Security Headers for wp-admin and the Login Page
Sends nosniff, a strict referrer policy, a restrictive permissions policy and a cross-origin opener policy on dashboard and login pages, which front-end header snippets do not cover.
Snippet Library
WordPress code snippets, ready to use
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Server-Timing Header for Administrators
Adds a Server-Timing header with PHP time, database query count and peak memory to pages viewed by administrators, so you can read the numbers in your browser's developer tools Network tab.
Site Health Check for Security Headers
Adds a Site Health test that loads your homepage and reports which common security headers (HSTS, CSP, nosniff, framing, referrer and permissions policies) are missing.
Sticky Table Headers in Admin Lists
Keeps the column headings of posts, pages, users and other admin tables visible while you scroll long lists.
Stop Browsers Prefetching DNS for Links on Your Pages
Sends the X-DNS-Prefetch-Control header to tell browsers not to look up the domains of every link on your pages in advance, so visitors' DNS providers do not learn which sites you link to before they click.
Stop Gmail Grouping Your Site's Emails Into Threads
Adds a unique reference header to every email so Gmail shows each notification separately instead of bundling emails with the same subject into one long conversation.
Stop Sticky Headers Covering Jump-Link Targets
Leaves space above headings and sections when visitors follow a #link, so the target is not hidden under a sticky header or the admin bar.
Stop the Navigation Block Listing All Pages
Prevents the Navigation block from automatically showing a list of every page when no menu is assigned, so unfinished headers stay empty instead of exposing pages.
Unstick Fixed Headers When Pages Are Zoomed In
Turns sticky and fixed headers into normal headers when the visible screen area is very small, such as at 400% browser zoom or on landscape phones, so they no longer cover most of the content.