How to Disable Automatic Updates in WordPress (2023 Guide)
As a WordPress site owner, keeping your site updated is one of the most important responsibilities you have. WordPress, along with any themes and plugins you have installed, will release periodic updates that patch security holes, fix bugs, and add new features and compatibility.
By default, WordPress has automatic updates enabled for minor core releases and translation files. This means your site will automatically apply these updates as they become available, without any action needed from you. Many site owners appreciate this hands-off approach, as it helps keep their site secure without constant babysitting.
However, there are scenarios where you may want more control over when and how updates are applied to your site. Perhaps you have a complex or mission-critical site where even a minor update could cause compatibility issues or downtime. Maybe you‘ve had a bad experience with an automatic update breaking your site in the past. Or you simply prefer to test updates on a staging site before pushing them to production.
Whatever your reasons, disabling automatic updates is possible with a few different methods. In this post, we‘ll show you how to turn off auto-updates in WordPress using code or plugins. We‘ll also discuss the potential downsides of disabling updates, and recommend some best practices for staying on top of site maintenance.
Important: While disabling automatic updates gives you more control, it also means taking on the responsibility of manually updating your site in a timely manner. Neglecting updates is one of the most common causes of hacked WordPress sites. If you go this route, be prepared to stay on top of new releases and promptly apply them to keep your site secure.
Method 1: Disable All Automatic Updates via wp-config.php
The most direct way to completely disable all types of automatic updates is by adding a line to your site‘s wp-config.php file. This is the main configuration file for your WordPress installation, located in your site‘s root directory.
You can access this file via FTP/SFTP or your hosting control panel‘s file manager. Before making any changes, it‘s wise to backup the file in case you need to revert later.
Once you‘ve accessed wp-config.php, add the following line of code above the line that says "That‘s all, stop editing! Happy publishing":
define( ‘AUTOMATIC_UPDATER_DISABLED‘, true );
This constant will disable all WordPress automatic updates, including core, plugins, themes and translations. Keep in mind this is the nuclear approach – you will no longer receive any automatic update notifications in your dashboard, so it will be entirely up to you to manually check for and install new versions.
Method 2: Selectively Disable Updates via functions.php
If you only want to disable automatic updates for specific parts of your WordPress site, you can add filters to your active theme‘s functions.php file. This approach is handy if, for example, you want to keep minor core updates enabled for security, but prevent themes and plugins from updating without your approval.
To access your theme‘s functions.php file, go to Appearance > Theme Editor in your WordPress dashboard. Select the active theme, then click on Theme Functions (functions.php) in the right column.
To completely disable all updates (same as Method 1):
add_filter( ‘automatic_updater_disabled‘, ‘__return_true‘ );
To disable all core updates (use with caution!):
add_filter( ‘allow_major_auto_core_updates‘, ‘return_false‘ );
add_filter( ‘allow_minor_auto_core_updates‘, ‘return_false‘ );
To disable plugin auto-updates:
add_filter( ‘auto_update_plugin‘, ‘__return_false‘ );
To disable theme auto-updates:
add_filter( ‘auto_update_theme‘, ‘__return_false‘ );
To disable translation file auto-updates:
add_filter( ‘auto_update_translation‘, ‘__return_false‘ );
Simply paste the filter(s) you want to use at the bottom of your functions.php file and save the changes. The settings will take effect immediately.
Note: The downside of this method is that your update settings will be overwritten if you switch to a different theme in the future. You may want to use a child theme or custom plugin to avoid this.
Method 3: Manage Update Settings via Plugin
For a less technical solution, there are also some handy plugins that give you a user-friendly interface for controlling your WordPress update settings.
Here are a few of the most popular options:
Easy Updates Manager
This all-in-one plugin provides extensive controls for managing all types of WordPress updates. You can disable updates across the board or pick and choose which parts of your site to auto-update. It also logs all update activity and lets you set up email notifications.Advanced Automatic Updates
With this plugin, you can easily configure which types of updates are applied automatically and which require manual approval. It provides tons of granular options, including the ability to disable auto-updates for specific themes or plugins.Automatic Update Manager
This plugin gives you a simple on/off toggle for controlling all automatic updates on your site. You can also choose to disable auto-updates for your entire network if you‘re running a multisite installation.
Regardless of which plugin you choose, the general setup process is similar:
- Install and activate the plugin via the WordPress dashboard
- Go to the plugin‘s settings page (usually located under the Updates, Tools, or Settings menu)
- Configure the settings to your liking, such as unchecking the boxes for the update types you want to disable
- Save the changes
Keep in mind that while these plugins provide an easy way to manage updates, they still put the onus on you to stay current and manually apply updates as needed.
Is Disabling WordPress Automatic Updates a Good Idea?
Now that you know how to turn off automatic updates in WordPress, let‘s take a step back and consider whether it‘s advisable to do so.
The main argument in favor of automatic updates is security. According to WordPress.org, auto-updates have been a huge success at increasing the adoption rate of minor releases (which often contain important security fixes). The vast majority of WordPress sites now have auto-updates enabled, which helps reduce the number of out-of-date, vulnerable targets for hackers.
Disabling automatic updates means taking on the responsibility of promptly installing updates yourself. If you forget or neglect this duty, you could be leaving your site open to attack. Even if you‘re confident in your ability to stay on top of updates, there‘s always the possibility that a critical security patch could be released while you‘re away from your computer or on vacation.
On the flip side, automatic updates can occasionally cause issues, especially if you‘re running a highly customized site with many themes and plugins. An update to one component could trigger compatibility problems with another, leading to bugs or even a broken site. These risks are higher for major core updates (which change the first two numbers of the WordPress version) and lower for minor updates (which only change the third number).
If you have a complex or business-critical site, you may understandably feel nervous about letting WordPress make changes without your explicit approval. The best practice in this case is to test updates on a staging site before deploying to production. Some managed WordPress hosts even have built-in staging tools to streamline this process.
At the end of the day, the decision to disable automatic updates comes down to your technical confidence and appetite for risk. If you‘re comfortable manually managing updates and have a reliable system for testing and deploying them, disabling auto-updates may give you greater control and peace of mind. On the other hand, if you prefer a set-it-and-forget-it approach and trust the core WordPress team to vet updates before pushing them out, leaving auto-updates enabled is perfectly valid.
One balanced approach is to leave minor core auto-updates enabled (these are the safest and most important from a security standpoint) while disabling auto-updates for themes, plugins, and major core releases. This way, you get the benefit of automatic security patches while retaining control over the riskier front-end and back-end changes. Just be sure to regularly log in and manually update your themes and plugins to keep them compatible and secure.
Regardless of your auto-update settings, there‘s one best practice that‘s non-negotiable: backing up your WordPress site. A bug-free update process can never be 100% guaranteed, so it‘s essential to have a recent backup on hand to quickly restore your site if needed. Aim to take backups at least once a day (more frequently for high-traffic or eCommerce sites), and always perform a manual backup before applying updates.
Your backup strategy could include:
- Automated backups via your hosting provider or a plugin like UpdraftPlus, BackWPup, or VaultPress
- Manual backups downloaded to your computer or uploaded to a remote destination like Google Drive or Dropbox
- Real-time backups that instantly save a copy of your site whenever a change is made
Relying solely on your host‘s automatic backups is risky since you may run into red tape if you ever need to do an emergency restore. For extra reassurance, consider implementing multiple backup methods so you always have several copies to fall back on.
Conclusion
To recap, automatic updates in WordPress can be a convenient way to keep your site secure and bug-free with minimal effort. However, some site owners prefer to disable auto-updates and manually apply changes for greater control and stability.
If you decide to turn off automatic updates, you can do so by:
- Adding a code snippet to your wp-config.php file (to disable all auto-updates)
- Adding filters to your theme‘s functions.php file (to selectively disable auto-updates)
- Installing a plugin like Easy Updates Manager (for a user-friendly interface)
Whichever method you choose, be sure to stay vigilant about manually checking for and installing updates in a timely manner. Falling behind on updates is a surefire way to put your site at risk of hacks and malfunctions.
And remember: even with automatic updates disabled, having a robust backup strategy is still crucial. Take frequent backups of your WordPress files and database, and always perform a backup before making any significant changes to your site.
By following these best practices, you can enjoy the benefits of a stable and secure WordPress site, with or without automatic updates. The key is to find the update management approach that aligns with your technical skills, risk tolerance, and site maintenance workflow.
){kind=link}