How to Install a Plugin in WordPress: 4 Methods for 2026

To install a plugin in WordPress, open your dashboard, go to Plugins and then Add New Plugin, search for the plugin by name, click Install Now, and then click Activate. That flow handles almost every free plugin from the official directory. For a plugin you bought or downloaded as a .zip file, you use the Upload Plugin button on the same screen instead. For a site that is broken or locked out of its own admin area, you install the files by FTP, and developers can do the whole job in one line with WP-CLI.

This guide walks through how to install a plugin in WordPress four different ways, so you always have the right method for the situation in front of you. Plugins are how a plain WordPress site becomes a store, a membership site, a booking system, or a fast and secure business website. Installing one is easy, but installing the wrong one can slow your site down or leave a security hole, so this guide also covers the checks that keep a bad plugin off your site and the fixes for the errors that stop an install halfway.

Everything here assumes self-hosted WordPress, the kind you run on your own hosting with a wordpress.org install. If your site lives on WordPress.com instead, plugin installation works a little differently and needs a paid plan, which I explain below. Whichever setup you have, none of these methods ask you to write a single line of code, and the dashboard method takes about a minute once you know where the buttons are.

A WordPress plugin is a small package of code that adds a feature to your site without you having to build that feature yourself. One plugin adds a contact form to any page. Another turns a plain site into a full online shop. A backup plugin copies your whole database every night, and a security plugin blocks spam comments before they ever reach you. WordPress is designed to be extended this way, so the plugin system is built in from the very first day you install the software.

Most plugins come from the official plugin directory hosted at wordpress.org, which holds tens of thousands of free plugins that have all passed a basic review. You can browse that official plugin directory on the web, but you rarely need to, because the same directory is built into your dashboard. That is where you will search and install without ever downloading a file.

Premium plugins work a little differently. You buy them from a developer’s own website or from a marketplace, and you get a .zip file to upload yourself. Plenty of tools use a free-plus-paid model, where the free version lives in the directory and a Pro add-on arrives as a separate .zip file. A blocks plugin like DigiBlocks follows exactly that pattern, so knowing both the search method and the upload method covers you either way.

One thing trips up new users more than any technical step. There are two different products with confusingly similar names. Self-hosted WordPress, the free software from wordpress.org, lets you install any plugin you like. WordPress.com is a hosted service run by a company, and it only allows plugin installation on its paid plans, not on a free site. If your Add New Plugin screen looks locked or seems to be missing, you are almost certainly on a WordPress.com plan that does not include plugins yet, and the fix is a plan upgrade rather than a different button.

The dashboard method is the one you will use most often, and it works for any free plugin in the official directory. Log in to your site, look at the dark menu down the left side, and hover over Plugins. Click Add New Plugin, which opens a screen full of plugin cards with a search box tucked into the top right corner.

Type the name of the plugin you want, or a feature like “backup” or “contact form” if you are still deciding. WordPress filters the results as you type. Each result card shows the plugin name, a short description, a star rating, the number of active installations, and the date it was last updated. Those last three details matter a great deal, and I come back to exactly how to read them in the safety section further down.

When you find the plugin you want, click Install Now on its card. WordPress downloads the files and unpacks them onto your server, which usually takes only a few seconds. The button then changes to read Activate, and this is the step new users forget most often. Installing a plugin only copies it onto your site. Activating it is what actually turns the feature on, so a plugin that is installed but left inactive does nothing at all. Click Activate once that button appears.

After activation, most plugins add their own menu item or a settings link, usually in the left sidebar or on the main Plugins list. That is where you configure how the plugin behaves on your site. Some plugins launch a short setup wizard the first time you open them, while others sit quietly until you visit their settings. If nothing seems to happen after you activate one, open Plugins, find the one you just added, and look for a Settings link sitting right under its name.

The search box only finds plugins that live in the official directory. When you buy a premium plugin, or download a free one straight from a developer’s site, you get a .zip file instead, and you add it with the upload method rather than the search.

Start by downloading the .zip to your computer and leaving it zipped. Do not unzip it first, because WordPress expects the compressed file exactly as you received it. Then go to Plugins and Add New Plugin, the same screen as before, and click the Upload Plugin button near the top. A small panel drops open with a file picker. Choose your .zip, click Install Now, and wait while WordPress uploads and unpacks it. As with the search method, you finish the job by clicking Activate.

If the plugin came with a license key, you usually enter that key in the plugin’s own settings after activation. The key is what unlocks automatic updates and support, so keep the email or account page where you first got it. Premium plugins check the key now and then, and an expired one normally stops future updates rather than switching the plugin off, so your site keeps working while you renew.

There is one common snag with this method. The upload can fail with a message about the file being too large. WordPress and your hosting both set a maximum upload size, and some premium plugins are heavier than that default limit allows. When it happens you either raise the limit or fall back to the FTP method in the next section, and I cover the exact error and its fix in the troubleshooting part below.

There is one real temptation you should avoid here. Nulled plugins are paid plugins handed out for free on sketchy sites, with the license check quietly stripped out. They are one of the most common ways attackers hide malware, and a nulled plugin can hand your whole site to someone else without a warning. If a premium plugin matters to your business, buy it from the real developer, because the price is almost always lower than the cost of cleaning up an infected site later.

Two methods skip the dashboard entirely. You reach for them when the normal screen refuses to work, or when you manage sites for a living and want raw speed instead of clicking.

FTP is the manual route, and it is the one that saves you when your site is broken. If a plugin or a theme has locked you out of wp-admin, the upload screen is off limits, but you can still move files with an FTP client like FileZilla. Connect to your hosting using the FTP details from your host, then open the folder at wp-content and then plugins. Every installed plugin sits in its own folder here. To add a new one, unzip the plugin on your computer first, then drag the resulting folder into wp-content/plugins. Refresh the Plugins screen in your dashboard, or reconnect if you had been locked out, and the plugin appears in the list ready to activate. That same folder is also how you remove a broken plugin, since deleting its folder over FTP forces WordPress to deactivate it, which often clears the very error that locked you out.

WP-CLI is the fast route for developers and agencies. It is a command-line tool that controls WordPress from your terminal, and it turns a plugin install into a single line. Running wp plugin install wordpress-seo –activate downloads that plugin from the directory and switches it on in one step. You can install several plugins at once by listing their slugs one after another, which makes setting up a fresh site far quicker than clicking through the dashboard for each plugin in turn. WP-CLI needs command-line access to your server, so it suits managed hosting or a VPS more than a basic shared plan.

Most site owners never need either method for day-to-day work. But knowing that FTP exists is what turns a locked-out, panic-inducing afternoon into a five-minute fix, so it is worth trying once on a calm day before you ever need it for real.

The riskiest part of adding a plugin is the choosing, not the installing. A single badly built plugin can slow every page down or leave a security hole an attacker can walk straight through. A few quick checks before you ever click Install Now will prevent almost all of that trouble.

On any plugin’s listing in the directory, four details tell you most of what you need to know before you commit to it.

• Check the active installation count, because a plugin running on hundreds of thousands of sites has been stress-tested by that whole crowd, while very low numbers mean you would be one of the early testers.
• Look at when it was last updated, since a plugin touched in the last few months is clearly maintained, and one left untouched for two years may break on current WordPress or carry an unpatched security hole.
• Confirm the listing marks your WordPress version as compatible, and treat an “untested with your version” flag as a reason to be careful rather than a hard stop.
• Skim the one-star reviews and the support forum, where you learn fast whether real problems get answered by the developer or simply left to rot.

Back up your site before installing anything important, so a bad plugin becomes a quick restore rather than a lost evening of repair work. When you add several plugins at once, install them one at a time instead of in a batch, because if something breaks you will know exactly which plugin caused it.

Even with careful choices, an install sometimes stops with an error. The message “The uploaded file exceeds the upload_max_filesize directive” means your .zip is larger than the upload limit your host allows, and the fix is to raise that limit in your hosting panel or install the plugin over FTP, which sidesteps the limit completely. A different message, “Installation failed: Could not create directory”, usually points to a file permission problem inside wp-content/plugins or a disk that has filled up, and your host can reset those permissions in minutes if you are not comfortable doing it yourself.

The scariest result is a blank white screen right after you activate a plugin, which normally means the plugin clashed with your setup or ran out of memory. Deactivate it by deleting its folder over FTP, then work through our guide to the WordPress white screen of death for the full recovery. If the error mentions memory, raising your WordPress memory limit often clears it on its own. One last message, “Are you sure you want to do this?”, is simply a security token that expired because the upload page sat open too long, so reload the Add New Plugin screen and try the upload once more.

Installing a plugin is a one-minute job once you know the four routes into it. The dashboard search covers the everyday case, the upload screen handles anything you bought, FTP rescues a site that has locked you out, and WP-CLI speeds things up for the pros. The install itself is the easy part. Choosing what genuinely deserves a place on your site is the real skill.

Every active plugin runs its own code on your pages, so a lean site with ten well-chosen plugins beats a bloated one carrying fifty. Before you add the next plugin, ask whether something you already run can do the same job, and delete the plugins you stopped using instead of leaving them sitting there deactivated. When you do need something new, run the quick safety check first, and back up before anything important.

Start with the essentials most sites want, like a caching plugin for speed and a security plugin to keep intruders out, then build from there as your site and your confidence grow.