I currently have three security plugins installed on WordPress, one of them I have a paid subscription to. Do you think this is overkill? I took a lot of steps to secure my WP site, and I'm worried one plugin might step on the others toes. So I'm not sure I need all three. Could it do more harm than good? Or is it better to have more?

  • This is a question for the WordPress forums and considered off topic here. – Brad Dalton May 29 '15 at 22:56
  • I guess I don't get what is considered on and off topic - I thought plugins would be considered WP dev? – amandathewebdev May 29 '15 at 23:23
  • Specific third-party plugins are off topic (for now). But questions about general setup and administration, like yours, are perfectly on topic. – fuxia May 30 '15 at 3:18

This isn’t a question of quantity. You have to understand what each plugin does to say whether it is necessary or not.

Let’s say we have three "security" plugins:

  1. One enforces strong passwords.
  2. One blocks aggressive log-in attempts.
  3. One sends you an email when your PHP version is behind the latest security release.

Having these three plugin running in parallel is fine.

But having three plugins active that do all of these things (and usually a lot of nonsense for their feature list) is bad.

Do not install plugins with overlapping responsibilities. It doesn’t matter whether for security, SEO or performance.

Read the code, understand what it does, then select the most specific and best written solution.

Every plugin adds complexity to the whole system and makes it more fragile. You have to get something essential for that price.


Not the answer you're looking for? Browse other questions tagged or ask your own question.