Plugin count isn’t the problem people think it is — a well-coded plugin that does one thing costs you almost nothing. The problem is unnecessary plugins, and specifically the ones duplicating functionality your theme or another plugin already handles.

The 7 that earn their place on nearly every site

  • A real caching plugin (WP Rocket, W3 Total Cache, or your host’s built-in page cache if it has one). Page caching is still the single biggest speed win available to a typical WordPress site.
  • An image optimisation plugin that compresses on upload and serves WebP/AVIF automatically. Uncompressed images are the most common cause of a slow homepage.
  • A security/firewall plugin (Wordfence or similar) — mainly for the login-attempt rate limiting and file-change alerts, not the marketing scan features.
  • An SEO plugin (Yoast or Rank Math) for sitemaps, meta control and schema — genuinely useful, not just for the traffic-light scores.
  • A form plugin (WPForms, Fluent Forms, Contact Form 7) — self-hosting your own forms beats relying on a theme’s built-in contact form, which usually breaks silently on updates.
  • A real backup plugin, even if your host also backs up — a second, independent copy costs little and saves you when the host’s backup turns out to be the thing that failed.
  • A login security plugin that hides or rate-limits wp-login.php. Simple, and it quietly stops the majority of automated brute-force traffic before it reaches WordPress at all.

The 3 you probably don’t need

  • A page builder, if your theme already does the job. Running Elementor or similar on top of a theme that was built to not need one just adds weight and another thing to keep updated.
  • A “WordPress speed” plugin that duplicates your caching plugin. Two plugins fighting to minify the same CSS is a common, hard-to-diagnose source of broken styling.
  • An all-in-one “everything” plugin. The ones promising SEO, security, backups and speed in a single plugin are rarely excellent at any one of those things, and you lose the ability to swap out just the piece that’s underperforming.

A simple test before installing anything

Before adding a plugin, ask: does my theme or an existing plugin already do this? If yes, that’s a configuration problem, not a missing-plugin problem. Every plugin is something that has to be kept updated, checked for compatibility, and trusted with access to your site — the best plugin is often the one you don’t install.