Replacing other plugins

SafeHouse does the job of many small single-purpose plugins. This page lists the plugins it recognises, the module that replaces each one, and what to carry over when you switch. Plugin health flags these plugins on your site with "SafeHouse can do this: module "…". Switch it on, then remove this plugin."

The plugins SafeHouse recognises

The slugs are the plugins' folder names on WordPress.org.

SafeHouse module	Replaces
SMTP mail	wp-mail-smtp, post-smtp, fluent-smtp, easy-wp-smtp, smtp-mailer, wp-smtp
Login limits	limit-login-attempts-reloaded, loginizer, login-lockdown, limit-login-attempts, wp-limit-login-attempts
Bot protection	simple-cloudflare-turnstile, recaptcha-woo, advanced-nocaptcha-recaptcha, google-captcha, honeypot
Duplicate posts and pages	duplicate-page, duplicate-post, post-duplicator
Maintenance mode	wp-maintenance-mode, coming-soon, maintenance, under-construction-page
Header and footer scripts	insert-headers-and-footers, header-and-footer-scripts, header-footer-code-manager, head-footer-code, wp-headers-and-footers, tracking-code-manager, hotjar, microsoft-clarity
Hardening	disable-xml-rpc, disable-xml-rpc-api, stop-user-enumeration
Tweaks	disable-comments, disable-search, disable-emojis, disable-embeds, heartbeat-control
Omnibus price history	omnibus, wc-price-history, omnibus-by-ilabs, omnibus-for-woocommerce, product-price-history
Cloudflare cache	cloudflare

SafeHouse's modules are deliberately smaller than most of these plugins. Check the notes below before you remove one, so you know what you would give up.

Switch from a plugin to a module

For every plugin except the Omnibus ones:

1. Write down the old plugin's settings you want to keep.
2. Deactivate the old plugin. Running both at once doubles the work, and for login limits or SMTP the two can get in each other's way.
3. Go to SafeHouse → Modules, switch the module on, set it up and select Save Changes.
4. Test the job the plugin did: send a test e-mail, submit a form, open the site in a private window.
5. Delete the old plugin. Plugin health lists every inactive plugin until you do.

Notes per module

SMTP mail

• Put the server, port, encryption, user and password into wp-config.php constants. SafeHouse never stores SMTP credentials in the database. See SMTP mail.
• SafeHouse keeps no mail log, so password-reset links are never stored. If you relied on the old plugin's log for support, you lose it.
• Use Send a test e-mail to me in the module's Details before you delete the old plugin.

Login limits

• Lockouts and logs from the old plugin are not carried over.
• If the site is behind Cloudflare or another proxy, set that up first: Behind Cloudflare or a proxy.
• Copy the old plugin's allowlist into Never lock out these addresses.

Bot protection

• SafeHouse uses Cloudflare Turnstile, not Google reCAPTCHA. Create Turnstile keys in the Cloudflare dashboard; reCAPTCHA keys do not carry over.
• The honeypot works without any keys, on registration, lost password and comments.
• If the shop uses express payment buttons (Apple Pay, Google Pay) outside the checkout page, read the checkout note on Bot protection first.

Duplicate posts and pages

• Copies are drafts titled "… (copy)" with content, taxonomies and custom fields.
• WooCommerce products keep WooCommerce's own Duplicate action.

Maintenance mode

• The page has a headline and a short message with basic HTML. There are no templates, logos, countdowns or subscription forms.
• Logged-in staff see the normal site. Choose who in Who sees the normal site.

Header and footer scripts

• Copy each snippet into In <head>, After <body> or Before </body>.
• Snippets go on every front-end page. There is no per-page targeting.
• For the Hotjar and Microsoft Clarity plugins, paste the tracking code from their dashboards into In <head>.

Hardening

• Hardening is on by default and covers XML-RPC and username discovery. Remove the old plugin after checking that Disable XML-RPC and Block username discovery run.

Tweaks

• Disable comments closes comments and hides existing ones in classic themes. It does not delete them; see Tweaks for block themes. WooCommerce product reviews keep working when reviews are enabled in WooCommerce.
• Slow down Heartbeat sets one fixed interval of 60 seconds. There are no per-screen intervals.

Omnibus price history

Switch to SafeHouse without a gap in the price history:

1. Keep the old Omnibus plugin active and activate SafeHouse. Omnibus price history starts recording at once. While the other plugin is active, SafeHouse records but does not show anything: its display setting shows "Handled by , skipped here."
2. Wait at least 30 days, so that SafeHouse's own history covers the whole window it needs.
3. Deactivate and delete the old plugin. SafeHouse starts showing the lowest price from its own history.

If you remove the old plugin sooner, products that were already reduced when SafeHouse started recording show their regular price as the lowest price until their price next changes. Price history from other plugins is not imported.

Cloudflare cache

• SafeHouse clears changed pages from Cloudflare's cache and uses an API token limited to cache purging. It does not manage other Cloudflare settings from wp-admin.
• Real visitor addresses behind Cloudflare are a separate setting: Behind Cloudflare or a proxy.

Related pages

• Plugin health
• Modules
• Get started