Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!
TikTok
The official TikTok plugin makes it easy to put your business in front of billions of highly engaged consumers, helping you achieve your marketing and sales objectives by promoting your products or services worldwide. These users aren’t just browsing; they’re buying, as evidenced by the popular hashtag #TikTokMadeMeBuyIt. And they could become your next customers. You can integrate with TikTok directly on WordPress to run Lead Generation Ads to capture leads and improve targeting. If you want to also run other types of ads and unlock additional features, please go to WooCommerce to download the official TikTok integration. With the official TikTok plugin, you can perform the following: Easily install the TikTok Pixel and enable the Events API to track your traffic, measure and optimize your campaign performance, and find new customers. Run Lead Generation Ads to capture emails for future campaigns. Sync your store catalog to TikTok (available via the WooCommerce integration). Create engaging conversion ads from your product catalog (available via the WooCommerce integration). Tiktok Shop related Feature update: Please note: We will be discontinuing the Tiktok shop features from June 1, 2026 on this plugin. All Ads features will be continued as described in these notes. Related to Tiktok Shop feature deprecation, the following are important timelines: New Sign-ups: Starting 2nd March, the official TikTok WooCommerce plugin will no longer accept new TikTok Shop connections. Support Cutoff: We will provide full support for all shop features on the current app until 31st May. For Tiktok shop connections, you may utilize the following alternatives: 1. (Recommended) Visit the TikTok Shop App Store: Find a new integrated solution designed to help your business grow here. 2. Utilize the Tiktok Shop Seller Center to manage your product listings TikTok Features Find new prospects With TikTok Lead Gen Ads, seamlessly gather new leads on the platform using instant, customizable forms that integrate with your CRM system, simplifying lead qualification and conversion. Advertise your products (available via the WooCommerce integration) Effortlessly create new ads, do no-stress campaign creation to reach your advertising objectives with: One-click Ad Account and Business Center Account creation gets you ready to start advertising quickly. Launch new campaigns in minutes: just configure your budget, targeting, and optimization event. Choose the creative you want to feature or use your catalog images to automatically create engaging video ads using the embedded Smart Video Generator tool. Set automatic targeting when creating a campaign to let the algorithm find your ideal TikTok audience. Special, limited-time offer: Get up to $1,500 in ad credits when you test your first TikTok ad campaign! (Terms and conditions apply) Measure and improve your ad performance (available via the WooCommerce integration) Install the TikTok Pixel and Events API with a click, enabling browser and server-side connection with automatic updates — no developer needed. Enable Advanced Matching to allow for more refined targeting and optimization, which has shown to have a positive impact on campaign performance. Measure performance across the customer journey, including payment and checkout pages. Make informed decisions using deep insights into your campaign: increase ad performance, capture more leads, and improve targeting. Note: Advertisers with an existing TikTok Pixel can connect it to the TikTok integration. However, we recommend leveraging the new pixel created and installed via the official TikTok for WooCommerce extension for a more seamless setup and event deduplication. If you use an existing custom setup, there may be deduplication work required for accurate reporting. Check out the TikTok Business Help Center for more on deduplication. Need support getting started & growing on TikTok? TikTok Marketing Partners provide expert assistance with campaign management, measurement, and creative production services for every budget and audience. Our dedicated TikTok customer support team can provide platform assistance and guidance. If you need help with installing or getting started with the TikTok plugin on WordPress or the TikTok integration on WooCommerce, please [open a support ticket] at (https://wordpress.org/support/plugin/tiktok-for-business/) or (https://woo.com/contact-us/). Creative resources Learn more about creative best practices for TikTok. Get inspiration from other small businesses who have found success on TikTok. Get started in 3 steps! Download and add the official TikTok integration from the WordPress plugin directory or the WooCommerce store. Under the marketing sidebar menu, select TikTok and initiate your setup. Follow the prompts to complete the setup and create or connect your TikTok accounts. Please note: For Marketing: 1. Sign in or create a new TikTok account. 2. Authorize WordPress or WooCommerce to connect with TikTok for Business. 3. Connect your existing Business Center. 4. Install the pixel and activate Advanced Matching for maximized performance (or connect an existing one). 5. Sync your product catalog (available via the WooCommerce integration). 6. Add your billing & payment info to test your first campaign. 7. [View detailed instructions](https://woocommerce.com/document/tiktok-for-woocommerce/#section-6). Want to learn more before you get started with TikTok? Get in touch with a TikTok Specialist! What does the official TikTok integration enable? When you set up the plugin, you will have: Easy TikTok For Business and Ad accounts set-up. Server and Browser (Pixel) side connection in one click. Additionally, for installers from WooCommerce: Automatic catalog sync to use ad formats like Video Shopping Ads. Access to assisted ad-campaign creation within your dashboard. Do I need to have a TikTok account? You will need to connect to a new or existing TikTok account. What events does the TikTok Pixel for WordPress support? The updated integration supports View Content, Start Checkout, Add-to-Cart, Purchase, Add to Wishlist, Click Button, Submit Form, Complete Registration, and Subscribe. Why should I install this now? We recommend advertisers take advantage of the new integration ahead of the busy season to enable more opportunities for measurement, optimization, and targeting to maximize performance on TikTok. Why am I not seeing TikTok in my WordPress Admin? Navigate to WordPress > Settings > Advanced > Features. Un-check the “Navigation” option and save the changes. You should now see “TikTok” under the “Marketing” tab. What is Advanced Matching? Advanced Matching is a feature that enables businesses to send customer information to better match website and app events with people on TikTok. This allows advertisers to enhance performance through more robust measurement, optimization, and audience creation capabilities. How can I create ads on TikTok? You may create ads on TikTok Ads Manager or via our TikTok integration (for a lead generation or conversion campaign). For access to all other objectives (such as reach, traffic, app installs, video views, and lead generation), please use TikTok Ads Manager. See how to choose the right objective here. Are there any prerequisites before ads creation? You must have your Ad Account in an approved state and have payment methods set up before an ad campaign can start delivery. For more details on account approval, please click here. For more details on accepted payment methods, please click here. Will I be able to see all campaigns implemented via the TikTok for WordPress plugin on TikTok Ads Manager? You will be able to see all campaigns created on the TikTok integration on your TikTok Ads Manager account. Which product categories are allowed for advertising? Click here for a detailed overview of product category restrictions in our advertising. How do I get help installing the TikTok for the WooCommerce extension? Please open a support ticket.
