How to Choose WordPress Plugins: Checks Before You Install

In short: To choose WordPress plugins well, treat every plugin as extra software that brings security, speed and maintenance costs. Before you install one, check that it comes from a trusted source, was updated recently, is compatible with your WordPress and PHP versions and that support questions get answers. If two plugins do the same job, pick the one that is better maintained and add fewer plugins overall.

Plugins are what make WordPress so flexible: a contact form, SEO, caching or a shop is a few clicks away. But each plugin is another piece of software running on your site. This article walks through eight checks to make before installing a plugin, the fields to read on a plugin page and how to try a plugin safely.

Why it matters how you choose WordPress plugins

The Manage Plugins page of the WordPress documentation defines plugins as PHP scripts that extend WordPress and says plainly that plugins in the directory are of varying quality and often works in progress. Being listed in the directory does not make a plugin the right choice for your site.

A poorly chosen plugin causes trouble in three ways: it can leave security holes when it is not updated, slow the site down by loading code you do not need, or conflict with another plugin or your theme and break pages. We cover the security side in our WordPress security checklist and the speed side in our guide to WordPress speed optimization.

8 checks before you install a plugin

1. Define the need. Write down exactly what you want the plugin to do. If WordPress, your theme or a plugin you already use can do it, you do not need a new one.
2. Check the source. Download plugins from the WordPress.org plugin directory or the developer's official site. Avoid sites that hand out cracked copies of paid plugins; those files may contain malicious code and never receive updates.
3. Check the last update. The "Last updated" field on the plugin page shows whether the developer is still looking after the plugin. Security holes in a plugin that has not been updated for a long time may never be fixed.
4. Confirm compatibility. "Tested up to" shows the newest WordPress version the plugin was tested with; "WordPress version" and "PHP version" show the minimum versions it needs. If a plugin has not been tested with the latest three major WordPress releases, the page shows a warning.
5. Look at active installations. "Active installations" shows how widely a plugin is used. Problems in popular plugins tend to be noticed faster, but the number alone is no guarantee of quality.
6. Read the support forum. Open the Support tab on the plugin page and scan the recent threads. Are questions answered and are problems resolved?
7. Read the reviews. Look beyond the star average and read what the low ratings say. If the same complaint keeps coming up, take it seriously.
8. Watch out for closed plugins. A plugin removed from the directory shows a notice that it has been closed, and it can no longer be downloaded. If your site runs one, replace it with a maintained alternative.

Where to look on a plugin page

The information box on a WordPress.org plugin page brings most of these checks together:

Read these fields together. A plugin that was updated recently, has been tested with your WordPress version and gets regular answers in its support forum is a sounder choice than one with many installs that has not been updated for a long time. If you do not know which PHP version your site runs, your hosting provider can tell you.

When you search for plugins inside the WordPress dashboard, each result also shows a note saying whether it is compatible with your WordPress version, plus a "More Details" link.

How to try a plugin safely

1. Take a backup. Have a current backup of your files and database before installing anything. If you have no backup plan yet, start with our website backup guide.
2. Test on a copy if you can. Install the plugin on a copy of your site first; testing on a live shop or membership site is risky.
3. Install one plugin at a time. If something breaks, you know the cause.
4. Check speed and function. Compare the load time of key pages before and after, and make sure forms, the cart and the login page still work.
5. Roll back if needed. Deactivate the plugin. The WordPress documentation also recommends deactivating plugins one at a time to find the source of a problem.

After installation: upkeep and clean-up

Choosing a plugin does not end at installation. Keep plugins up to date; since WordPress 5.5 you can turn on automatic updates for each plugin individually. Our article on WordPress updates shows the process step by step. Delete plugins you no longer use instead of just deactivating them, because a deactivated plugin's files stay on the server. Every few months, review your plugin list and decide whether each one is still needed.

Common mistakes

• A separate plugin for every small need: Many plugins for small tasks add maintenance work and raise the risk of conflicts.
• Looking only at stars: A highly rated plugin that has not been updated for a long time can still be risky.
• Cracked premium plugins: These "free" copies can lead to a compromised site. If that has already happened, see our hacked website recovery guide.
• Testing on the live site: A plugin installed without a backup or a test can take the site down.

Summary

To choose WordPress plugins well, check the source, recent maintenance, compatibility and active support. Read the information box on the plugin page, take a backup before installing, test on a copy when possible and delete plugins you do not use. A site with fewer, well-maintained plugins is both safer and faster.

Frequently Asked Questions