---
title: "How to Harden iFrame Security in WordPress?"
url: https://nexterwp.com/docs/harden-iframe-security-in-wordpress/
date: 2023-09-29
modified: 2026-04-14
author: "Aditya Sharma"
description: "Content from your WordPress website can be easily embedded into any other website using iFrames, this way anyone can show your content on their website easily. So, it is best..."
image: https://nexterwp.com/wp-content/uploads/2024/05/harden-iframe-security-in-wordpress-1024x519.jpg
word_count: 222
---

# How to Harden iFrame Security in WordPress?

## Key Takeaways

- Nexter Extension (Free) enables secure iFrame on a WordPress website by going to Nexter > Extensions > Security, then turning on Advanced Security and opening the gear icon (⚙).
- iFrame Security offers three dropdown options: Disabled, Same Origin for same-domain embeds only, and Deny to completely disable iFrame embedding.
- WordPress does not have a default option to disable iFrame embedding, so the post recommends using Nexter Extension to harden iFrame security.

Content from your WordPress website can be easily embedded into any other website using iFrames, this way anyone can show your content on their website easily. So, it is best to disable iFrame embedding on your WordPress website. 

Unfortunately, by default WordPress doesn’t have any option to disable iFrame embedding.But if you are using the [Nexter Extension (Free) plugin](https://wordpress.org/plugins/nexter-extension/), you can easily disable iFrame embedding by enabling secure iFrame on your WordPress website.  

[LIVE EXTENSION LINK](https://nexterwp.com/nexter-extensions/advanced-wordpress-security/)

 

## How to Enable Secure iFrame with the Nexter Extension?

To enable secure iFrame with the Nexter Extension, from the WordPress Dashboard, go to **Nexter **>** Extensions**> **Security**.

Then go to the **Advanced Security **section, enable the toggle, and click on the gear icon (⚙).

![](https://nexterwp.com/wp-content/uploads/2025/08/advanced-security-settings-new-1.png)

It will open the Advanced Security popup, then go to the **iFrame Security** section, here you’ll find three options in the dropdown- 

- **Disabled** - This will disable the Secure iFrame, which means anyone can easily embed your content through an iFrame on their website.

- **Same Origin** - With this option, you can embed iFrame from your own website i.e. same domain only.

- **Deny** - This option will completely disable iFrame embedding, so no website can embed your content through iFrame.

Select the appropriate option and click the **Save** button. 

![iframe security](https://nexterwp.com/wp-content/uploads/2023/09/iframe-security-new.gif)

This way, you can harden the iFrame security on your WordPress website.