The biggest beginner mistake in WordPress is not the theme; it is installing twenty plugins in the first week. Every plugin is extra code, and every line of code is a chance for a conflict, a slowdown or a vulnerability. Good plugins are few and specific, and the rest can wait until you have a real reason.

The rule before the list

Ask three questions about any plugin: what problem does it solve? What breaks if I remove it? When did the developer last update it? If you cannot answer clearly, do not install it. A plugin whose purpose you cannot name is maintenance debt with no return.

The five plugins that cover the basics

  • Security: a known plugin that watches logins and updates and alerts you to intrusion attempts.
  • Backup: daily schedule, copies stored off the host, and a restore test every quarter.
  • Cache: exactly one caching plugin, not two fighting each other.
  • SEO: control over titles, descriptions, sitemaps and structured data.
  • Images: compression and WebP conversion without visible quality loss.

These five cover 80% of a normal content site. You do not need a store, memberships or bookings in month one.

Plugins to avoid at first

  • All-in-one bundles that add twenty features when you use two.
  • Speed tools that edit core files automatically with no clear log.
  • Heavy page builders that become impossible to remove later.
  • Anything abandoned for a year or more.

The practical test: disable the plugin and note what breaks. If nothing breaks, it was consuming resources for no reason. Use a staging site before disabling anything on a live site.

How to measure a plugin's impact

Before installing, record the load time of the homepage and your largest article. A day after installing, measure again. A good plugin adds little; if the number jumps, find a lighter alternative. Performance is not an impression; it is a number that moves in front of you when you measure it.

Finally, update weekly and keep a copy before every update. An update is not dangerous by itself, but updating without a backup is reckless. Read the backup plan, and if plugins are slowing you down, follow the speed checklist.

Tools you do not need to buy yet

Paid plugin ads are tempting, but most of what you need exists free and good enough: basic security, caching, image compression, backup and SEO. Do not buy an advanced plugin before a real limit blocks your work. At this stage, money is better spent on a decent domain and stable hosting than on a feature bundle you will use half of.

When to add a sixth plugin

When a repeated task eats your time, or when you find a gap in the basics: a contact form that never arrives, heavy images slowing the site, a content calendar you cannot manage by hand. Then look for a plugin that solves that one task, and read its last update and user comments before installing. Never install a plugin because an article called it «essential»; the only real signal is your own need.

A monthly maintenance routine

Block thirty minutes at the start of each month: update WordPress, plugins and themes, check the latest backup, measure the homepage and your biggest article, and remove any plugin unused for two months. This routine prevents problems from piling up and makes a sudden failure less likely. Write the result in a short note so that months later you know what actually changed instead of relying on memory.

A successful site is not measured by how many plugins it has, but by how many problems it does not have. Start with five, write a short page explaining each, and your decisions become clear to you and to anyone who helps later.