New format
How to install a WordPress plugin: catalog, ZIP, and FTP
Plugins extend WordPress: SEO, forms, cache, store. You install them from the admin catalog, by uploading a ZIP, or via FTP into `wp-content/plugins`, then activate.
Below: install order and typical failures (nested archive, host upload bans). Which SEO plugins to pick lives in a separate piece; here it’s install and basic security hygiene.
Before installing
Back up files and DB, especially on production. Check PHP and WordPress version and plugin compatibility. Staging makes conflicts easier to catch.
Install extensions only from the official WordPress.org catalog or a clear vendor. "Nulled" and pirate packs are a common path to a backdoor.
Minimum before clicking Install:
- backup
- clear plugin job
- no duplicate of a tool you already have
- updates in recent months
- access rights under control
Install from the admin catalog
In the dashboard: Plugins → Add New. Find the name, open the card, click Install, then Activate. Menu labels may differ slightly by translation and version.
If the archive is "double" (ZIP inside ZIP with docs), the installer complains — unpack to the plugin folder with PHP files and upload a correct ZIP.
ZIP upload via the admin
On the same Add New page you can upload a plugin from your computer: pick the ZIP, install, activate. Handy for premium plugins from the developer's site.
If hosting blocked admin installs (permissions, open_basedir, policies), switch to FTP or ask support to enable what's needed.
Install via FTP or file manager
Connect over FTP or SFTP (FileZilla, WinSCP, etc.) or the host file manager. Unpack the plugin locally into one folder named after the plugin and upload it to `wp-content/plugins/`.
In the admin the plugin appears in the list — activate it. Don't dump files into the plugins root without a folder: harder to remove and update.
Where to put files
| Path | What should be there |
|---|---|
| wp-content/plugins/plugin-name/ | Plugin files |
| Not site root | Otherwise you mix it with core |
| Not inside the theme | A theme update will wipe the plugin |
After activation
Open plugin settings, run the wizard, check key site pages. On a white screen deactivate via FTP (rename the folder) and sort out the conflict.
Keep plugins updated. Remove unused ones: deactivated code still sits on disk.
Ongoing hygiene:
- one tool per job
- don't hoard "for later"
- test cache and forms after install
- backup before mass updates
Takeaways
Main path — catalog or ZIP in the admin; FTP is fallback. Activation and setup are required; security beats "install everything popular."
SEO stack choice — in a separate article; dashboard login — in the WordPress admin piece.
FAQ
How is this different from the SEO plugins article?
That one covers which tool groups you need. Here — how to technically install and activate any plugin.
Is FTP required?
No. Usually "Plugins → Add New" or a ZIP upload is enough. FTP is a fallback if hosting blocks admin installs.
Do many installs mean you can trust it?
A compass, not a guarantee. Check updates, compatibility with your WP version, support reviews, and the permissions the plugin asks for.
What should you do after install?
Activate, configure, check the site, and back up if needed. Remove unused plugins — don't only deactivate.
Can you install everything popular?
No. Every plugin is code and risk. Take it for a task, not "just in case."
Installing every “popular” plugin — or a nulled ZIP from a random site?
We’ll install from the catalog or a trusted ZIP, activate under a backup, and remove unused plugins instead of hoarding risk.
Discuss the task
