---
title: "Best WordPress Cookie Consent Plugins (GDPR + Consent Mode v2 Compared)"
url: https://nexterwp.com/blog/wordpress-cookie-consent-plugins/
date: 2026-07-06
modified: 2026-07-06
author: "Aditya Sharma"
description: "Compare the best WordPress cookie consent plugins for GDPR compliance, with prior script blocking, Google Consent Mode v2, consent logging, and honest pros and cons."
image: https://nexterwp.com/wp-content/uploads/2026/07/wordpress-cookie-consent-plugins-featured-1024x538.jpg
word_count: 2285
---

# Best WordPress Cookie Consent Plugins (GDPR + Consent Mode v2 Compared)

#### Key Takeaways
- A cookie consent plugin does three jobs: it shows a banner, blocks non-essential scripts until a visitor agrees, and keeps a record of that consent. A banner on its own is not compliance.- Under GDPR you need consent before any non-essential cookie loads. Google also requires valid consent from visitors in the EEA before its ads and analytics run, which is what Consent Mode v2 signals.- For most WordPress sites, CookieYes and Complianz are the easiest strong all-rounders. Cookiebot and Real Cookie Banner add automatic cookie scanning. Borlabs is a premium, self-hosted option with no free tier.- Pick based on where your visitors are, whether you run Google Ads or Analytics, and whether you need a downloadable consent log for your records.

 

Say you add a cookie banner to your WordPress site, tick the box that says "GDPR ready," and move on. The banner looks fine. The problem is what happens behind it: Google Analytics, the Facebook pixel, and your ad scripts have usually already fired before anyone clicked a thing. That is the gap most site owners miss. A banner is the visible part of consent, but the compliance work is blocking those scripts until someone agrees and then proving they did.

A good cookie consent plugin handles all of that for you. This guide explains what these plugins actually do, whether the law says you need one, what separates a real compliance tool from a decorative banner, and the seven WordPress cookie consent plugins worth your time in 2026.

![Best WordPress cookie consent plugins compared for GDPR compliance](https://nexterwp.com/wp-content/uploads/2026/07/wordpress-cookie-consent-plugins-featured.jpg)A cookie consent plugin does three jobs: shows the banner, blocks scripts until consent, and records that consent.

Table of Contents

## What a Cookie Consent Plugin Actually Does

A cookie consent plugin is not just the popup you see at the bottom of a page. It does three separate jobs, and all three matter:

- **Shows the consent banner.** The visible notice that asks visitors to accept, reject, or customize which cookies they allow.- **Blocks non-essential scripts before consent.** This is the part that separates a compliant tool from a fake one. Analytics, advertising, and social pixels should not run until a visitor opts in. The plugin holds those scripts back and only releases them once consent is given.- **Records the consent.** It stores who consented, when, and to what, so you have evidence if a regulator or a user ever asks. Most serious plugins let you export this log.

If a plugin only does the first job, it is a banner, not a consent manager. The prior blocking and the record are what make it worth installing.

***Also Read:** [How to host Google Fonts locally in WordPress](https://nexterwp.com/blog/host-google-fonts-locally/), another quiet privacy leak, since loading fonts from Google's servers can pass visitor IP addresses to a third party.*

## Do You Actually Need One?

Short answer: if your site reaches people in the EU, the UK, or California, and you run anything beyond strictly necessary cookies, yes. Here is what the main rules say.

- **GDPR (European Union).** You must get consent before setting non-essential cookies. The official guidance is blunt: "Receive users' consent before you use any cookies except strictly necessary cookies." Consent has to be a clear opt-in, not a pre-ticked box.- **UK GDPR and PECR (United Kingdom).** The UK carried the same prior-consent rule into its own law after Brexit. The requirement to ask first before loading analytics or advertising cookies is effectively unchanged.- **CCPA and CPRA (California).** California's privacy law gives residents "the right to opt-out of the sale or sharing of their personal information." For a lot of sites, advertising cookies count as sharing, so you need a working opt-out.- **Google's own rules.** If you use Google Ads or Google Analytics, Google requires you to "obtain end users' legally valid consent to the use of cookies" and to the use of personal data for ad personalization for visitors in the EEA. Consent Mode v2 is how your site passes that yes-or-no signal to Google.

The pattern across all of them is the same: ask first, respect the answer, keep a record. A consent plugin is the practical way to do that on WordPress without editing code by hand.

## What to Look For in a Cookie Consent Plugin

Before you compare names, know what actually matters. These are the features that decide whether a plugin keeps you compliant or just decorates your footer:

- **Prior (opt-in) blocking.** Can it hold back scripts until consent, not just after? This is non-negotiable for GDPR.- **Granular categories.** Visitors should be able to accept necessary cookies but reject marketing ones, category by category.- **Consent logging.** A stored, exportable record of each consent. Your proof if anyone asks.- **Google Consent Mode v2.** Essential if you run Google Ads or Analytics and have EEA traffic.- **Automatic cookie scanning.** Some plugins scan your site and build the cookie list for you instead of making you catalog every cookie by hand.- **Geo-targeting.** Show a strict opt-in banner in the EU and a lighter opt-out notice in the US, so you are not over-restricting visitors who do not need it.

## The 7 Best WordPress Cookie Consent Plugins

Every figure below was checked against each plugin's WordPress.org listing or its own site in July 2026. Pricing shifts with promotions, so confirm the current number before you buy.

### 1. CookieYes

CookieYes is the most-installed option on this list, active on over 1,000,000 sites with a 96 out of 100 rating across more than 3,200 reviews (version 3.5.1, updated May 2026). It covers the whole checklist: prior blocking, granular categories, geo-targeting, Consent Mode v2, and an exportable consent log. The setup wizard is the friendliest here, which is why it is the default recommendation for people who just want it handled.

**Best for:** most WordPress sites that want a strong, easy all-rounder.
**Worth knowing:** the free version covers the basics, but automatic scanning, higher cookie counts, and multi-language consent sit behind paid plans that start around $10 per month per domain.

### 2. Complianz

Complianz is the other million-install heavyweight (94 out of 100 from over 1,600 reviews, version 7.5.0, updated June 2026). Its strength is region awareness: it detects where a visitor is and serves the right style of banner and rules for the GDPR, UK, US, and other regions, rather than applying one strict banner to everyone. The setup runs as a guided wizard built around your answers.

**Best for:** sites with a mixed international audience that need region-specific consent.
**Worth knowing:** the free plugin is generous, but detailed consent records and some regional documents are part of the premium tiers, which start at $59 per year.

***Also Read:** [The best Google Analytics plugins for WordPress](https://nexterwp.com/blog/best-google-analytics-plugins-for-wordpress/), since Consent Mode v2 is what connects your cookie banner to the analytics data you actually keep.*

### 3. WebToffee GDPR Cookie Consent

WebToffee's plugin (version 4.3.6, updated July 2026, 94 out of 100 from reviewers) leans into the record-keeping side. It logs each consent with details like timestamp and the categories accepted, which is useful if audit-ready evidence is your main concern. Its install base is smaller than the leaders at around 9,000 active sites, so it is less battle-tested at scale, but it is actively maintained.

**Best for:** owners who want thorough consent logging without a subscription.
**Worth knowing:** paid licenses start at $69 per year for a single site; the free version handles standard banners and blocking.

### 4. Cookiebot CMP (by Usercentrics)

Cookiebot is a consent management platform, not just a plugin (version 4.7.2, updated June 2026, active on over 100,000 sites). It scans your site automatically, builds the cookie list, and ships Consent Mode v2 out of the box with Google certification. It stores consent records for auditing. Because it is a hosted platform, part of the work happens on Cookiebot's servers rather than yours.

**Best for:** sites that want hands-off automatic scanning and a certified Google setup.
**Worth knowing:** a free tier exists for small sites, but paid plans scale by domain and start around 7 euros per month, rising with traffic and features.

### 5. Cookie Notice & Compliance

Cookie Notice is the lightweight favorite, on around 900,000 sites with a 96 out of 100 rating from more than 3,000 reviews (version 3.1.2, updated June 2026). The free plugin gives you a clean, fast banner with the basics done well. Full auto-compliance, scanning, and richer consent records come from its paired Compliance cloud service.

**Best for:** sites that want a fast, minimal free banner and may upgrade later.
**Worth knowing:** the deeper compliance features run through a separate paid Compliance service; check its current pricing before committing.

### 6. Real Cookie Banner (by devowl.io)

Real Cookie Banner has the highest rating on this list, 98 out of 100 from nearly 500 reviews (version 5.2.28, updated July 2026, over 100,000 installs). It ships with a large library of ready-made service templates, so instead of describing each cookie yourself, you pick the service (say, YouTube or Google Analytics) and it fills in the blocking and disclosure. It handles Consent Mode v2 and stores documentation of consents.

**Best for:** people who want template-driven setup and top-rated support.
**Worth knowing:** the free version is capable; paid licenses start at 59 euros per year for a single site.

### 7. Borlabs Cookie

Borlabs Cookie is the premium, self-hosted pick, popular in the German-speaking market where compliance expectations run high (version 3.4, released early 2026). It supports the IAB TCF 2.2 framework and Consent Mode v2, keeps consent logs and statistics, and gives you fine control over the banner design. It is sold only as a paid plugin, not through the WordPress.org repository.

**Best for:** sites that want a polished, self-hosted premium tool with TCF support.
**Worth knowing:** there is no free version; licenses start at 49 euros per year for a single site.

## Quick Comparison

| Plugin | Best for | Consent log | Consent Mode v2 | Free version | Paid from |
| ------ | -------- | ----------- | --------------- | ------------ | --------- |
| CookieYes | Easy all-rounder | Yes | Yes | Yes | ~$10/mo |
| Complianz | Region-aware rules | Yes (premium) | Yes | Yes | $59/yr |
| WebToffee | Detailed logging on a budget | Yes | Yes | Yes | $69/yr |
| Cookiebot CMP | Auto scanning, certified | Yes | Yes | Yes (small sites) | ~7 euros/mo |
| Cookie Notice | Lightweight free banner | Yes (Compliance service) | Yes | Yes | Paid service |
| Real Cookie Banner | Template-driven, top-rated | Yes | Yes | Yes | 59 euros/yr |
| Borlabs Cookie | Premium self-hosted, TCF | Yes | Yes | No | 49 euros/yr |

## How to Set Up a Cookie Consent Banner

The flow is similar across these plugins. Using a free option like CookieYes or Cookie Notice, the steps look like this:

- **Install and activate** the plugin from your WordPress dashboard under Plugins, Add New.- **Run the setup wizard.** Pick your regions (EU, UK, US) so the plugin applies the right rules.- **Scan or list your cookies.** Let the plugin scan your site, or add your analytics and marketing cookies to the right categories yourself.- **Turn on prior blocking.** Confirm that non-essential scripts are held until consent. Test it by visiting your site in a private window and checking that analytics does not fire before you accept.- **Style the banner** to match your theme, and make sure Accept, Reject, and Customize are all clearly available.- **Link your privacy and cookie policy pages** from the banner, and confirm the consent log is recording.

That last test, the private-window check, is the one people skip. If your tracking scripts still load before you click Accept, the banner is not doing its job no matter how good it looks.

## Common Cookie Consent Mistakes

- **Loading scripts before consent.** The most common failure. A banner that appears after Analytics has already run does not meet GDPR's prior-consent rule.- **Using a cookie wall.** Forcing visitors to accept before they can see anything is not valid consent under EU guidance. Reject has to be a real option.- **Pre-ticked boxes.** Consent must be an active choice. Boxes cannot be checked by default.- **No consent record.** If you cannot show who agreed and when, you cannot prove compliance. Keep the log and know how to export it.- **Set and forget.** New plugins add new cookies. Re-scan every few months so your banner still matches what your site actually loads.

## Building a Privacy-Ready Site on WordPress

A consent plugin handles the cookies, but a compliant site also needs clear privacy and cookie policy pages, accessible forms, and a fast, well-structured layout so those legal pages are easy to find. This is where your theme does quiet work. [Nexter](https://nexterwp.com/nexter-theme) is a lightweight WordPress theme built for page builders and the block editor, so you can spin up a clean privacy policy page, a cookie policy page, and an accessible contact form without dragging in heavy page-builder bloat. Pair it with your chosen consent plugin and you have both halves covered: the banner that asks, and the pages that explain.

## Suggested Reading

- [How to Host Google Fonts Locally in WordPress](https://nexterwp.com/blog/host-google-fonts-locally/)- [The Best Google Analytics Plugins for WordPress](https://nexterwp.com/blog/best-google-analytics-plugins-for-wordpress/)- [Cloudflare Turnstile vs reCAPTCHA](https://nexterwp.com/blog/cloudflare-turnstile-vs-google-recaptcha/)- [The Ultimate WordPress Security Guide](https://nexterwp.com/blog/ultimate-wordpress-security-guide/)- [Best WordPress Form Builder Plugins](https://nexterwp.com/blog/best-wordpress-form-builder-plugins/)

## Frequently Asked Questions

### Do I legally need a cookie consent plugin on WordPress?

If your site uses non-essential cookies (analytics, advertising, or social pixels) and reaches visitors in the EU, UK, or California, then yes. GDPR requires consent before those cookies load, and a plugin is the practical way to ask, block, and record it on WordPress.

### Is a free cookie consent plugin enough?

For many small sites, yes. Free tiers of CookieYes, Complianz, Cookie Notice, and Real Cookie Banner cover the banner, prior blocking, and basic consent. You typically pay when you need automatic cookie scanning, detailed exportable records, or multi-language and multi-region support.

### What is Google Consent Mode v2 and do I need it?

Consent Mode v2 is how your site tells Google whether a visitor agreed to advertising and analytics cookies. If you run Google Ads or Google Analytics and have visitors in the EEA, Google requires valid consent, and Consent Mode v2 is the signal that carries it. All seven plugins above support it.

### Will a cookie banner slow down my site?

A well-built plugin adds very little weight, and the lightweight options like Cookie Notice are designed to stay fast. Ironically, blocking tracking scripts until consent can make your first page load lighter, since those scripts do not fire for visitors who decline.

#### Stay updated with Helpful WordPress Tips, Insider Insights, and Exclusive Updates – Subscribe now to keep up with Everything Happening on WordPress!

Subscribe