Plugins we recommend

The five plugins we install on every WordPress site

You do not need dozens of plugins. These five, plus the Divi theme, cover security, speed, SEO, e-mail and images. Each guide shows the exact settings we use and explains why.

A laptop on a desk showing the WordPress Plugins screen with Converter for Media, Kadence Security, W3 Total Cache, WP Mail SMTP and Yoast SEO installed and set to auto-update
Security

Kadence Security

Site scans for known vulnerabilities, two-factor login, a private login address, hidden author URLs and quiet lockouts.

See the settings →

Speed

W3 Total Cache

Page cache, object cache and browser cache: the difference between a site that feels slow and one that feels instant.

See the settings →

SEO

Yoast SEO

Titles, meta descriptions, sitemaps and structured data, with the archive settings that keep thin pages out of Google.

See the settings →

E-mail

WP Mail SMTP

Makes the e-mails from your contact forms pass SPF, DKIM and DMARC so they land in the inbox, not in spam.

See the settings →

Images

Converter for Media

Serves WebP and AVIF copies of your images automatically, usually cutting image weight by a third or more.

See the settings →

Design

Divi (theme and builder)

The visual builder we design with. See the speed settings, plus how to edit pages and keep Divi updated.

See the settings →

Install them in this order

  1. Kadence Security first, before the site is public, so the login is protected from day one.
  2. Divi, then build your pages.
  3. Yoast SEO while you write, so every page gets a title and description as it is created.
  4. WP Mail SMTP before your contact form goes live. Send a test.
  5. Converter for Media, then run its bulk optimization once your images are uploaded.
  6. W3 Total Cache last. Caching while you are still building only gets in the way.

What we do not install

  • A second security or caching plugin. Two of either fight each other and slow the site down.
  • A separate minify or "optimize everything" plugin on a Divi site. Divi already does this; doubling it breaks layouts.
  • Plugins for things a theme or a line of settings can do, such as a plugin just to add a header script or change a colour.
  • Anything abandoned or with an unfixed CVE. See how to check.

Keep all of them up to date: our auto update advice explains which updates to automate.

Rather have us do it for you?

Precision Web Hosting builds, secures and hosts WordPress sites with every setting on this site already done. Tell us about your project and we will send you a quote.

Request a quoteWays we can help