker can write to it.

WP Content Copy Protect

#41,010

by WP Sprite7 years ago

Simple and Amazing WordPress copy protect plugin. This plugin will be able to block the mouse right button, Ctrl + C key, Ctrl + U key , and F12 key.

Statixly

#41,324

by Anindya Sundar Mandal5 months ago

Convert your WordPress site into a blazing-fast, static HTML site and deploy anywhere — no PHP, no database, reduced attack surface in production.

advertSAFE Site Seal

Down in the last 7 days:3,027#41,479

by weptile13 years ago

Add trust to your website and users with the advertSAFE site seal plugin. Plus earn 25% commission from any new member sign ups through your seal.

Visitor Audit

#41,494

by justincampo10 years ago

Allows you to easily view your current visitors, analyze their behaviour, deduce their experience and identify malicious behavior.

File Inspection

Up in the last 7 days:5,140#41,589

by hccoder14 years ago

The plugin creates MD5 hash from every file in your blog.

Fortress Login Pro

Down in the last 7 days:912#41,846

by Hamdi Saidani1 year ago

Hide and rotate your WordPress login URL. Track access, export logs, and prevent brute-force attacks with real-time visibility.

Wordless Extender

Down in the last 7 days:5,992#41,868

by welaika9 years ago

Wordless Extender is a starting point for everyone: list of commonly used plugins, wp-config.php / .htaccess configuration and security improvements.

Encryption Tools Generator

Up in the last 7 days:5,877#41,971

by Etienne Rached11 years ago

Convert your wordpress page or post to a security or encryption online tool generator.

Makuruwan Arithmetic Human Quiz

Up in the last 7 days:5,862#41,977

by cletous1 month ago

Human-verification math quiz for login, comments, WooCommerce reviews, and custom forms. No Google reCAPTCHA.

Simple Groups

#42,060

by ChrisHurst14 years ago

Simple Groups Plugin for WordPress is a very simple plugin that adds Basic Group functionality to the Users system. The groups can be used via a shor …

Role Enforcement for Two Factor

#42,325

by cliencedigital1 month ago

Require two-factor authentication for selected user roles. An add-on for the Two Factor plugin.

WP Argon2 Password Hashing

#42,434

by mfsoftworks8 years ago

Existing user accounts will have their password hash updated with Argon2i on the next successful sign in.

Essentials by Digital Creatings

Up in the last 7 days:5,170#42,813

by Puneet Tiwari5 months ago

Lightweight WordPress essentials for security, performance, SMTP email, and custom code — built by Digital Creatings.

Hopelessly Sensible

#42,829

by Hebble & Stone CIC19 days ago

Security hardening for people who have better things to do. Seven options, plain English and clear information about what changes.

FirePhage Security

#42,954

by Nikola (FirePhage)3 months ago

WordPress security plugin with malware scanning, file integrity checks, login protection, update visibility, and optional FirePhage sync.

AI Captcha

#43,013

by DVHOST_CLOUD1 year ago

AI-powered, invisible CAPTCHA for WordPress forms – login, registration, WooCommerce, and more. Block bots without annoying your users.

FIDO-certified Passwordless biometric login

#43,018

by loginidauth4 years ago

FIDO-certified strong authentication in 5 clicks. Go passwordless and eliminate account takeovers and fraud.

Comments Firewall

Up in the last 7 days:888#43,038

by korchix1 year ago

Firewall protection for comments. Blocks spam before it reaches your database with automatic link filtering and zero manual moderation.

WP Activity Logger

Up in the last 7 days:2,180#43,170

by Allan Bruford13 years ago

WP Activity Logger is a plugin that monitors and notifies of certain events that take place on your site.

Secure Access

Up in the last 7 days:5,208#43,174

by bobbywalters9 years ago

Secure your site by requiring users to log in.

Swipe

#43,391

by swipepro7 years ago

The Swipe plugin allows you too securely login into Wordpress giving you 2-factor authentication without the hassle of one-time codes.

Formula04 Site Lock

Up in the last 7 days:3,204#43,407

by Verb_Form049 years ago

Put a sitewide password on your site. Users must enter password before viewing content.

Update Notifier Telegram

Down in the last 7 days:4,273#43,502

by AleksHr4 years ago

Sends notifications to the administrator in Telegram if a new version of WordPress is available. You can also send notifications about available plugi …

دیوار آتش برنامه نویس

Down in the last 7 days:522#43,670

by Abolfazl Ghasemihesar5 years ago

یک فایروال ساده و سبک اما قدرتمند برای وردپرس

DreamCore Monitor

Down in the last 7 days:8,692#43,692

by ifsolutions1 year ago

WordPress monitoring solution that tracks login attempts, core status, plugin updates, theme status, and file integrity.

WP Disable Attachment Pages

Down in the last 7 days:6,537#43,706

by Magda Sicknick7 years ago

Redirects attachment pages to the parent post, or home page if no parent post exists.

Admin Login Hide

Up in the last 7 days:1,341#43,723

by PTI WebTech22 days ago

Easily hide or customize your WordPress login URL to enhance security and prevent unauthorized access.

SecureFusion

#43,749

by fyndsoft3 months ago

Lightweight, high-performance security suite. Protects from brute-force logins, DDoS pingbacks, bad request injections, and manages CSP headers.