Jono is a digital strategist, marketing technologist, and full stack developer. He's into technical SEO, emerging technologies, and brand strategy.
Out of the box, WordPress is a great system for blogging and managing websites. But to truly unlock its power, you need to add plugins to tailor it to your precise needs. Adding some of our top plugin recommendations can make really turbo-charge your site!
People frequently ask us for recommendations on which WordPress plugins they should use on their site. Of course, we’ve written quite a few WordPress plugins ourselves, but the list of great WordPress plugins is much larger than that.
These plugins add entirely new areas of functionality to WordPress – from supporting multiple languages, to selling online, and beyond.
Yoast SEO – The best way to optimize your website for search engines. But you already knew that, right?
WooCommerce – Adds ecommerce capabilities, with a huge ecosystem of addons and extensions for every type of store and website.
Gravity Forms or Ninja Forms – Adds sophisticated form creation and management tools, with loads of integrations and addons.
wpDiscuz – A great, modern, fully-featured replacement to WordPress’ default comments system.
MultilingualPress or WPML – Translate and localize your website for different territories and languages.
Relevanssi – Overhauls WordPress’ search functionality to prioritize relevance over date.
Site speed
Making your website lightning fast can be a complex task. These plugins can help to speed up the process, and speed up your site.
Be careful when installing multiple caching or optimization plugins; they can get in each others way, and slow down your site!
WP Rocket – Very powerful, and one of the best options to make your site faster. Designed to be simple. No free option.
W3 Total Cache – Extremely powerful, and extremely flexible. Designed to be comprehensive. Hundreds of checkboxes and options.
WP Optimize – A good middle ground, with basic full page caching, and some sophisticated database + media optimization tools.
WP Super Cache – A basic solution which offers full page caching, but lacks other/advanced optimization techniques.
AMP – Automatically converts your website’s theme to be compliant with AMP HTML standards.
Autoptimize – Some really clever JavaScript/CSS/HTML optimization, though no full page caching (should work well with a dedicated full page caching solution)
Monitoring and understanding your website’s performance is key if you want to improve those key metrics. These plugins can help you to measure how you’re doing.
Site Kit by Google – Connects your website to Google Analytics, Google Tag Manager, Search Console, and more, all in one place.
Monster Insights – Puts Google Analytics data right in your WordPress. Great for beginners.
Google Tag Manager For WordPress – Adds a whole bunch of data to your Google Tag Manager container, which you can pick up in Google Analytics and other systems.
Microsoft Clarity – A privacy-friendly approach to monitoring how users interact with your website, with session recordings, heatmaps and clever metrics.
Admin improvements
Managing and running a website doesn’t need to be a chore. These plugins help you to streamline the process.
Admin Menu Editor – Helps manage and tidy up the WordPress admin sidebar menu when you run lots of plugins or features.
User Role Editor – Tweak which roles and individual users have access and permissions to which features.
Public Post Preview – Share private links to posts which you’re still writing, drafting or proof-reading.
Nested Pages – Makes it much easier to organize larger sites with complex page structures and hierarchies.
Security & backups
An extra layer of defence can protect you from unwanted intruders, and, help you restore order if somebody breaks in.
UpdraftPlus – Take regular backups of your filesystem and database, and restore snapshots with a click.
Sucuri or WordFence – Lock down your site, manage access and security settings, and monitor for problems.
WP Activity Log – Keep a record of everything that happens on your website.
Anything else?
Are we missing any critical plugins, which every site should know about? Or, do you have a suggestion for a replacement to one of our top plugin recommendations? Let us know in the comments!
August 07 - 15, 2021
Team Yoast is sponsoring Karnataka do_action, an online charity hackathon. Click through to see what this event is about!
All events we will be attending »
August 31, 2021
Register for our SEO news webinar in August 2021. Our SEO experts Jono and Joost will talk you through the latest Google and WordPress news.
All Yoast SEO webinars »
56 Responses to Top WordPress plugin recommendations
Karen Callahan • 6 months ago
I agree with these – and under Admin, I would add Find My Blocks – which has recently been invaluable to me (using Genesis Blocks, Get Wid, and 7 custom blocks) in 3 or 4 different environments.
Edwin Toonen • 6 months ago
Nice addition, thanks Karen!
guyewood • 6 months ago
This is very helpful, Jono.
Thank you so much for publishing this. I struggle sometimes trying to understand what plugins I should and should not add to WordPress, and I’ve made a few boneheaded errors along the way. Your list here has helped me see the broad categories where WordPress needs help.
Onward!
Guy
Camille Cunningham • 6 months ago
That’s great to hear, Guy. Thank you :) Lots of luck with your site!
Old Sarge • 6 months ago
Interesting a novice web master with little experience caching for me is a term lacking an understanding
Camille Cunningham • 6 months ago
Hi there! Do you mean that you’re not sure what caching means? Caching is the process of storing data in a temporary storage area (a cache). This allows the browser to get those files from the cache rather than the original server when you revisit a page you’ve recently visited. This is done to save the network time and traffic when loading a page. Hope this helps :)
Ikechukwu • 6 months ago
Thank you so much for this list. We are actually enjoying our premium Yoast plugin. Your plugin is still the best seriously.
Willemien Hallebeek • 6 months ago
That’s so nice, Ikechukwu. Glad to hear you find it helpful and keep enjoying it!
Jerry Bauer • 6 months ago
Is there a plugin to stop some of the SPAM comments I received daily, I am up to 30 a day and none of them are serious. Why am I getting these?
Christopher Flann • 6 months ago
I would agree with all of these based on my experience EXCEPT Wordfence for security. Wordfence works OK, but based on using it as paid customer too, I prefer Cerber. Cerber is much easier to configure, and it solves the contact form spam problem too. Although I am also a paid customer for Cerber, I mostly use the free version as I have never had occasion to request support. It just works.
Christopher Flann • 6 months ago
The best solution is Cerber. Believe me, I own more than one website and have tried all the solutions for contact form spam. Under the spam option, it gives you the option to check other forms besides the registration form. That is the one you want to click. Check it out, you won’t believe the difference. Akismet is exceptionally poor in comparison.
^ Post author
Jono Alderson • 6 months ago
Akismet’s a good shout. If that’s not catching everything, you might need something a little more feature-rich, and/or something which uses honeypots and captchas. There’s a good list of options here: https://www.wpexplorer.com/antispam-plugins-wordpress/
Chinonso Ibeh • 6 months ago
He can also add blacklisted words in comment setting, that works for me most times, when we dealing with human spammers
Richard • 6 months ago
Good list however, we found AMP slowed the site rather than speeding up and try signing up for M$ Clarity it’s a joke. I already have a Bing account but oh no can’t log in with that…
^ Post author
Jono Alderson • 6 months ago
There are definitely some setups where AMP might not be the best fit. Worth keeping an eye out, though, as there are some upcoming changes which will allow sites to load the AMP runtime JS locally. That’ll speed things up considerably!
I’m sorry you had a bad experience with setting up Clarity; did you reach out to their support/help folks? Hopefully they can help out!
Csaba • 6 months ago
Thanks for the nice suggestions!
Ik would disagree though that these are plugins that ‘every site should have’.
Every site should have a caching/optimisation plugin, an SEO plugin (Yoast is a perfect option ;-)) and some kind of security plugin. Sites should be backed up as well. Other plugins, like analytics and admin improvements, are far from essential. They should be critically decided upon for each website. I would not encourage people to install plugins because ‘every site needs them’. It may be just the title, the recommendations are great IF you need them. :-)
Edwin Toonen • 6 months ago
Hi Csaba. I agree with you that the title is a bit strong. We don’t want to force anyone to use anything. These are just some of the plugins we have had good experiences with. People need to figure out for themselves what they need for their site. If something from this list fist their goals, then these are great additions. But don’t just install everything just because someone tells you to ;)
Trevor Wood • 6 months ago
For backup I would recommend Akeeba backup. Creates a backup of the site and moves the backup off the server to some other cloud storage like Dropbox, One Drive, Google Drive, AWS and about 20 other options.
Edwin Toonen • 6 months ago
Sounds great, Trevor! Thanks for the addition.
Per • 6 months ago
I would add these as plugins ones onoe should seriously consider:
But can you tell me what can be the best plugin for creating a general discussion or a debate page?
^ Post author
Jono Alderson • 6 months ago
That’s a great question! I don’t have any good recommendations. There are plenty of forum and community plugins out there (including the well-known BBPress and BuddyPress), as well as wiki plugins and comment plugins – but I don’t know anything which brings those all together. Perhaps there’s a gap in the plugin market for something interesting?
Rob • 6 months ago
Any suggestions for GDPR?
^ Post author
Jono Alderson • 6 months ago
That’s a tricky one. There are plenty which add consent banners, interact with cookie settings, and allow users to opt in or out of various options. But broadly speaking, GDPR isn’t a problem that a plugin can solve. I’d recommend getting legal advice based on your specific website(s), country/countries, users, data storage and processing policies and so on, then seeing if a particular plugin (or combination of plugins) solves for those problems.
Tony Hisir • 6 months ago
WP Fastest Cache is a great one as well. I have been using it for a long time and very happy with it.
Edwin Toonen • 6 months ago
Thanks for sharing your suggestion, Tony!
Stefan • 6 months ago
WP Hide Login
So many sites use the predictable wp-admin. This plugin allows you to change it to what you want.
Combined with 2FA from whatever source it improves things a lot.
Edwin Toonen • 6 months ago
That’s a helpful suggestion to keep your site safe and secure. Thanks, Stefan!
Ned Buratovich • 6 months ago
Does this comment thread use the wpDiscuz commenting plugin recommended in this article?
Thank you, Willemien, I also use the Yoast Comment Hacks plugin on many of my sites. It seems like wpDiscuz has many more features. Is there a reason you don’t use the plugin you recommend to your readers on the Yoast.com site?
Camille Cunningham • 5 months ago
Not specifically, Ned. Our Yoast Comment Hacks plugin just offers us all the features we need when it comes to commenting :)
Mark • 6 months ago
Four plugins I use on just about every site I build are Use Any Font, Safe SVG, Custom CSS, and Sweep. I also like WP Forms. Of course, I always use yours and most of the ones you recommended.
Edwin Toonen • 6 months ago
Interesting additions! Thanks, Mark.
Dominique • 6 months ago
One addition that takes care of:
Bots content scraping.
Email obfuscation for bots.
Hotlink protection.
Bad bots protection.
Full WASAP firewall.
Full page edge caching including HTML in more than 200 worldwide locations with APO -> Automatic Platform Optimization feature.
Free edge certificates.
Hides server & IP from the web by proxy.
TLS level selection.
Speed optimizations like:
Image optimization including serving webp.
Minifying HTML, CSS & JavaScript.
Dedicated optimizations to improve loading times for mobile devices.
Complete set of metrics & analytics including performance with core web vitals.
Lots more…
All that with a super light weight plugin that eliminates most of the plugins in the above list. Less plugins is better for performance.
$20 a month. Cloudflare
Edwin Toonen • 6 months ago
Yep, Cloudflare is awesome!
Em Collin • 6 months ago
Will be using Relevanssi and Wordfence on my blog now!
Willemien Hallebeek • 6 months ago
That’s great. Good luck, Em!
John Goldshot • 6 months ago
Great list. I actually use several of those plugins on a regular basis. Tho I would add the Redirection plugin and I prefer WPDorms.
Edwin Toonen • 6 months ago
Awesome, John.
Mary Watson • 6 months ago
I like the suite of tools offered by ithemes. Backup buddy, security tools.
Edwin Toonen • 6 months ago
Thanks for your suggestions, Mary!
Paul Tansley • 6 months ago
For Images, ShortPixel Image Optimiser is the best option out there. As a professional photographer, I need no quality loss, but small images. It does the job perfectly.
Edwin Toonen • 6 months ago
Thanks for the addition, Paul!
Jon Hill • 6 months ago
I wonder why WP Cerber wasn’t on the list for security.
^ Post author
Jono Alderson • 6 months ago
Hi Jon, I haven’t used this one, so I’m not in a position to have an opinion on it – yet! I’ll be sure to check it out.
Hossein • 6 months ago
Litespeed cache (for litespeed servers)
Willemien Hallebeek • 6 months ago
Thanks for your addition, Hossein!
N.A. Ferrell • 6 months ago
Good list. I have a few additional suggestions from my own experience.
Security:
BBQ Firewall (free basic firewall)
Blackhole for Bad Bots (free and easy to configure)
Analytics:
Koko Analytics (privacy-friendly analytics plugin that is fully GDPR compliant, good for blogs that value privacy and don’t need all the tracking included with solutions such as Google, Yandex, or Clicky) – there are a few others along the same lines that I haven’t tried
Additional Recommendation for Speed
OMGF – Host Google Fonts locally, I found it very easy to set up
Admin Improvements:
WP Post Series – Lightweight plugin by a developer for Automatic that allows for easy creation of series. Adds series taxonomy, and for each article in a series, adds a special block that expands to reveal all of the articles in the series. Lightweight and works very well. Worth a look for any site that does article series.
For Yandex Webmasters
RSS for Yandex Turbo – Not a universal recommendation, but since Yoast makes Yandex verification easy, worth including. This plugin creates Yandex Turbo Feeds, which help with Yandex indexing. Although the plugin is in Russian, translates cleanly with Google Translate or Mate. Very easy to configure and I confirmed that it works in my testing.
I second Rob on EWWW – great image optimizing plugin. Just works and no upload limits in the free version.
Camille Cunningham • 6 months ago
Thanks for all of these additions to the list!
Sitis • 6 months ago
Love this tool. It´s amazing! :-)
Radoslav Ivanov • 6 months ago
I’ve been so much into optimizing a website for speed, but not sure if the mobile optimizations really do help SEO.
Would be glad to hear from you
Camille Cunningham • 6 months ago
Hi there. Mobile optimization is definitely something you want to work on, especially since people are using their phones now more than ever. We have an ultimate guide on mobile SEO that can help you with that! Good luck :)
Rob • 6 months ago
Wordfence has 2fa built in so if you already have it installed there’s no need for a separate plugin.
Some others I usually install on most sites:
ewww/imsanity – Image resizing and optimisation
Email address encoder – stop bots scraping emails
Akeeba backup – Like the others, I just trust it more.
ACF/CPT UI – Custom post types and fields
I agree with these – and under Admin, I would add Find My Blocks – which has recently been invaluable to me (using Genesis Blocks, Get Wid, and 7 custom blocks) in 3 or 4 different environments.
Nice addition, thanks Karen!
This is very helpful, Jono.
Thank you so much for publishing this. I struggle sometimes trying to understand what plugins I should and should not add to WordPress, and I’ve made a few boneheaded errors along the way. Your list here has helped me see the broad categories where WordPress needs help.
Onward!
Guy
That’s great to hear, Guy. Thank you :) Lots of luck with your site!
Interesting a novice web master with little experience caching for me is a term lacking an understanding
Hi there! Do you mean that you’re not sure what caching means? Caching is the process of storing data in a temporary storage area (a cache). This allows the browser to get those files from the cache rather than the original server when you revisit a page you’ve recently visited. This is done to save the network time and traffic when loading a page. Hope this helps :)
Thank you so much for this list. We are actually enjoying our premium Yoast plugin. Your plugin is still the best seriously.
That’s so nice, Ikechukwu. Glad to hear you find it helpful and keep enjoying it!
Is there a plugin to stop some of the SPAM comments I received daily, I am up to 30 a day and none of them are serious. Why am I getting these?
I would agree with all of these based on my experience EXCEPT Wordfence for security. Wordfence works OK, but based on using it as paid customer too, I prefer Cerber. Cerber is much easier to configure, and it solves the contact form spam problem too. Although I am also a paid customer for Cerber, I mostly use the free version as I have never had occasion to request support. It just works.
The best solution is Cerber. Believe me, I own more than one website and have tried all the solutions for contact form spam. Under the spam option, it gives you the option to check other forms besides the registration form. That is the one you want to click. Check it out, you won’t believe the difference. Akismet is exceptionally poor in comparison.
Akismet’s a good shout. If that’s not catching everything, you might need something a little more feature-rich, and/or something which uses honeypots and captchas. There’s a good list of options here: https://www.wpexplorer.com/antispam-plugins-wordpress/
He can also add blacklisted words in comment setting, that works for me most times, when we dealing with human spammers
Good list however, we found AMP slowed the site rather than speeding up and try signing up for M$ Clarity it’s a joke. I already have a Bing account but oh no can’t log in with that…
There are definitely some setups where AMP might not be the best fit. Worth keeping an eye out, though, as there are some upcoming changes which will allow sites to load the AMP runtime JS locally. That’ll speed things up considerably!
I’m sorry you had a bad experience with setting up Clarity; did you reach out to their support/help folks? Hopefully they can help out!
Thanks for the nice suggestions!
Ik would disagree though that these are plugins that ‘every site should have’.
Every site should have a caching/optimisation plugin, an SEO plugin (Yoast is a perfect option ;-)) and some kind of security plugin. Sites should be backed up as well. Other plugins, like analytics and admin improvements, are far from essential. They should be critically decided upon for each website. I would not encourage people to install plugins because ‘every site needs them’. It may be just the title, the recommendations are great IF you need them. :-)
Hi Csaba. I agree with you that the title is a bit strong. We don’t want to force anyone to use anything. These are just some of the plugins we have had good experiences with. People need to figure out for themselves what they need for their site. If something from this list fist their goals, then these are great additions. But don’t just install everything just because someone tells you to ;)
For backup I would recommend Akeeba backup. Creates a backup of the site and moves the backup off the server to some other cloud storage like Dropbox, One Drive, Google Drive, AWS and about 20 other options.
Sounds great, Trevor! Thanks for the addition.
I would add these as plugins ones onoe should seriously consider:
– Akismet
– Redirection
– Subscribe to Comments Reloaded (or similar)
Cool, Per! Thanks for your list.
Anyway, Yoast SEO is still the best plugin.
But can you tell me what can be the best plugin for creating a general discussion or a debate page?
That’s a great question! I don’t have any good recommendations. There are plenty of forum and community plugins out there (including the well-known BBPress and BuddyPress), as well as wiki plugins and comment plugins – but I don’t know anything which brings those all together. Perhaps there’s a gap in the plugin market for something interesting?
Any suggestions for GDPR?
That’s a tricky one. There are plenty which add consent banners, interact with cookie settings, and allow users to opt in or out of various options. But broadly speaking, GDPR isn’t a problem that a plugin can solve. I’d recommend getting legal advice based on your specific website(s), country/countries, users, data storage and processing policies and so on, then seeing if a particular plugin (or combination of plugins) solves for those problems.
WP Fastest Cache is a great one as well. I have been using it for a long time and very happy with it.
Thanks for sharing your suggestion, Tony!
WP Hide Login
So many sites use the predictable wp-admin. This plugin allows you to change it to what you want.
Combined with 2FA from whatever source it improves things a lot.
That’s a helpful suggestion to keep your site safe and secure. Thanks, Stefan!
Does this comment thread use the wpDiscuz commenting plugin recommended in this article?
Hi Ned, actually, we’re using our own Yoast Comment Hacks plugin: https://yoast.com/wordpress/plugins/comment-hacks/
Thank you, Willemien, I also use the Yoast Comment Hacks plugin on many of my sites. It seems like wpDiscuz has many more features. Is there a reason you don’t use the plugin you recommend to your readers on the Yoast.com site?
Not specifically, Ned. Our Yoast Comment Hacks plugin just offers us all the features we need when it comes to commenting :)
Four plugins I use on just about every site I build are Use Any Font, Safe SVG, Custom CSS, and Sweep. I also like WP Forms. Of course, I always use yours and most of the ones you recommended.
Interesting additions! Thanks, Mark.
One addition that takes care of:
Bots content scraping.
Email obfuscation for bots.
Hotlink protection.
Bad bots protection.
Full WASAP firewall.
Full page edge caching including HTML in more than 200 worldwide locations with APO -> Automatic Platform Optimization feature.
Free edge certificates.
Hides server & IP from the web by proxy.
TLS level selection.
Speed optimizations like:
Image optimization including serving webp.
Minifying HTML, CSS & JavaScript.
Dedicated optimizations to improve loading times for mobile devices.
Complete set of metrics & analytics including performance with core web vitals.
Lots more…
All that with a super light weight plugin that eliminates most of the plugins in the above list. Less plugins is better for performance.
$20 a month. Cloudflare
Yep, Cloudflare is awesome!
Will be using Relevanssi and Wordfence on my blog now!
That’s great. Good luck, Em!
Great list. I actually use several of those plugins on a regular basis. Tho I would add the Redirection plugin and I prefer WPDorms.
Awesome, John.
I like the suite of tools offered by ithemes. Backup buddy, security tools.
Thanks for your suggestions, Mary!
For Images, ShortPixel Image Optimiser is the best option out there. As a professional photographer, I need no quality loss, but small images. It does the job perfectly.
Thanks for the addition, Paul!
I wonder why WP Cerber wasn’t on the list for security.
Hi Jon, I haven’t used this one, so I’m not in a position to have an opinion on it – yet! I’ll be sure to check it out.
Litespeed cache (for litespeed servers)
Thanks for your addition, Hossein!
Good list. I have a few additional suggestions from my own experience.
Security:
BBQ Firewall (free basic firewall)
Blackhole for Bad Bots (free and easy to configure)
Analytics:
Koko Analytics (privacy-friendly analytics plugin that is fully GDPR compliant, good for blogs that value privacy and don’t need all the tracking included with solutions such as Google, Yandex, or Clicky) – there are a few others along the same lines that I haven’t tried
Additional Recommendation for Speed
OMGF – Host Google Fonts locally, I found it very easy to set up
Admin Improvements:
WP Post Series – Lightweight plugin by a developer for Automatic that allows for easy creation of series. Adds series taxonomy, and for each article in a series, adds a special block that expands to reveal all of the articles in the series. Lightweight and works very well. Worth a look for any site that does article series.
For Yandex Webmasters
RSS for Yandex Turbo – Not a universal recommendation, but since Yoast makes Yandex verification easy, worth including. This plugin creates Yandex Turbo Feeds, which help with Yandex indexing. Although the plugin is in Russian, translates cleanly with Google Translate or Mate. Very easy to configure and I confirmed that it works in my testing.
I second Rob on EWWW – great image optimizing plugin. Just works and no upload limits in the free version.
Thanks for all of these additions to the list!
Love this tool. It´s amazing! :-)
I’ve been so much into optimizing a website for speed, but not sure if the mobile optimizations really do help SEO.
Would be glad to hear from you
Hi there. Mobile optimization is definitely something you want to work on, especially since people are using their phones now more than ever. We have an ultimate guide on mobile SEO that can help you with that! Good luck :)
Wordfence has 2fa built in so if you already have it installed there’s no need for a separate plugin.
Some others I usually install on most sites:
ewww/imsanity – Image resizing and optimisation
Email address encoder – stop bots scraping emails
Akeeba backup – Like the others, I just trust it more.
ACF/CPT UI – Custom post types and fields
Thanks for your additions, Rob!