Best security plugins for WordPress

Weborado Helper

Up in the last 7 days:156#9,908

by Weborado5 months ago

Essential tools for WordPress site administrators to monitor versions, enhance security, and improve performance.

Access Areas for WordPress

Down in the last 7 days:39#9,956

by podpirate11 months ago

Fine tuning access to your posts.

WP PGP Encrypted Emails

Up in the last 7 days:25#9,989

by Meitar5 years ago

Signs and encrypts emails using PGP/GPG keys or X.509 certificates. Provides OpenPGP and S/MIME functions via WordPress plugin API.

yubikey-plugin

Up in the last 7 days:20#10,001

by apb3607 years ago

Enhanced Login Security for Your Wordpress blog.

Apocalypse Meow

Down in the last 7 days:10#10,006

by Blobfolio26 days ago

A simple, light-weight collection of tools to harden WordPress security and help mitigate common types of attacks.

Ultra Web Hosting Performance Toolkit

Up in the last 7 days:6#10,145

by ultrawebhosting29 days ago

Optimize, secure, and speed up WordPress: trim front-end bloat, clean the database, block attacks and spam, and purge every cache in one click.

BitFire Security

Up in the last 7 days:30#10,296

by Cory Marsh1 month ago

Free WordPress firewall, bot blocking, login protection, and malware scanning. See suspicious traffic and investigate threats from your dashboard.

Logify WP

Up in the last 7 days:57#10,333

by Made Neat2 months ago

Logify WP - Activity Log & User Audit Log tracks critical changes, logins, and updates with searchable logs for site security.

WEDOS

Down in the last 7 days:30#10,395

by wedos.com10 days ago

Protect your WordPress website with WEDOS Global: cloud WAF, DDoS protection, CDN and page cache, set up from WordPress.

The Hack Repair Guy’s Plugin Archiver

Up in the last 7 days:33#10,435

by The Hack Repair Guy5 days ago

Disable plugins without deleting them. Archive in one click, restore any time, and keep the archive hidden and blocked from the web.

Anti Fake Orders & IP Blocker

Down in the last 7 days:22#10,440

by Shohanur Rahman Shohan9 months ago

Protect your WooCommerce store from fake orders by blocking suspicious IPs, emails, and detecting bot checkout activity.

Generate Security.txt

Down in the last 7 days:156#10,708

by Vereniging van Registrars4 months ago

With a security.txt file, ethical hackers can easily send you a notification when they have found a vulnerability on your website.

Restrict WP Upload Type

Up in the last 7 days:51#10,844

by Kushang Tailor4 months ago

Restrict WP Upload Type gives you complete control over which files your users can upload to WordPress.

Rename Plugins Folder

Down in the last 7 days:27#10,920

by Jose Mortellaro1 month ago

With Rename Plugins Folder you can rename the plugins folder. This is an underestimated way to increase the security of your installation.

Image Protection

Up in the last 7 days:308#11,130

by TWK Media1 month ago

Protects images on your WordPress site from being copied or captured, with optional EXIF privacy tools for uploaded media.

User Approval Manager

Down in the last 7 days:15#11,202

by Sotiris Rallios2 months ago

Requires admin approval for new users to log in. Admins can selectively auto-approve specific user roles while others require manual review.

Reset file and folder permissions

Up in the last 7 days:95#11,268

by Prakhar Bhatia5 months ago

A WordPress plugin to reset file permissions to 0644, directory permissions to 0755, and file/folder ownership for security and maintenance purposes.

Honeypot Guard

Down in the last 7 days:76#11,278

by MDigital22 days ago

Anti-spam protection for forms, signups, and comments using advanced honeypot techniques. No CAPTCHAs, no user friction.

BuddyPress Security Check

Up in the last 7 days:29#11,373

by Shea Bunge8 years ago

Combat spam registrations for a BuddyPress-powered site using Google's reCAPTCHA

WPControl

Down in the last 7 days:66#11,441

by Syed Balkhi4 years ago

The easiest way to improve your website's security, performance, and user experience.

Profound Agent Analytics

Up in the last 7 days:61#11,451

by Profound7 months ago

Profound Agent Analytics sends lightweight HTTP request logs to Profound's analytics platform for advanced bot detection and traffic analysis.

Gravity Forms

Up in the last 7 days:76#11,517

by Data443 Risk Mitigation, Inc.5 months ago

The easiest way to make your Gravity Forms GDPR-compliant. Fully documented, extendable and developer-friendly.

Malcure Security Suite

Down in the last 7 days:1#11,522

by Malware Intercept1 year ago

🔐 All-in-one WordPress security: malware scanner (files+DB), force re-login, force logout, control logins, email-alerts. Cloud-based, light & fast.

reCaptcha by WebDesignBy

Up in the last 7 days:7#11,538

by webdesignby4 months ago

Add Google’s simple checkbox reCAPTCHA to WordPress wp-admin login page.

Basic Security

Up in the last 7 days:90#11,671

by Jose Mortellaro12 days ago

It helps in preventing Cross Site Scripting (XSS) with just a few lines of code.

Simple Access Control

Up in the last 7 days:36#11,702

by Peter Wooster9 years ago

A very simple plugin that hides specific pages, posts and menu items from users based on their logged in staus.

DFX Random User IDs

Down in the last 7 days:51#11,734

by David Marín Carreño (DaveFX)5 months ago

This WordPress plugin randomizes the user_id for the user created on WordPress setup, removing one potential attack factor from the site.

Password for WP

Up in the last 7 days:16#11,758

by get3code4 months ago

Protect your whole WordPress site with one password. Custom background image, message and colors, cache friendly. Compatible with WordPress 7.

Security Hardener

Up in the last 7 days:119#11,759

by Marc Armengou12 days ago

Hardens WordPress with secure headers, login protection, user enumeration blocking, rate limiting, and a built-in security checklist.

WP Media File Type Manager

Up in the last 7 days:55#11,768

by Seerox4 months ago

WP Media File Type Manager will allow you to manage different file types in Media Library.

wp-bcrypt

Down in the last 7 days:48#11,854

by harrym12 years ago

wp bcrypt switches WordPress's password hashes from MD5 to bcrypt, making it harder for them to be brute-forced if they are leaked.

WP Tweaks

Down in the last 7 days:11#11,862

by Luiz Bills1 year ago

Several opinionated WordPress tweaks focused in security and performance.

QueryWall

Up in the last 7 days:3#11,902

by 4ley8 years ago

Autopilot protection for your WordPress against malicious URL requests.

DiveWP

Up in the last 7 days:75#11,977

by Oleg Petrov1 month ago

AI-assisted WordPress diagnostics, performance checks, security insights, logs, cron monitoring, database health, and more.

Better Passwords

Down in the last 7 days:44#12,102

by bettersecurity2 years ago

Stop use of a bad passwords, including those in the Have I Been Pwned? breached password database

PE Category Filter

Up in the last 7 days:88#12,125

by Pavel Espinal2 months ago

Modern WordPress plugin for filtering categories from home page with performance optimization and security enhancements.

REST API Guard

Up in the last 7 days:259#12,205

by Sean Fisher27 days ago

Restrict and control anonymous access to the WordPress REST API, with optional JSON Web Token (JWT) authentication.

No unsafe-inline

Down in the last 7 days:74#12,286

by Giuseppe11 months ago

No unsafe-inline helps you to build a Content Security Policy avoiding to use 'unsafe-inline' and 'unsafe-hashes'.

eDarpan

Down in the last 7 days:27#12,332

by Chris Hudson6 months ago

The most complete website protection plugin for WordPress. Block IPs, disable right-click, prevent copy-paste, block countries, stop spam comments, an …

Expire Password Protected Pages

Up in the last 7 days:2#12,362

by TG8 years ago

Description: This plugin will require visitors to type in the password each time they are visiting a password protected page.

Fraud and Scam Detection For WooCommerce

Up in the last 7 days:201#12,411

by Link Nacional17 days ago

Add Google reCAPTCHA or Cloudflare Turnstile verification to WooCommerce checkout to prevent fraudulent transactions.

Bot Protection with Turnstile

Up in the last 7 days:114#12,436

by mra13 / Team Tips and Tricks HQ2 months ago

A lightweight plugin that protects core WordPress forms and selected third‑party plugins from spam and bot attacks using Cloudflare Turnstile CAPTCHA.

Limit Login Attempts (Spam Protection)

Up in the last 7 days:11#12,437

by wp-buy1 year ago

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

Blizhost CloudCache Purge

Down in the last 7 days:23#12,526

by Blizhost2 years ago

Automatic Cache Clearing and CloudCache Integration to Boost Speed and Protect Your Site with Enhanced Security.

Multiadmin

Up in the last 7 days:9#12,529

by MULTIDOTS Inc3 months ago

Boost your WordPress site with the Multiadmin Plugin for simplicity, security, and performance, ensuring a clean and efficient experience.

Mythic Cerberus

Down in the last 7 days:61#12,539

by Mythic Beasts11 months ago

Guard your login form by limiting login failures from the same IP.

SAR One Click Security

Down in the last 7 days:97#12,570

by Samuel Aguilera1 year ago

Adds some extra security to your WordPress with only one click.

HTTP Basic Auth

Down in the last 7 days:47#12,602

by Grzegorz Rola4 years ago

Basic Auth for Wordpress.

Old Core Files

Down in the last 7 days:14#12,611

by Maor Chasen7 years ago

Increase your WordPress security by deleting old core files that exist in the filesystem before hackers exploit them for attacks.

Simple SSL Redirects

Up in the last 7 days:37#12,669

by Blucube2 months ago

Lightweight plugin to ensure access via SSL/HTTPS. Uses 301 (permanent) redirects for SEO benefits. Optionally sets HSTS and forces canonical domain.