{"id":62675,"date":"2020-10-28T16:46:12","date_gmt":"2020-10-28T20:46:12","guid":{"rendered":"https:\/\/www.inmotionhosting.com\/support\/?p=62675"},"modified":"2023-07-17T15:22:52","modified_gmt":"2023-07-17T19:22:52","slug":"wordfence","status":"publish","type":"post","link":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/","title":{"rendered":"How to Install the Wordfence WordPress Security Plugin"},"content":{"rendered":"<p>There are many <a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/8-essential-types-of-wordpress-plugins\/\">essential types of WordPress plugins<\/a> for the best performance needed by small and mid-size businesses (SMBs). Below we\u2019ll focus on how to <a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/10-ways-to-secure-wordpress\/\">secure WordPress<\/a> with the Wordfence security plugin. Wordfence has been one of most popular WordPress security plugins for years because of its long list of features:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Brute-force protection against bad bots and automated cyber attacks<\/li>\n\n\n\n<li>WordPress login security options including multi-factor authentication<\/li>\n\n\n\n<li>Consoles with verbose server related information for easier debugging<\/li>\n\n\n\n<li>Malware scanning for the website and child directories within the <a href=\"https:\/\/www.inmotionhosting.com\/support\/website\/where-to-upload-files\/\">website root directory<\/a><\/li>\n\n\n\n<li>Some security information and event management (SIEM) features such as live traffic monitoring<\/li>\n\n\n\n<li>And much more<\/li>\n<\/ul>\n\n\n\n<p>Below we\u2019ll cover some free functions of the Wordfence security plugin:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"#install\">Installing Wordfence<\/a>\n<ul class=\"wp-block-list\">\n<li><a href=\"#dashboard\">Dashboard<\/a><\/li>\n\n\n\n<li><a href=\"#wpcli\">WP-CLI<\/a><\/li>\n\n\n\n<li><a href=\"#manual\">Manually<\/a><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><a href=\"#scan\">Scan WordPress<\/a><\/li>\n\n\n\n<li><a href=\"#traffic\">View Live Traffic<\/a><\/li>\n\n\n\n<li><a href=\"#whois\">Whois Lookup<\/a><\/li>\n\n\n\n<li><a href=\"#diag\">WordPress Diagnostics<\/a><\/li>\n\n\n\n<li><a href=\"#option\">Wordfence Security Options<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"alert alert-info\">Need better WordPress performance? Check out InMotion\u2019s <a href=\"https:\/\/www.inmotionhosting.com\/wordpress-hosting\">WordPress Hosting<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"install\">Installing the Wordfence Plugin<\/h2>\n\n\n\n<p>You do not need to enter an API key for the free version.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"dashboard\">Install from the Dashboard<\/h3>\n\n\n\n<ol class=\"article_list wp-block-list\">\n<li><a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/logging-into-wordpress-dashboard\/\">Log into your WordPress dashboard<\/a>.<\/li>\n\n\n\n<li><a href=\"https:\/\/wordpress.org\/plugins\/wordfence\/\" target=\"_blank\" rel=\"noreferrer noopener\">Install the Wordfence plugin<\/a> and activate it.<\/li>\n\n\n\n<li>On the left, select <strong>Wordfence<\/strong> to start hardening WordPress.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"wpcli\">Install via WP-CLI<\/h3>\n\n\n\n<ol class=\"article_list wp-block-list\">\n<li><a href=\"https:\/\/www.inmotionhosting.com\/support\/server\/ssh\/do-you-provide-ssh-access\/\">Log into SSH<\/a>.<\/li>\n\n\n\n<li>Install and activate Wordfence with <a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/wp-cli\/install-a-plugin-using-wp-cli\/\">WP-CLI<\/a> using the following command: <pre>wp plugin install wordfence --activate <\/pre><\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"manual\">Install Manually<\/h3>\n\n\n\n<ol class=\"article_list wp-block-list\">\n<li>To install the plugin manually, download the plugin zip file from <a rel=\"noreferrer noopener\" href=\"https:\/\/wordpress.org\/plugins\/wordfence\/\" target=\"_blank\">WordPress.org\/plugins<\/a>.<\/li>\n\n\n\n<li><a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/cpanel\/how-to-upload-a-file-using-file-manager-in-cpanel\/\">Upload the zip file<\/a> and <a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/cpanel\/compressing-uncompressing-files\/#uncompress\">extract the folder<\/a> to the website\u2019s <code>wp-content\/plugins<\/code> folder.<\/li>\n\n\n\n<li>Log into your WordPress site or use the WP-CLI command to activate the plugin:<pre>wp plugin activate wordfence<\/pre><\/li>\n<\/ol>\n\n\n\n<p>After activating Wordfence, you will be prompted with a message stating \u201c<em>You have successfully installed Wordfence.<\/em>\u201d Enter your preferred email address for Wordfence emails notifications, agree to the Wordfence terms, and <strong>Continue<\/strong>. If you don\u2019t have <a href=\"https:\/\/www.wordfence.com\/wordfence-signup\/\" target=\"_blank\" rel=\"noreferrer noopener\">Wordfence premium (paid) license<\/a>, click <strong>No Thanks<\/strong> at the bottom.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1013\" height=\"508\" src=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2020\/10\/wordfence-security-terms.png\" class=\"optimized-lcp-image\" alt=\"\" loading=\"eager\" fetchpriority=\"high\" sizes=\"(max-width: 768px) 100vw, 768px\" srcset=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2020\/10\/wordfence-security-terms.png 1013w, https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2020\/10\/wordfence-security-terms-300x150.png 300w, https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2020\/10\/wordfence-security-terms-768x385.png 768w\"><\/figure>\n\n\n\n<p class=\"alert alert-info\">When you first visit some Wordfence pages, you\u2019ll be prompted with pop-ups explaining notable features.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"scan\">Scan WordPress with Wordfence<\/h2>\n\n\n\n<p>We will now show you how to use Wordfence to <strong>scan your WordPress site for malware<\/strong>, weak passwords, and out-of-date plugins\/themes, and more. Some scanning abilities require a premium Wordfence security license.<\/p>\n\n\n\n<ol class=\"article_list wp-block-list\">\n<li><a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/logging-into-wordpress-dashboard\/\">Log into your WordPress dashboard<\/a>.<\/li>\n\n\n\n<li>On the left, click <strong>Wordfence<\/strong>, then <strong>Scan<\/strong>.<\/li>\n\n\n\n<li>Select <strong>Scan Options and Scheduling<\/strong> on the right of the page to update your Wordfence scanner settings.<\/li>\n\n\n\n<li>Make any desired changes to your Wordfence scanner settings.<br>\u2022 <em>Scan Scheduling<\/em> \u2013 Toggle the option to let Wordfence choose when to scan or manually set the scan schedule (if you have a premium license)<br>\u2022 <em>Basic Scan Type Options<\/em> \u2013 Select a scan preset for the <em>General Options<\/em> section<br>\u2022 <em>General Options<\/em> \u2013 Specify what Wordfence scans and change the <em>Basic Scan Type Options<\/em> selection to Custom automatically<br>\u2022 <em>Performance Options<\/em> \u2013 Configure lower resource scanning settings such as increasing scan duration and limiting memory usage<br>\u2022 <em>Advanced Scan Options<\/em> \u2013 Exclude files from being scanned and add malware scan signatures in regex (one per line).<\/li>\n\n\n\n<li>Select <strong>Save Changes<\/strong> in the top-right corner.<\/li>\n\n\n\n<li>Select <strong>Back to Scan<\/strong> in the upper-left corner.<\/li>\n\n\n\n<li>Select <strong>Start New Scan<\/strong> to start scanning your website. How long the scan takes depends on the size of your website. We recommend checking Wordfence every 30-60 minutes.<\/li>\n<\/ol>\n\n\n\n<p>When the Wordfence scan finishes you will see a \u201cScan Complete\u201d message with your results below. You can click the <strong>Show Log<\/strong> link to see details about the scan.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"225\" src=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2018\/05\/edu_wordpress_205_wordfence-plugin_how-to-scan_wordfence-scan-in-progress-1024x225.png\" alt=\"Wordfence scan in progress\" class=\"wp-image-15723\" srcset=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2018\/05\/edu_wordpress_205_wordfence-plugin_how-to-scan_wordfence-scan-in-progress-1024x225.png 1024w, https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2018\/05\/edu_wordpress_205_wordfence-plugin_how-to-scan_wordfence-scan-in-progress-300x66.png 300w, https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2018\/05\/edu_wordpress_205_wordfence-plugin_how-to-scan_wordfence-scan-in-progress-768x169.png 768w, https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2018\/05\/edu_wordpress_205_wordfence-plugin_how-to-scan_wordfence-scan-in-progress.png 1187w\" sizes=\"auto, (min-width: 1360px) 876px, (min-width: 960px) calc(61.58vw + 51px), calc(100vw - 80px)\" \/><\/figure>\n\n\n\n<p class=\"alert alert-info\">Get more information in your WordPress security scans for free with <a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/wordpress-vulnerabilities-wpscan\/\" target=\"_blank\" rel=\"noreferrer noopener\">WPScan<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"traffic\">View Live Traffic in Wordfence<\/h2>\n\n\n\n<p>Viewing your live traffic can provide valuable insight into how, when, and why people visit your website. This is helpful when <a href=\"https:\/\/www.inmotionhosting.com\/blog\/email-marketing-basics-tips-to-launching-a-successful-campaign\/\">targeting ad campaigns<\/a>, improving <a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/measuring-for-keyword-relevance-wordpress-seo\/\">search engine optimization (SEO)<\/a>, or trying to troubleshoot some anomalies in your website performance without a separate <a href=\"https:\/\/www.inmotionhosting.com\/support\/website\/analytics\/choose-the-best-analytics-tool\/\">web analytics application<\/a>.<\/p>\n\n\n\n<ol class=\"article_list wp-block-list\">\n<li><a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/logging-into-wordpress-dashboard\/\">Log into your WordPress dashboard<\/a>.<\/li>\n\n\n\n<li>On the left, select <strong>Wordfence<\/strong> and <strong>Tools<\/strong>.<\/li>\n\n\n\n<li>You\u2019ll be redirected to the <strong>Live Traffic<\/strong> logging visits to your site. It will include the traffic type (human, bot, warning, or blocked), location, page visited, time, IP, hostname, response, and view setting. Click one of the listings to see additional details.<\/li>\n\n\n\n<li>Toggle the <strong>Expand All Results<\/strong> switch to open all of the listings for viewing along with options to <em>Block IP<\/em>, <em>Run WHOIS<\/em>, or See <em>Recent<\/em> Traffic of the visitor.<\/li>\n\n\n\n<li>By default, Wordfence only logs security-related events (e.g. login attempts and blocked requests). This requires much less server resources. To log all traffic (not recommended for an extended period of time on Shared Hosting), select <strong>Live Traffic Options<\/strong> at the top of the screen and <strong>ALL TRAFFIC<\/strong>. Then <strong>Save Changes<\/strong> above.<\/li>\n\n\n\n<li>Here you can also specify WordPress usernames, IP addresses, and <a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/customize-wordpress-content-useragent-content-switcher\/\">user-agents<\/a> to ignore when logging and how much live traffic data to store for how long.<\/li>\n\n\n\n<li>If you make any updates, <strong>Save Changes<\/strong>.<\/li>\n\n\n\n<li>In the traffic results, you can click the filter drop-down menu to view traffic from a specific source. Available options are: All Hits, Humans, Registered Users, Crawlers, Google Crawlers, Pages Not Found, Logins and Logouts, Locked Out, Blocked, and Blocked By Firewall.<\/li>\n\n\n\n<li>Check the <strong>Show Advanced Filters<\/strong> option to filter traffic by date, group similar traffic, and use additional filters.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"777\" src=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2018\/06\/edu_wordpress_205_wordfence-plugin_view-live-traffic_view-live-traffic-1024x777.png\" alt=\"Example live traffic in Wordfence\" class=\"wp-image-15742\" srcset=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2018\/06\/edu_wordpress_205_wordfence-plugin_view-live-traffic_view-live-traffic-1024x777.png 1024w, https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2018\/06\/edu_wordpress_205_wordfence-plugin_view-live-traffic_view-live-traffic-300x228.png 300w, https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2018\/06\/edu_wordpress_205_wordfence-plugin_view-live-traffic_view-live-traffic-768x583.png 768w, https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2018\/06\/edu_wordpress_205_wordfence-plugin_view-live-traffic_view-live-traffic.png 1202w\" sizes=\"auto, (min-width: 1360px) 876px, (min-width: 960px) calc(61.58vw + 51px), calc(100vw - 80px)\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"whois\">Whois Lookup in Wordfence<\/h2>\n\n\n\n<p>The Wordfence security plugin allows you to do a <a href=\"https:\/\/www.inmotionhosting.com\/support\/domain-names\/how-to-look-up-domain-whois\/\">WHOIS lookup<\/a> in WordPress without a network node being in your traffic log. The WHOIS record lets you view publicly displayed information about domains or IP addresses. This is helpful when trying to view details about the registrar, owner, authoritative <a href=\"https:\/\/www.inmotionhosting.com\/support\/domain-names\/dns-nameserver-changes\/complete-guide-to-dns-records\/\">nameservers<\/a>, abuse contact address, etc.<\/p>\n\n\n\n<ol class=\"article_list wp-block-list\">\n<li><a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/logging-into-wordpress-dashboard\/\">Log into your WordPress dashboard<\/a>.<\/li>\n\n\n\n<li>On the left, select <strong>Wordfence<\/strong>, then <strong>Tools<\/strong>.<\/li>\n\n\n\n<li>Select the <strong>Whois Lookup<\/strong> tab.<\/li>\n\n\n\n<li>Enter the domain you want to look up and click <strong>LOOK UP IP OR DOMAIN<\/strong>.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"809\" height=\"838\" src=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2018\/06\/edu_wordpress_205_wordfence-plugin_whois-lookup_whois-lookup.png\" alt=\"Example Wordfence Whois Lookup\" class=\"wp-image-15737\" srcset=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2018\/06\/edu_wordpress_205_wordfence-plugin_whois-lookup_whois-lookup.png 809w, https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2018\/06\/edu_wordpress_205_wordfence-plugin_whois-lookup_whois-lookup-290x300.png 290w, https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2018\/06\/edu_wordpress_205_wordfence-plugin_whois-lookup_whois-lookup-768x796.png 768w\" sizes=\"auto, (min-width: 1360px) 876px, (min-width: 960px) calc(61.58vw + 51px), calc(100vw - 80px)\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"diag\">View WordPress Diagnostics in Wordfence<\/h2>\n\n\n\n<p>Here you can see information about your server environment and installation of WordPress. This can be a helpful tool when troubleshooting issues with WordPress or the web server.<\/p>\n\n\n\n<ol class=\"article_list wp-block-list\">\n<li>In the navigation menu, click <strong>Wordfence<\/strong>, then <strong>Tools<\/strong>.<\/li>\n\n\n\n<li>Select the <strong>Diagnostics<\/strong> tab on the right.<\/li>\n\n\n\n<li>You will then see the Diagnostics report for your website, click the <strong>Expand All Stats<\/strong> button to open all the sections. Below is a description of the information included in each section of the report provided by Wordfence.<br>\u2022 <em>Wordfence Status<\/em> \u2013 General information about the Wordfence installation<br>\u2022 <em>Filesystem<\/em> \u2013 Ability to read\/write various files<br>\u2022 <em>Wordfence Config<\/em> \u2013 Ability to save Wordfence settings to the database<br>\u2022 <em>Wordfence Firewall<\/em> \u2013 Current WAF configuration<br>\u2022 <em>MySQL<\/em> \u2013 Database version and privileges<br>\u2022 <em>PHP Environment<\/em> \u2013 PHP version, important PHP extensions, and process owner (e.g. <a href=\"https:\/\/www.inmotionhosting.com\/support\/amp\/viewing-account-technicial-information-in-amp\/\" target=\"_blank\" rel=\"noreferrer noopener\">cPanel username<\/a>)<br>\u2022 <em>Connectivity<\/em> \u2013 Ability to connect to Wordfence, servers, your own site, and your <a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/cpanel\/how-to-find-your-shared-ip-address-of-your-server-in-cpanel\/\" target=\"_blank\" rel=\"noreferrer noopener\">server IP address<\/a><br>\u2022 <em>Time<\/em> \u2013 Server time accuracy and applied offsets<br>\u2022 <em>IP Detection<\/em> \u2013 Methods of detecting a visitor\u2019s IP address<br>\u2022 <em>WordPress Settings<\/em> \u2013 WordPress version and internal settings\/constants<br>\u2022 <em>WordPress Plugins<\/em> \u2013 Status of installed plugins<br>\u2022 <em>Must-Use WordPress Plugins<\/em> \u2013 <a href=\"https:\/\/www.inmotionhosting.com\/support\/amp\/viewing-account-technicial-information-in-amp\/\">WordPress \u201cmu-plugins\u201d<\/a> that are always active, including those provided by hosts<br>\u2022 <em>Drop-In WordPress Plugins<\/em> \u2013 WordPress \u201cdrop-in\u201d plugins (which replace WordPress functionality) that are active<br>\u2022 <em>Themes<\/em> \u2013 Status of installed themes<br>\u2022 <em>Cron Jobs<\/em> \u2013 List of WordPress cron jobs scheduled by WordPress, plugins, or themes<br>\u2022 <em>Database Tables<\/em> \u2013 Database table names, sizes, timestamps, and other metadata<br>\u2022 <em>Log Files<\/em> \u2013 PHP error logs generated by your site, if enabled by your host<br>\u2022 <em>Other Tests<\/em> \u2013 System configuration, memory test, send test email from this server (e.g. phpinfo page)<br>\u2022 <em>Debugging Options<\/em> \u2013 Toggle WordPress debugging options for your site<\/li>\n\n\n\n<li>At the bottom, <strong>Save Changes<\/strong>.<\/li>\n\n\n\n<li>At the top, click <strong>Send Report by Email<\/strong> to email the report to Wordfence support or others.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"option\">Wordfence Security Options<\/h2>\n\n\n\n<p>The Wordfence <em>All Options<\/em> page includes all available configurations within the plugin. This can be easier for experienced users to configure everything without bouncing around menu options.<\/p>\n\n\n\n<ol class=\"article_list wp-block-list\">\n<li><a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/logging-into-wordpress-dashboard\/\">Log into your WordPress dashboard<\/a>.<\/li>\n\n\n\n<li>On the left, select <strong>Wordfence<\/strong>, then <strong>All Options<\/strong>. Below is an outline of the available Wordfence security options.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table><tbody><tr><th>Wordfence Global Options<\/th><\/tr><tr><th>Wordfence License<\/th><td>View your free license or enter a premium license to upgrade.<\/td><\/tr><tr><th>View Customization<\/th><td>Choose if you want to display menu items for <em>All Options<\/em>, <em>Blocking<\/em>, or <em>Live Traffic<\/em>. These will show up in the main dashboard menu under \u201cWordfence\u201d.<\/td><\/tr><tr><th>General Wordfence Options<\/th><td>Set if you want Wordfence to update automatically, view\/change your email address for alerts, choose how Wordfence gets IP addresses, hide your WordPress version, disable Wordfence cookies, pause live updates when window loses focus, set update interval, bypass the LiteSpeed \u201cnoabort\u201d check, and delete Wordfence tables and data on deactivation.<\/td><\/tr><tr><th>Dashboard Notification Options<\/th><td>Choose if you want to receive dashboard notifications for updates and scan status.<\/td><\/tr><tr><th>Email Alert Preferences<\/th><td>Specify preferred email alerts from the options list.<\/td><\/tr><tr><th>Activity Report<\/th><td>Set if you want to receive a regular email summary or enable an activity report widget in the dashboard.<\/td><\/tr><tr><th>Firewall Options<\/th><\/tr><tr><th>Basic Firewall Options<\/th><td>Set your firewall status and protection level.<\/td><\/tr><tr><th>Advanced Firewall Options<\/th><td>Delay IP\/Country blocking, whitelist IP\u2019s, block IP\u2019s that access specific URL\u2019s, or ignore IP\u2019s.<\/td><\/tr><tr><th>Brute Force Protection<\/th><td>Set your brute force protection rules here such as lock out options.<\/td><\/tr><tr><th>Rate Limiting<\/th><td>Choose your rate-limiting settings here, for example you can set rules for bots or throttle specific visitors by behavior.<\/td><\/tr><tr><th>Whitelisted URLs<\/th><td>Whitelist known safe URL\u2019s that are sending requests to your site.<\/td><\/tr><tr><th>Blocking Options<\/th><\/tr><tr><th>Advanced Country Blocking Options<\/th><td>Block specific countries here, this is a <a href=\"https:\/\/www.wordfence.com\/wordfence-signup\/\" target=\"_blank\" rel=\"noreferrer noopener\">premium Wordfence feature<\/a>.<\/td><\/tr><tr><th>Scan Options<\/th><\/tr><tr><th>Scan Scheduling<\/th><td>Choose if you want to let Wordfence choose when to scan, or manually set the scan schedule if you have a premium license.<\/td><\/tr><tr><th>Basic Scan Type Options<\/th><td>Set if you want to perform a Limited, Standard, High, or Custom scan.<\/td><\/tr><tr><th>General Options<\/th><td>Choose what you want Wordfence to specifically scan for here.<\/td><\/tr><tr><th>Performance Options<\/th><td>Set if you want to use <em>low resource scanning<\/em>, or manually limit the scan options.<\/td><\/tr><tr><th>Advanced Scan Options<\/th><td>Exclude files from being scanned here, or add specific scan signatures.<\/td><\/tr><tr><th>Tool Options<\/th><\/tr><tr><th>Live Traffic Options<\/th><td>Enable live traffic logging, set how much live traffic data to store, and ignore specific users, IP addresses, or user agents.<\/td><\/tr><tr><th>Import\/Export Options<\/th><td>Import or Export your Wordfence settings.<\/td><\/tr><tr><th>Login Security Options<\/th><td>Go to the Login security options page<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"alert alert-warning\">The <em>Filter Comment Spam<\/em> feature has been removed from the Wordfence security plugin.<\/p>\n\n\n\n<p>Wordfence is a great WordPress security suite. However, there are other aspects to hardening WordPress. To compliment your security posture, install the <a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/how-to-setup-bbq-block-bad-queries-on-wordpress\/\">BBQ: Block Bad Queries<\/a> and <a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/http-headers-security\/\">HTTP Headers<\/a> security plugins.<\/p>\n\n\n<p>Become a master of <a href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/\">WordPress plugins<\/a>! Protect, optimize, secure, and expand the functionality of your website easily with the help of WordPress plugins!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>There are many essential types of WordPress plugins for the best performance needed by small and mid-size businesses (SMBs). Below we&#8217;ll focus on how to secure WordPress with the Wordfence security plugin. Wordfence has been one of most popular WordPress security plugins for years because of its long list of features: Below we&#8217;ll cover some<a class=\"moretag\" href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/\"> Read More ><\/a><\/p>\n","protected":false},"author":57014,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[4379],"tags":[],"class_list":["post-62675","post","type-post","status-publish","format-standard","hentry","category-plugins"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to Install the Wordfence Security Plugin for WordPress<\/title>\n<meta name=\"description\" content=\"Learn how to secure WordPress against cyber attacks including malware, brute-force login attempts, and denial-of-service (DoS) attacks with the Wordfence security plugin.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Install the Wordfence Security Plugin for WordPress\" \/>\n<meta property=\"og:description\" content=\"Learn how to secure WordPress against cyber attacks including malware, brute-force login attempts, and denial-of-service (DoS) attacks with the Wordfence security plugin.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/\" \/>\n<meta property=\"og:site_name\" content=\"InMotion Hosting Support Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/inmotionhosting\/\" \/>\n<meta property=\"article:published_time\" content=\"2020-10-28T20:46:12+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-07-17T19:22:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2020\/10\/wordfence-security-terms.png\" \/>\n<meta name=\"author\" content=\"InMotion Hosting Contributor\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/InMotionHosting\" \/>\n<meta name=\"twitter:site\" content=\"@InMotionHosting\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"InMotion Hosting Contributor\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/\"},\"author\":{\"name\":\"InMotion Hosting Contributor\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644\"},\"headline\":\"How to Install the Wordfence WordPress Security Plugin\",\"datePublished\":\"2020-10-28T20:46:12+00:00\",\"dateModified\":\"2023-07-17T19:22:52+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/\"},\"wordCount\":1732,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2020\/10\/wordfence-security-terms.png\",\"articleSection\":[\"WordPress Plugins\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/\",\"name\":\"How to Install the Wordfence Security Plugin for WordPress\",\"isPartOf\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2020\/10\/wordfence-security-terms.png\",\"datePublished\":\"2020-10-28T20:46:12+00:00\",\"dateModified\":\"2023-07-17T19:22:52+00:00\",\"description\":\"Learn how to secure WordPress against cyber attacks including malware, brute-force login attempts, and denial-of-service (DoS) attacks with the Wordfence security plugin.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#primaryimage\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2020\/10\/wordfence-security-terms.png\",\"contentUrl\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2020\/10\/wordfence-security-terms.png\",\"width\":1013,\"height\":508},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.inmotionhosting.com\/support\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Install the Wordfence WordPress Security Plugin\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#website\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/\",\"name\":\"InMotion Hosting Support Center\",\"description\":\"Web Hosting Support &amp; Tutorials\",\"publisher\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.inmotionhosting.com\/support\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#organization\",\"name\":\"InMotion Hosting\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg\",\"contentUrl\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg\",\"width\":696,\"height\":696,\"caption\":\"InMotion Hosting\"},\"image\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/inmotionhosting\/\",\"https:\/\/x.com\/InMotionHosting\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644\",\"name\":\"InMotion Hosting Contributor\",\"description\":\"InMotion Hosting contributors are highly knowledgeable individuals who create relevant content on new trends and troubleshooting techniques to help you achieve your online goals!\",\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/inmotion-hosting\/\",\"https:\/\/x.com\/https:\/\/twitter.com\/InMotionHosting\"],\"url\":\"https:\/\/www.inmotionhosting.com\/support\/author\/inmotion-hosting-contributor\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Install the Wordfence Security Plugin for WordPress","description":"Learn how to secure WordPress against cyber attacks including malware, brute-force login attempts, and denial-of-service (DoS) attacks with the Wordfence security plugin.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/","og_locale":"en_US","og_type":"article","og_title":"How to Install the Wordfence Security Plugin for WordPress","og_description":"Learn how to secure WordPress against cyber attacks including malware, brute-force login attempts, and denial-of-service (DoS) attacks with the Wordfence security plugin.","og_url":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/","og_site_name":"InMotion Hosting Support Center","article_publisher":"https:\/\/www.facebook.com\/inmotionhosting\/","article_published_time":"2020-10-28T20:46:12+00:00","article_modified_time":"2023-07-17T19:22:52+00:00","og_image":[{"url":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2020\/10\/wordfence-security-terms.png","type":"","width":"","height":""}],"author":"InMotion Hosting Contributor","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/InMotionHosting","twitter_site":"@InMotionHosting","twitter_misc":{"Written by":"InMotion Hosting Contributor","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#article","isPartOf":{"@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/"},"author":{"name":"InMotion Hosting Contributor","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644"},"headline":"How to Install the Wordfence WordPress Security Plugin","datePublished":"2020-10-28T20:46:12+00:00","dateModified":"2023-07-17T19:22:52+00:00","mainEntityOfPage":{"@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/"},"wordCount":1732,"commentCount":0,"publisher":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#organization"},"image":{"@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#primaryimage"},"thumbnailUrl":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2020\/10\/wordfence-security-terms.png","articleSection":["WordPress Plugins"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/","url":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/","name":"How to Install the Wordfence Security Plugin for WordPress","isPartOf":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#primaryimage"},"image":{"@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#primaryimage"},"thumbnailUrl":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2020\/10\/wordfence-security-terms.png","datePublished":"2020-10-28T20:46:12+00:00","dateModified":"2023-07-17T19:22:52+00:00","description":"Learn how to secure WordPress against cyber attacks including malware, brute-force login attempts, and denial-of-service (DoS) attacks with the Wordfence security plugin.","breadcrumb":{"@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#primaryimage","url":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2020\/10\/wordfence-security-terms.png","contentUrl":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2020\/10\/wordfence-security-terms.png","width":1013,"height":508},{"@type":"BreadcrumbList","@id":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/wordfence\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.inmotionhosting.com\/support\/"},{"@type":"ListItem","position":2,"name":"How to Install the Wordfence WordPress Security Plugin"}]},{"@type":"WebSite","@id":"https:\/\/www.inmotionhosting.com\/support\/#website","url":"https:\/\/www.inmotionhosting.com\/support\/","name":"InMotion Hosting Support Center","description":"Web Hosting Support &amp; Tutorials","publisher":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.inmotionhosting.com\/support\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.inmotionhosting.com\/support\/#organization","name":"InMotion Hosting","url":"https:\/\/www.inmotionhosting.com\/support\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/","url":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg","contentUrl":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg","width":696,"height":696,"caption":"InMotion Hosting"},"image":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/inmotionhosting\/","https:\/\/x.com\/InMotionHosting"]},{"@type":"Person","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644","name":"InMotion Hosting Contributor","description":"InMotion Hosting contributors are highly knowledgeable individuals who create relevant content on new trends and troubleshooting techniques to help you achieve your online goals!","sameAs":["https:\/\/www.linkedin.com\/company\/inmotion-hosting\/","https:\/\/x.com\/https:\/\/twitter.com\/InMotionHosting"],"url":"https:\/\/www.inmotionhosting.com\/support\/author\/inmotion-hosting-contributor\/"}]}},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"primary_category":{"id":4379,"name":"WordPress Plugins","slug":"plugins","link":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/plugins\/"},"_links":{"self":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/62675","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/users\/57014"}],"replies":[{"embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/comments?post=62675"}],"version-history":[{"count":10,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/62675\/revisions"}],"predecessor-version":[{"id":105689,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/62675\/revisions\/105689"}],"wp:attachment":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/media?parent=62675"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/categories?post=62675"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/tags?post=62675"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}