Yoast SEO for everyone

Install Yoast SEO for WordPress

We recommend to always create a backup of your site before installing a new plugin.


After you enter your WordPress site URL, you'll be redirected to your WordPress admin page to grant permission. This will generate an application password, allowing the app to perform tasks via the WordPress REST API.


Please grant the Yoast installer permission to access your site to install Yoast SEO.

https://
Terms of service

Installer not working? You can follow the instructions here.

FAQ

What information does the Yoast installer retrieve?

It retrieves the logged in user's email address. This information is stored temporarily only for the duration of the installation.

How long will the Yoast installer have access to my site and what will it do?

The Yoast installer has the same access as the user running it, but only for the short time needed to install Yoast (usually a few seconds). The installer automatically adds the Yoast plugin to your website and instantly revokes its own access.

Does Yoast store the password and if yes, where and for how long?

We do not store any password in any way.

What security measures did Yoast take to ensure a safe installation?

  1. We keep a permanent record of every request we send to the site using their credentials. This record includes:
    • The URL we used
    • The request method (e.g., GET, POST, PUT, and DELETE)
    • When the request started
    • When the request is finished
    • The HTTP status code returned from the website
    • Error messages and response bodies.
  2. Users’ credentials are used solely to retrieve the email address associated with the account on the user’s site. If the installation is aborted or the credentials cannot be revoked automatically, we will email the users advising manual removal of the credentials.
  3. We prevent any application password from being logged or stored on our infrastructure.
  4. We strictly request the necessary information from the user's site for the installation.
  5. If an error is detected during the installation/activation process, the plugin will automatically deactivate to prevent any disruption to the site.
  6. The Yoast installer is exclusively employed to install Yoast plugins

What tasks does the Yoast installer perform to install the Yoast plugin automatically?

  1. Get access using the provided credentials.
  2. Get the contact email address (store along with the site URL for about 15 minutes)
  3. Complete the installation of the Yoast plugin.
  4. Revoke our access typically within five seconds under normal circumstances. This might take longer on slower sites.
  5. Remove the stored email address and site URL. If that fails, the user will receive an email asking them to revoke our access manually, then we delete the stored information.
  6. Once the above steps are finished or the installer tab is closed, we delete all the stored credentials.