What are plugins?
Plugins add features to WordPress: contact forms, SEO tools, caching, backups and shops. Install them from Plugins > Add New.
Choose plugins carefully
- Check active installs, ratings and the date of the last update.
- Prefer plugins from reputable developers.
- Install only what you need. Every plugin adds code that must be kept updated.
- Delete plugins you do not use.
A sensible starter set
| Need | Type of plugin |
|---|---|
| SEO | An SEO plugin such as Yoast SEO or Rank Math |
| Speed | A caching plugin |
| Security | A security and firewall plugin |
| Backups | A backup plugin storing copies off your server |
| Forms | A contact form plugin |
Security essentials
- Keep WordPress, themes and plugins updated.
- Use strong, unique passwords and enable two-factor authentication.
- Limit login attempts.
- Use HTTPS everywhere.
- Take regular backups and test restoring them.
- Give other users only the roles they need.
- Never download themes or plugins from unofficial sources.
SEO basics
- Set permalinks to Post name.
- Write clear titles and meta descriptions.
- Use headings in order and descriptive image alt text.
- Create helpful, original content.
- Submit your sitemap in Google Search Console. WordPress creates one at
/wp-sitemap.xml. - Make sure the site loads fast on mobile.
Practice
Install an SEO plugin, set a title and description for your home page, take a full backup and enable updates for plugins.