WordPress remains one of the leading website software platforms today, used by millions of sites of varying sizes. Web developers often choose WordPress because of its versatility in design and function. Its interface and back-end elements are very modular. With additional software plugins, you can extend WordPress with even more features. But many marketers wonder, “How many plugins should you install?”
First, let’s start with what a WordPress plugin is.
WordPress is the base software platform – the core, and a plugin is another piece of software you can install under it. In the standard WordPress structure, there is a subdirectory under your theme to store all of the plugins.
Plugins can be authored by anyone; some are created and supported by the teams who contributed to WordPress or by recognized leaders in the WordPress ecosystem. Others are created by independent developers or agencies. Some plugins are available for free or have a free version in the WordPress plugins library. Some are premium services with a license fee requirement.
What the plugin does can vary. Some provide one simple functionality change, like a single piece of tracking code inserted to your theme. While other plugins add lots of intricate features and database additions. An example is an events calendar.
Why are IT professionals concerned about the number of plugins installed on a website?
It’s not uncommon to hear someone suggest you should minimize the number of plugins on your WordPress site. In many cases, they are worried about security and maintenance. The general perception is that the more software you need to maintain, the less reliable and risk-averse the website may be. However, before adopting this view, it’s important to understand the nature of website development and maintenance on a broader level.
Assess the whole website’s health and maintenance.
The concept of using a plugin is an attractive web development strategy. Essentially, you are “plugging in” a separate modular piece of software to perform a function instead of revising and customizing the code of the core WordPress software. If the plugin is written efficiently, it should be a good partner to WordPress.
For any type of website platform, maintenance should be a priority. WordPress is not an outlier that requires maintenance; all types of software do. Technology changes, server environments change, and even website trends change.
When considering website security, think about it holistically with all of the IT operations related to it. Of course the plugins should be maintained and monitored. So should the main software, and so should the computer and devices given privileges to administer it. The web hosting server should be reliable and maintained, the SSL should be renewed each year, and the admin passwords should be strong.
What is important when choosing a plugin?
Instead of leading with concerns about the total number of plugins your site has, carefully research each plugin choice that you make.
- When you determine a new feature need, consult a web developer on the approach of using a ready-made plugin versus a custom-coded solution. Or find out if the native functions of WordPress can address the goal without an unnecessary addition.
- Look for plugins that have established history and users.
- The plugin should have good ratings and feedback. Plugins with low rated reviews and a reputation for bugs are a poor choice.
- The plugin should be current and recently maintained. Old plugins that are no longer maintained by their authors could have major technical problems and there is likely no troubleshooting support available.
- Your existing plugins and WordPress version should be compatible with the new plugin. In some cases a vendor will call out which versions and technologies are required for their plugin to operate. And sometimes a resource will state certain plugins that are not compatible with each other (creating conflicts).
- The plugin should be efficient and unbloated. For example, if you choose a software that is too robust and has a tremendous amount of features that you will never use, it may not be the best choice to solve a simpler need.
- When possible, it’s also a good idea to choose a plugin by reputable authors. Some software developers have a well-known positive history of creating and maintaining several popular plugins used by thousands of people.
- Keep in mind that some web hosts disallow the use of certain plugins because they are not compatible with their structure or have a security concern. If this is the case, the disallowed items might be listed on the host’s website documentation.
There is no magic number of plugins.
Since every website is unique, there is not one universal number of plugins that everyone should follow. I agree that it’s ideal to keep good track of every plugin you install and use and avoid retaining items that do not serve a purpose. Even if you deactivate a plugin that you no longer use, it is risky to keep it installed on the site and server. It helps you maintain a much cleaner website to only retain the plugin software you actively use. Focus more on following the guidelines of installing reputable, quality plugins and keeping them frequently maintained and upgraded.
As needs change, periodically audit your website plugins in an organized list. Define which are still crucial to your website’s design and function, and which are expendable. Remove plugins that are no longer required.
If you notice that the website is performing slowly, run appropriate performance tests to look at all parts of the website’s design theme, coding, hosting server, and plugins. If the site does become too bloated with features, it may be time to optimize the amount of software and even upgrade the hosting environment.
Other resources can help you keep a healthy site with healthy plugins.
There are additional resources and tools you can use to monitor security concerns related to WordPress and plugins. We have found Wordfence’s security announcement blog and email list to be very educational. Their team and the supporting community report known issues with popular plugins, so users are aware of the threats and can make prompt decisions to address them. Security scan plugins from providers like WordFence and Sucuri detect vulnerabilities to help you address patches or take action when something is unsafe.
And finally, remember that your professional web developer is a good resource to recommend plugins for your website. Tap into their experience and find out what they have implemented on other successful websites.
Managing Director