Free Security plugins for WordPress

Free plugins that keep a WordPress site safe: firewalls, login protection, spam filters and backups.

7 free Security plugins

Akismet Anti-Spam

by Automattic

Automatic spam filter for WordPress comments and contact forms, made by Automattic. Free for personal sites.

Version
5.7.2
Updated
Aug 18
Installs
5M+
4.7WP 7.1

Exports a whole WordPress site into a single file and imports it on another site, for easy backups and moves.

Version
7.112
Updated
Oct 7
Installs
5M+
4.5WP 7.1

Wordfence Security

by Mark Maunder

Firewall, malware scanner and login protection in one plugin. Free firewall rules arrive 30 days after paid users.

Version
9.0.2
Updated
Sep 30
Installs
5M+
4.7WP 7.1

Really Simple Security

by Really Simple Plugins

Moves your site to HTTPS in one click and adds WordPress hardening, vulnerability alerts and email 2FA. Formerly Really Simple SSL.

Version
9.8.3
Updated
Sep 15
Installs
3M+
4.9WP 7.1

UpdraftPlus

by David Anderson / Team Updraft

Scheduled backups to Google Drive, Dropbox or S3, with one-click restore from the dashboard.

Version
1.26.13
Updated
Oct 19
Installs
3M+
4.8WP 7.1

Duplicator

by Syed Balkhi

Backup and migration plugin that packages your whole WordPress site so you can move or clone it to a new host or domain.

Version
5.0.6
Updated
Oct 14
Installs
1M+
4.9WP 7.1

Stops brute force attacks on the WordPress login page by locking out IPs after too many failed attempts. 2FA included free.

Version
3.3.10
Updated
Sep 23
Installs
1M+
4.8WP 7.1