Best security plugins for WordPress

Only Admins

Down in the last 7 days:4,744#44,203

by pcoitinho9 years ago

Only Admins is a minimal plugin that restricts your entire WordPress site to Admins.

SeCWurity WP Login

Down in the last 7 days:3,195#44,218

by Selim Şimşek4 months ago

SeCWurity WP Login protects your login page against different attack types...

Simple Privacy

Down in the last 7 days:98#44,222

by Justin Eckhouse12 years ago

A simple way to create a private Wordpress blog with htauth.

DisableMU

#44,233

by Dave McHale10 years ago

Redefines the location of the /mu-plugins directory to ensure that no code published to the default location will automatically run on your website.

No Login User Enumeration

Up in the last 7 days:1,081#44,320

by thomaskonrad9 years ago

This plugin to avoids user enumeration in the Wordpress login form. It does so by simply always returning the same error message, no matter whether on …

MAT Firewall

#44,460

by matpluginsofficial1 year ago

MAT Firewall is a powerful WordPress security plugin that helps protect your website from malicious attacks, brute force attempts, and unauthorized ac …

Invalidate Logged Out Cookies

Up in the last 7 days:2,398#44,610

by laceous16 years ago

This plugin will immediately invalidate your auth cookies when you manually log out.

Sentinelo

#44,679

by Sentinelotoday

Connects your WordPress site to the Sentinelo maintenance platform: encrypted cloud backups, security scans, updates and uptime monitoring.

ELK Security Enforcer

Up in the last 7 days:2,410#44,785

by elklab6 years ago

This simple plugin enforces security measures against march 2020 attacks and handles breach notification

BroodWeb Malware Scanner

Down in the last 7 days:2,699#44,887

by Md Jubayer Hossain5 months ago

Scan WordPress files and database content for suspicious code, malware indicators, file integrity changes, login abuse, vulnerabilities, and firewall …

WP Security By Made I.T.

Down in the last 7 days:5,575#44,992

by Made I.T.6 years ago

Secure your WordPress Website.

SSO Enforcer for Jetpack

#45,065

by andrewcalvo3 days ago

Make WordPress.com sign-in mandatory on sites that use Jetpack SSO. Username and password logins are turned off.

WP PLC Swissknife

Down in the last 7 days:5,557#45,100

by onePlace6 years ago

A simple and lightweight plugin to enhance performance, stability and security of wordpress

Pirajki Website Advance Security

Down in the last 7 days:624#45,139

by Poonam3 months ago

A lightweight, focused security toolkit for WordPress: request firewall, core file integrity checks, malware scanning, and one-click hardening.

Ballast Security Hashing

Down in the last 7 days:8#45,222

by BallastSecurity14 years ago

This plugin drastically increases the security of the hash used to store passwords

WP Logger

Down in the last 7 days:1,111#45,258

by mrkhanakia6 years ago

Logs every single request made to your Wordpress website and helps you to tighten security by analyzing the requests made to your website.

Login Restrict

Down in the last 7 days:3,409#45,307

by Skynet Technologies USA LLC7 years ago

For security, it will lock account after number of login attempts.

Login With Google reCaptcha For WordPress And Woocomerce

Up in the last 7 days:2,194#45,317

by evgeniypoznyak9 years ago

Extended WordPress\Woocomerce Login With Google reCaptcha and hiding user/password errors

PLU Redux

#45,323

by Jason Cosper5 months ago

Displays the "Last Updated" date and "Tested up to" version for your plugins. Supports WordPress.org and Git Updater plugins.

Define SSL Pages

Up in the last 7 days:2,275#45,419

by William P. Davis15 years ago

Allows you to easily require SSL for specific pages.

Keys Master

Down in the last 7 days:10,561#45,428

by Pierre Lannoy2 months ago

Powerful application passwords manager for WordPress with role-based usage control and full analytics reporting capabilities.

A.N.R.GHG Publishing Toolkit

#45,468

by ANRGHG9 months ago

Among the Swiss Army knives completing WordPress, this one helps reduce GHG, as it is AMP compatible while providing various features.

Authors as Taxonomy

Down in the last 7 days:2,625#45,588

by Mark-k9 years ago

Decouple authors from users. Instead of using users as authors use a special taxonomy for it.

security-txt

Up in the last 7 days:1,969#45,588

by Tyler Stokes3 years ago

A plugin for serving 'security.txt' in WordPress 6.1.1+.

ScaleEngine Virtual Usher

Up in the last 7 days:1,970#45,606

by stefancaunter7 years ago

ScaleEngine Virtual Usher Video Security Plugin.

Ultimate WP Filter

Up in the last 7 days:1,971#45,618

by faleddo11 years ago

A lighweight filtering plugin that will censor explicit words automatically by replacing them with asterik(*) characters in many language and user-def …

Dynamic Functionalities

#45,651

by Gaurav Tiwari1 month ago

19 optional WordPress modules for content tools, link checks, site activity, performance, security, redirects, and SEO.

WPMU Block Spam By Math

Down in the last 7 days:10,343#45,654

by jwpegram16 years ago

This plugin protects your WPMU signup process against spambots with a simple math question.

WP Expire Passwords

#45,700

by rob.divincenzo13 years ago

This plugin allows you to set passwords to expire every X amount of days (default is 90) and to expire all non-admin user passwords (requiring new uni …

SiteSignal

#45,758

by sitesignal10 months ago

SiteSignal WordPress connector for AI visibility, website health, performance monitoring, and technical audits.

WP-Mail-Validator

Up in the last 7 days:1,543#45,789

by kimpenhaus6 years ago

WP-Mail-Validator is an anti-spam plugin. It provides mail-address validation in 5 ways:

Hellō Login

Down in the last 7 days:6,456#45,864

by Marius Scurtescu3 years ago

Free and simple to setup plugin provides registration and login with the Hellō Wallet. Users choose from popular social login, email, or phone.

Luketom Compromise Review

#45,886

by lukehutton2 months ago

Incident-focused safeguards for a multi-site WordPress estate.

WP REST API Security

Down in the last 7 days:8,266#45,894

by invisnet7 years ago

Provides a UI to control which REST API endpoints are enabled and which require authentication.

Hetjens Registered Only

Up in the last 7 days:1,562#45,930

by S Hetjens10 years ago

This plug-in restricts the access to blog and feed. Visitors need to login before accessing the blog. It offers a private feed for every user.

wp-deadorxp

#46,012

by Stocker_jp12 years ago

Windows XP利用者に警告を表示するプラグインです。 This plugin displays warning on Windows XP user.

Admin Post Reminder

Down in the last 7 days:848#46,064

by Shawn17 years ago

You should never publish posts from your admin account. An alert is displayed, informing the user they're logged in as admin and not to write pos …

Pro-Link Login Protection with Turnstile

Down in the last 7 days:18#46,184

by Pro-Link.pl5 months ago

Protect your WordPress login and admin area using Cloudflare Turnstile, a modern CAPTCHA alternative.

Advanced Password Security

Down in the last 7 days:9,312#46,264

by Fernando Claussen8 years ago

Force your administrators to update their password after a set amount of time.

Role Based Access Manager

Down in the last 7 days:1,231#46,317

by muis IT5 years ago

Role Based Access Management for Media files (attachments).

Secure Password Generator

#46,456

by oakcreekdev3 years ago

Adds a secure password generator to your WordPress website.

TREZOR Connect Plugin

Up in the last 7 days:24#46,461

by SatoshiLabs11 years ago

This plugin enables Wordpress Login via TREZOR Connect service.

Authorize IP Address

Down in the last 7 days:1,292#46,550

by jovevskitoni9 years ago

Authorize IP Address prevent login from unknown IP address. Whitelist User IP addresses. If a user logs in from an unknown IP the plugin sends an ema …

Houdini

Up in the last 7 days:1,786#46,560

by PressPage Entertainment Inc6 years ago

Provides a method to copy protect your webpages from plagiarism and content theft.

adCAPTCHA for WordPress

Down in the last 7 days:2,478#46,579

by adCAPTCHA1 year ago

Secure your site. Elevate your brand. Boost Ad Revenue.

CloudScale Cyber & DevTools

Down in the last 7 days:16,997#46,594

by andrewjbaker3 days ago

Secure your WordPress site without an IT team. Free firewall, two-factor, passkeys and AI audits, with plain-language insights and simple fixes.

Bolcal Anti Spam

Up in the last 7 days:40#46,666

by BOLCAL6 months ago

Free anti-spam protection for WooCommerce, WordPress registration forms, and Contact Form 7 forms.

Secure Content

Down in the last 7 days:378#46,681

by Ajanth Rajendran11 years ago

A plug-in to secure your website content and images from copying and provide maximum content security.

Custom Login and Admin URLs (CLAU)

#46,717

by Vitor Carvalho14 years ago

AVOID TO USE THIS PLUGIN! Change wp-admin and wp-login URL to any of your choice. Security by obscurity!

SpoofProof

Down in the last 7 days:1,118#46,760

by ciphertooth10 years ago

SpoofProof alters the WP login screen using a web service to verify that you are not being attacked by spoofing, phishing, or Man in the middle.