> ## Documentation Index
> Fetch the complete documentation index at: https://kb.hosting.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Adding HTTP security headers in WordPress

> Learn how to add HTTP security headers in WordPress. This article shows you how to use the HTTP headers plugin to add HTTP security headers.

HTTP security headers add an extra layer of security to your [WordPress](https://hosting.com/hosting/platforms/wordpress-hosting/managed-wordpress-hosting/) website, allowing you to block malicious activity that affects website performance and security. HTTP Headers Plugin is a plugin that allows you to easily configure security headers on your website. This article will show you how to configure the HTTP Headers Plugin for [WordPress](https://hosting.com/hosting/platforms/wordpress-hosting/managed-wordpress-hosting/) powered websites in order to improve security.

## Installing and configuring HTTP security headers in WordPress

To install and configure HTTP Headers Plugin, follow these steps:

1. Log in to your [WordPress](https://hosting.com/hosting/platforms/wordpress-hosting/managed-wordpress-hosting/) site with an administrator account.

2. On the **Dashboard** in the left sidebar, click **Plugins**, and then click **Add New**:\
   ![](https://static.hosting.com/kb/kb-wordpress-addnewplugin.png)

3. Search for "**HTTP Headers**" click **Install**, and then click **Activate** the plugin:\
   ![](https://static.hosting.com/kb/kb-wp-HTTPheadersplugin.png)

4. On the **Dashboard** in the left sidebar, click on **Settings** and the click on **HTTP Headers**:

5. Click on the categories to configure the http headers:

6. Click on **Edit** option to configure each **Security headers** options:\
   ![](https://static.hosting.com/kb/kb-wp-httpheaderaccesscontrol.png)![](https://static.hosting.com/kb/kb-wp-httpheadersecurityadvancedoption.png)

## More information

For more information about the HTTP headers Plugin, please visit: [https://wordpress.org/plugins/http-headers/](https://wordpress.org/plugins/http-headers/)

## Related articles

* [Enabling HTTPS and SSL for WordPress sites](/docs/enabling-https-and-ssl-for-wordpress-sites)

* [Modifying HTTP headers](/docs/modifying-http-headers)