Plugins and themes

How to install a WordPress plugin safely

To install a WordPress plugin safely, confirm that it provides the feature you need, check its compatibility and prepare a way to undo activation. The dashboard supports both the WordPress plugin directory and ZIP files supplied by a plugin's author.

Time: 20-40 minutes including a feature test Level: Dashboard steps
Neil McNaught, founder of BugShield and WordPress author
Written by
Written by
Updated
Updated

Plan the feature before installing the plugin

A plugin can add a booking form, shop or design feature without rebuilding your website. Installing it also introduces software that must work with your theme, hosting and existing plugins. The checks below help you choose the correct package, install it through the dashboard and test the feature with a recovery route ready.

Choose the correct plugin and prepare recovery

Check whether an existing plugin already provides the feature. For a new plugin, read its official description, installation instructions, recent release notes and support responses. Confirm its WordPress and PHP requirements against Tools > Site Health > Info. An installation count or rating is useful context, not proof of security or compatibility.

Download paid plugins from your account with their author. Avoid redistributed premium packages with unknown changes. Check whether a free base plugin or another extension is required, and install dependencies in the author's documented order.

Take a files-and-database backup and confirm hosting access works. Test plugins that change checkout, user access or the page builder on a staging copy first.

Install from the WordPress directory

  1. Sign in with an account allowed to install plugins. Open Plugins > Add New Plugin and search for the exact plugin name.
  2. Compare the author and description with the official listing. Open More Details to check requirements and installation notes, then close the details window.
  3. Choose Install Now for that plugin and wait for installation to complete. Installation places its files on the site; activation starts its WordPress functionality.
  4. Select Activate when the backup and testing arrangements are ready. Complete only the documented setup required for your feature. Record any connection or data-import changes it makes.

Use a ZIP supplied by the plugin author

If the plugin is supplied as a ZIP, keep the installable ZIP intact. A purchase download can contain documentation and a second plugin ZIP; use the author's installation instructions to identify the correct file.

  1. Go to Plugins > Add New Plugin > Upload Plugin.
  2. Choose the installable ZIP from your computer and click Install Now. If WordPress says the plugin already exists, stop and use the update guide before replacing it.
  3. Wait for a successful installation, then choose Activate Plugin and follow the author's setup instructions. Enter licence details only in the genuine plugin or vendor account screen.
WordPress Upload Plugin form with a ZIP file chooser and Install Now button
The ZIP upload controls in a 2020 Learn WordPress example, reproduced unchanged. The sample filename illustrates the chooser; select your own plugin's official ZIP. Current labels can differ. Credit: WordPress Training Team / Learn WordPress, CC BY-SA 4.0.

Test the feature and know how to undo it

Perform the task the plugin was installed for using test data. Submit its form, preview its widget or complete its documented test purchase as appropriate. Check the homepage, an inner page, mobile layout and dashboard. Verify the result while logged out as well as signed in.

If a problem starts after activation, open Plugins > Installed Plugins and choose Deactivate for the new plugin. When the dashboard fails, follow file-based deactivation or the WordPress recovery email. Deactivation stops the plugin running but does not reverse every setup change or data import.

After a successful staging test, repeat the recorded installation and settings live with a fresh backup, then repeat the feature checks. Remove unused test plugins using the uninstall guide.

Resolve installation messages without forcing the upload

If Add New Plugin is missing, ask the site or network administrator whether your role, hosting plan or site configuration permits installations. A Multisite network manages installation centrally. Do not change file permissions or roles just to reveal the button.

For an upload-size or write-permission error, give the host the exact message and plugin ZIP size. Ask them to confirm the upload limit and file ownership. An invalid-package message calls for checking the ZIP with its author, not renaming arbitrary files.

Official reference

WordPress documents plugin installation and management. Use the chosen plugin's own documentation for its setup and test procedure.

Get help with the next step

If you are unsure whether a plugin fits the site or activation breaks a feature, ask BugShield for help. Tell us the plugin and the result you need so we can assess the installation or conflict and confirm a price.

Questions answered

How to install a WordPress plugin safely FAQs

Is installing a plugin the same as activating it?

No. Installation adds its files. Activation starts its WordPress functionality and can run setup work, so prepare the backup and test before activation.

Why can I not see Add New Plugin?

Your account, a Multisite network, hosting restrictions or site configuration can prevent installation. Ask the responsible administrator to confirm the available permissions.

Should I unzip a plugin before uploading it?

The dashboard uploader expects the installable ZIP. If a purchase download contains several files, follow the vendor's instructions to find the actual plugin ZIP inside it.

Can I trust a plugin because it has many installations?

Popularity does not establish security or compatibility with your site. Check the official source, requirements, maintenance information and your own staged feature test.

Does deactivation undo everything the plugin changed?

No. Settings, imported content or external connections can remain. Read the vendor's removal instructions and preserve needed data before uninstalling.

Need a hand with your WordPress site?

Tell us what happened and where you got stuck. A BugShield developer can help you work out the next step and confirm a price for the fix.

Explore help with this issue

Accessibility settings

Adjust how this site looks and moves. Your choices are saved in this browser.