How to disable WordPress auto-updates

Performing WordPress updates is a part of regular site maintenance. It’s an essential part of keeping your site secure. That’s why updates are set to be automatic by default in WordPress. Unfortunately for some, automatic updates can cause issues. Maybe your website configuration is sensitive. Or, you’re using special plugins that tend to break if updates aren’t implemented carefully. In these cases, updating manually might be a better choice.

But here’s the catch: WordPress doesn’t make it easy to turn off core updates since outdated sites are at higher risk of security breaches. Thankfully, if you’re looking to manage updates on your own terms, there are a few ways to disable them safely.

Let’s explore four methods to take control of WordPress updates.

How to (partially) disable WordPress auto updates in the dashboard

If you’re a WordPress user looking for a simple toggleable setting to disable automatic updates, your options are limited. But there is a way to partially turn off updates within your WordPress installation.

After logging into WordPress, you’ll find this in the Dashboard > Updates screen. By default, all WordPress sites are kept up to date with every single release, including minor ones. But you can turn off minor updates. To do this, clicking Switch to automatic updates for maintenance and security releases only.

After this, WordPress will only update with major updates like those that patch serious security vulnerabilities. These major updates are designed to fix critical issues without disrupting the site’s core functionality. Keeping these updates turned on ensures your site remains secure from major risks. But you still have control over other updates.

For some sites, this isn’t good enough. If you need to completely disable all updates, you can do so with either a plugin or code snippet.

Disable WordPress auto-update with a plugin

If you’re not comfortable adding code to your site, it’s best to rely on a plugin. It’s super quick to set up and has very little room for error.

There are several plugins that can get the job done. Disable All WordPress Updates and Easy Updates Manager to name a few. Let’s try out Easy Updates Manager since it’s the most popular solution.

Start by going to Plugins > Add New Plugin and installing Easy Updates Manager. You’ll find a new plugin menu in Dashboard > Updates options.

You now have a few options.

1. In the Disable all updates section, you can choose to click the button to turn off all updates. This includes automatic plugin updates and automatic WordPress theme updates. This isn’t recommended since it doesn’t just let you manually update. It also prevents you from updating plugins, themes, or WordPress core files at all.
2. In the Quick configuration actions section, click Disable auto updates to turn off updates for plugins, themes, and core. Then, perform manual updates on a schedule that makes sense for you.
3. In the WordPress core updates section, switch to Manually update, or Disable core updates. This turns off  all update notices. You can then configure plugin and theme auto updates separately.

If you ever want to change your settings in the future, it’s really easy to do. You can even turn on email notifications for updates in case any accidentally slip through.

How to disable WordPress auto updates with code

If you’re comfortable adding some simple code to your site, this can be even more straightforward than using a plugin. It’s less user-friendly, but it means you don’t need to install yet another plugin on your site.

Before you begin, be sure to back up your wp-config file. 

There are several different code snippets you can use. Here’s a brief look at each: 

Disable all automatic updates (core, theme, and plugins)

This one will disable all WordPress automatic updates, core, theme, and plugins included. While this gives you full control over every update, be cautious. Iit requires diligent manual updating to avoid missing security patches or compatibility improvements.

define('AUTOMATIC_UPDATER_DISABLED', true)

Disable only WordPress core updates

If you just want to disable WordPress core updates, the following is the code to use. This option can be useful if you want to avoid any unexpected changes to the core files. But if you still want theme and plugin updates for security and compatibility, it’ll help with that.

define('WP_AUTO_UPDATE_CORE', false)

Enable only minor core updates (disable major updates)

And if you want only minor auto updates, but no major updates, you can use this code snippet. This strikes a balance. It ensures your site remains protected from critical vulnerabilities without risking major changes. The sort of changes that could disrupt your site’s layout or functionality.

define('WP_AUTO_UPDATE_CORE', 'minor')

But where do you actually put this code? You’ll need to use FTP to connect to your site’s files and add it to the wp config file. To use FTP, you’ll need your FTP credentials (check your hosting dashboard or ask your host). Then, download an FTP client like Filezilla.

Once you launch Filezilla, enter your credentials in the boxes at the top and click Quickconnect.

In the panel on the right, look for wp-config.php in your root directory. Double-click on this file to open it in a text editor. Paste in the code you want at the bottom, above the line that tells you to stop editing.

Save the file. Then, upload it back to the server, and your problem should be solved.

You can also complete this task by accessing your hosting provider’s cPanel or File Manager.

How to disable automatic WordPress updates for themes and plugins

What if you want to get rid of auto-updates specifically for your themes and plugins? Turning off WordPress updates won’t affect themes or plugins. So, this requires a little extra work. Luckily, you can do it all in the WordPress dashboard.

To turn off plugin auto-updates, just log in to WordPress and go to Plugins > Installed Plugins. Click Disable auto-updates on the right of each plugin. If you need to bulk disable automatic plugin updates, use a plugin like Easy Auto Updates, mentioned above.

As for themes, it’s just as easy. In the WP admin dashboard, navigate to Appearance > Themes. Then look for Disable auto-updates in the theme box.

Themes and plugins can be pretty sensitive to small changes. Sometimes they release new features you don’t want or need. Turning off updates can be a good move so you can install security patches only as needed.

Best practices for WordPress update management

Disabling automatic updates in WordPress can be a risky choice. If your goal is to shut off updates permanently, any security expert would beg you to reconsider. Without updates, your site is left wide open for vulnerabilities. And that could potentially let hackers get access to your site.

But disabling auto updates doesn’t have to mean leaving your site vulnerable. It just puts you in control. Now you can test the update with your environment and decide when to push it live.

Here are some best practices for keeping your WordPress site safe while disabling auto updates.

1. Regularly check for updates – Even when auto updates are disabled, you should still keep an eye on new core releases. WordPress will check for updates and notify you in Dashboard > Updates as long as you don’t turn this functionality off. Check the patch notes for security updates, performance improvements, and new features you want to prioritize adding.
2. Use a staging site – Test updates in a staging environment before applying them to your live site. This allows you to catch any compatibility issues with themes, WordPress plugins, or custom code before they affect your visitors. Or before they ruin your site’s layout and functionality. Once you’re sure it’s all working correctly, apply the update to your live site.
3. Regular backups – When auto updates are disabled, it’s more important than ever to keep frequent, automated backups. This is your safety net. In case something slips through due to an unpatched security vulnerability, you’ll be covered. Or, if a problematic update takes down your site, you can restore it.
4. Prioritize security updates – While new features can be delayed, security updates should never be ignored. Keeping your site protected means always installing security updates ASAP.
5. Schedule manual updates – Don’t fall behind on updating your site. Schedule a periodic maintenance window. Use this time to test and install any new and necessary updates. Whether that’s weekly or monthly, keep on top of it.

Keep these tips in mind. Then you can shut off auto updates but keep your site safe from threats.

Take control of your WordPress updates schedule

Sometimes, disabling WordPress’ auto updates is a necessity. When updates tend to break things, it’s best to shut them off. Then, you can enable them on your own terms.

However, it’s still important to not leave your site or any of its components out of date. Especially since it can leave you wide open for security breaches. But you’ll be able to test the update on a staging site and push it through after confirming it doesn’t break anything.

Disabling WordPress auto updates gives you full control over your site’s stability and security. But it does leave you with the task of handling these updates manually. Ultimately, it’s up to you how you set up your site. And how much time you spend bug-testing new WordPress updates. We hope that this post has helped you make a decision. And we hope it’s given you enough options for disabling WordPress automatic updates.