WordPress Security Plugins

Blue Captcha is a powerful and highly customized WordPress plugin that effectively protects your WP blogs from spammers and unwanted persons.

Instant account security with effortless multi-factor authentication via Mobile Push, Mobile Passcode (TOTP), WebAuthn/U2F Security Keys, and more.

Give trusted web professionals admin access to your WordPress account. Revoke anytime.

Disable the default WordPress registration page without disabling user registration.

A simple, light-weight collection of tools to harden WordPress security and help mitigate common types of attacks.

A simple yet powerful plugin that redirects users to a custom URL after logout. Featuring a modern, accessible admin panel with dark mode support.

With a security.txt file, ethical hackers can easily send you a notification when they have found a vulnerability on your website.

The easiest way to make your Gravity Forms GDPR-compliant. Fully documented, extendable and developer-friendly.

Disable Plugins Without Deleting — Archive and Restore in One Click

Removes your WordPress version from various places.

Adds a secret URL key to access the login page and lets you disable XML-RPC, protecting against bruteforce attacks.

Signs and encrypts emails using PGP/GPG keys or X.509 certificates. Provides OpenPGP and S/MIME functions via WordPress plugin API.

Fine tuning access to your posts.

Enhanced Login Security for Your Wordpress blog.

Protect your WooCommerce store from fake orders by blocking suspicious IPs, emails, and detecting bot checkout activity.

With Rename Plugins Folder you can rename the plugins folder. This is an underestimated way to increase the security of your installation.

wp bcrypt switches WordPress's password hashes from MD5 to bcrypt, making it harder for them to be brute-forced if they are leaked.

Real-time firewall that stops bots, malware, and hackers with real AI, file protection, and traffic analytics without slowing down your site

Powerful Plugin Management Solution for WordPress

It helps in preventing Cross Site Scripting (XSS) with just a few lines of code.

Combat spam registrations for a BuddyPress-powered site using Google's reCAPTCHA

This WordPress plugin randomizes the user_id for the user created on WordPress setup, removing one potential attack factor from the site.

Reduce donation spam with Cloudflare turnstile, a user-friendly, privacy-preserving alternative to CAPTCHA

Automatically adds Subresource Integrity (SRI) to external scripts/styles and safely excludes Google reCAPTCHA and Google Fonts.

Logify WP - Activity Log & User Audit Log tracks critical changes, logins, and updates with searchable logs for site security.

Learn WP Best Practices Through Your Own Site! Get clear insights about Performance, Security, and Best Practices – explained in plain English.

Increase your WordPress security by deleting old core files that exist in the filesystem before hackers exploit them for attacks.

A very simple plugin that hides specific pages, posts and menu items from users based on their logged in staus.

Protect your WP Admin access. The ultimate lightweight security suite. Block brute-force attacks, auto-repair infected core files, hide your login URL …

Description: This plugin will require visitors to type in the password each time they are visiting a password protected page.

BruteGuard is a cloud powered brute force login protection that shields your site against botnet attacks.

Premium WordPress Security - 100% FREE: Firewall, 2FA, Security Headers, Login and Malware Protection, File Monitor, Security Audit & more

Adds some extra security to your WordPress with only one click.

Several opinionated WordPress tweaks focused in security and performance.

Stop use of a bad passwords, including those in the Have I Been Pwned? breached password database