The WordPress Plugins I Install on Almost Every Business Site

WordPress has tens of thousands of plugins, and that’s both its strength and its biggest trap. Too many plugins slow your site down and create security risks. Here’s the lean set I rely on for most business websites.

Page building

• Elementor Pro: for designing pages, headers, footers, forms and popups visually. It replaces several separate plugins on its own.

SEO

• Rank Math or Yoast SEO: page titles, meta descriptions, sitemaps and structured data so Google understands your site.

Security

• A security plugin such as Wordfence: firewall, malware scanning and login protection.
• Two-factor login for every admin account.

Backups

• UpdraftPlus or your host’s backups: automatic backups stored somewhere other than your hosting account.

Speed

• A caching plugin that matches your hosting, such as LiteSpeed Cache on LiteSpeed servers.
• Image optimization to compress images and serve modern formats.

Email delivery

• WP Mail SMTP: makes sure contact form emails actually reach your inbox instead of spam.

My plugin rules

1. If a theme or Elementor can do it, skip the plugin.
2. Only install plugins that are well-reviewed and recently updated.
3. Delete plugins you don’t use, don’t just deactivate them.
4. Test updates on a staging site for important websites.

Keep it healthy

Plugins need regular updates to stay secure. If you’d rather not handle that yourself, my website maintenance plans take care of it every month.