WPThumbs
Themes Plugins By purpose By industry Best-of lists Fix it guides
Free Plugin by Really Simple Plugins v9.8.0

Really Simple Security

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate.

Really Simple Security

The facts

Rating
4.9★ from 8,862
Active installs
3M+
Price
Free
Last updated
24 Aug 2026
Added
Mar 2015
Requires WP
6.6
Tested up to
WP 7.1
Requires PHP
7.4
Downloads
217,612,622

Our analysis

AI-assisted

Really Simple Security is a WordPress plugin designed to enhance the security of your website. It offers features such as SSL certificate generation, two-factor authentication, and vulnerability detection to help protect your site from potential threats.

The plugin is lightweight and easy to configure, requiring only a minute for initial setup. It is suitable for users looking for a straightforward security solution that minimizes impact on website performance and user experience.

Best for: This plugin is ideal for WordPress site owners seeking a simple and efficient security solution.

What it does well

  • Offers SSL certificate generation and enforcement
  • Includes two-factor authentication for added security
  • Lightweight design with modular features
  • Quick one-minute configuration process
  • Notifies users of vulnerabilities in plugins and themes

Where it falls short

  • Limited information on specific configurations or advanced features

Verdict

Really Simple Security provides essential security features in an accessible format, making it a practical choice for those prioritising ease of use and performance.

From the developer

Really Simple Plugins's own description of Really Simple Security, lightly tidied.

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate.

Really simple, Effective and Performant WordPress Security

Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features.

We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is:

  • Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code.
  • Easy-to-use: 1-minute configuration with short onboarding setup.

Security Features

Easy SSL Migration

Migrates your website to HTTPS and enforces SSL in just one click.

  • 301 redirect via PHP or .htaccess
  • Secure cookies
  • Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation.
  • Server Health Check: Your server configuration is every bit as important for your website security.

WordPress Hardening

Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses.

  • Prevent code execution in the uploads folder
  • Prevent login feedback and disable user enumeration
  • Disable XML-RPC
  • Disable directory browsing
  • Username restrictions (block ‘admin’ and public names)
  • and much more..

Vulnerability Detection

Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action.

Login Protection

Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email.

Read the full description on the official page →

Tagged as

Alternatives

Other plugins for securing a site.

Wordfence Security

Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....

Free 5M+ installs 4.7★ (4,983)
Akismet Anti-spam: Spam Protection

The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...

Free 5M+ installs 4.7★ (1,186)
Loginizer

Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.

Free 1M+ installs 4.8★ (1,030)
Safe SVG

Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.

Free 1M+ installs 4.9★ (79)
All-In-One Security

Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...

Free 1M+ installs 4.7★ (1,715)