Improve the security of your website by easily setting HTTP response headers to enable browser protection
As of April 2026, Better Headers is a WordPress better plugin with 100 active installations and a 5/5 rating from 1 reviews. It has been downloaded 3.0K+ times in total. Requires WordPress 5.0+ and PHP 7.0+. Available on WordPress.org since 2019. Last updated 1 year ago — may have compatibility concerns. Top alternative: Better Font Awesome.
This plugin does not make any changes to your server configuration, such as the .htaccess file, but instead sends the headers as part of the WordPress page response. The reason for this is that many of them are not valid for assets such as stylesheets and images, but are sent anyway if the server configuration method is used.
Unlike many security plugins, these headers are also sent for your admin panel, where security is arguably the most important.
Headers that can be set include…
* Feature-Policy
* Referrer-Policy
* Strict-Transport-Security
* X-Frame-Options
* X-Content-Type-Options
* X-XSS-Protection
* X-Permitted-Cross-Domain-Policies
* Expect-CT
| WordPress | 5.0+ requiredTested up to 6.6.5 |
| PHP | 7.0+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.