WordPress has tens of thousands of plugins, and it's easy to get carried away. We regularly take over business websites running 40 or more plugins, many doing the same job twice, several not updated in years. The site is slow, fragile and a security risk.
A typical business website needs far fewer. Here are the categories that matter, and some tips for choosing well.
The core set
SEO
An SEO plugin lets you set meta titles and descriptions, generates an XML sitemap, handles basic schema and helps manage redirects. Well-known options include Yoast SEO, Rank Math and All in One SEO. Pick one; never run two.
Security
A security plugin or firewall adds login protection, malware scanning and blocking of common attacks. Your host may already provide some of this at server level. Our WordPress security guide covers the wider picture.
Backups
Automatic, scheduled backups stored off-site. Some hosts include this; if yours doesn't, a backup plugin is essential.
Forms
For contact and enquiry forms. Choose one with spam protection and the ability to send entries to email and store them in the dashboard.
Caching and performance
A caching plugin can make a big difference to speed, unless your host already provides server-level caching, in which case check which plugin they recommend. More in our guide to speeding up WordPress.
Image optimisation
Compresses images on upload and can serve modern formats like WebP.
Often useful, depending on the business
- A lightweight WhatsApp or click-to-call button
- Google Analytics or Tag Manager integration (or add the code directly)
- A cookie consent tool, if you run tracking or ads
- A booking plugin for clinics, salons and consultants
How to choose a good plugin
- Recently updated? Avoid plugins not updated for many months.
- Active installations and reviews, especially recent ones.
- Compatible with your WordPress version.
- Does it overlap with something you already have?
- Speed impact: test before and after on a staging site.
Plugins to be wary of
- "Nulled" or free copies of premium plugins from unofficial sites
- Heavy page builders stacked on top of a theme that already has one
- Sliders, animations and social feeds that load lots of scripts
- Multiple plugins doing the same job
A good rule of thumb
Every plugin should solve a real problem you have today. Review your list every few months and remove anything you're not actively using. Your site will be faster, safer and easier to maintain.
All of our WordPress builds use a lean, tested plugin set. Ask us to review yours.