Help Center.

Installing the six plugins

How to install Consent, Analytics, Backup, Performance, SEO and Security

Enter and verify the license key

Where the key belongs, which statuses exist and what happens without a license server

Quick start: the first few minutes

How the interface is structured, how saving works and where to start in each plugin

System Requirements

Minimum versions, required PHP extensions and how to check both yourself

Installing an update

How to install a new version and what the plugins update on their own

Link multiple websites

Connect other installations via application password and operate them remotely

Back up and transfer settings

Consent can export its configuration as JSON; for the rest there are other ways

Deactivate or delete

What is cleaned up on deactivation and which data survives deletion

Set up tracking – measure without cookies

Where to switch tracking on and off and how the plugin recognises a visitor in the first place

Define goals and attribute UTM campaigns

Five detection types for conversions and what the plugin reads from utm_ parameters

Reading Heat Maps

How individual clicks turn into a heat image and what the bar underneath says about the data

Using session recording

Turning recordings on, playing them back and sharing them – and what gets masked

Reports by email and CSV export

Set the period and segment, schedule the report and download analyses as a file

Rage clicks, dead clicks and forms

Where visitors get stuck and which thresholds sit behind the three friction signals

Customizing banner and dialog

Set texts, colors, dimensions and buttons of the consent dialog and the bar

Script blocking: exactly what the plugin does

How tracker scripts, stylesheets, embeds and shop scripts are neutralised until consent is given

Cookie scan: detect services and cookies

How the scanner crawls your own website, what it evaluates and what to do afterwards

View and export proof records

What gets logged for every decision and how to filter, export and clean up the log

Generate legal texts and cookie policy

Generate a cookie policy from the recorded services and six documents from your details

Validity, withdrawal and asking again

How long a decision counts and which ways visitors can change it again

Creating your first backup

What to check before the first run, how to start it and how to tell that the archive is complete

Backups automatically on a schedule

Daily run, finer intervals, and what WP-Cron has to say about it

Restoring a backup

The guided flow with check report, data-loss preview, maintenance mode and a way back

Storing backups off-site

FTP/SFTP, Amazon S3 including compatible services and Google Drive — the plugin ships no other destinations

Encrypt archives with AES-256

How to set the recovery key, keep it off-site and switch encryption on afterwards

Retention: how many versions are kept

How the limit counts, how to apply it right away and how to protect individual backups from deletion

Set up and clear the page cache

How the file-based page cache works, who it skips and when it clears itself.

Shrink HTML, CSS and JavaScript

What the three Minify toggles change in the delivered document and what they leave untouched.

Lighten scripts: defer, ?ver=, emoji, embeds

Four toggles in the “Assets” panel that reduce render blocking and unnecessary requests in the frontend.

Lazy-Load and missing image dimensions

Have images and iframes load later and avoid layout shifts caused by missing dimensions.

Database cleanup — what gets deleted

Cleanup removes entries for good; here you see exactly which ones those are and what is missing afterwards.

Browser cache, CDN and connection hints

Write cache rules into the .htaccess, rewrite asset addresses to a CDN host, prepare connections.

Set up Critical CSS

Analyse per template, compare in the preview, only then go live — and what to do when a run fails.

Check, measure and switch off image sizes

How to find out which image sizes your installation actually registers, how much space each one takes up and what happens when you switch them off.

Set up WebP and AVIF

How Kakapo Performance creates additional WebP and AVIF files on upload, delivers them via <picture>, and what to do when nothing is created.

Setting up the object cache with Redis or Memcached

From checking the PHP extension through the connection test to the written drop-in — and all the way back.

Setting up cache preloading

How to check whether your server can call itself, which addresses enter the queue and what the numbers mean after the run.

Autoload: measure the options loaded on every request and switch them

How to find out which options WordPress loads on every request, and which of them you can safely take out of the loading process.

Running the batch job over the existing media library

How to apply WebP, AVIF and metadata removal to images that were already uploaded before you switched it on.

Title template and default description

How to set page titles and meta descriptions centrally and where the four placeholders apply.

XML sitemap and robots.txt

Provide the sitemap, add your own robots.txt rules and control the output.

Setting up redirects

Create 301 and 302 rules so old URLs point to the new targets.

Content analysis and broken link check

Read the on-page metrics of your posts and find broken links in your content.

Open Graph and structured data

Switch on preview tags for sharing and schema.org data for search engines.

Set up and work through the 404 log

The log collects every address that leads nowhere, with frequency, timestamps and referrer — and a redirect can be created from every row.

Login protection: limit failed attempts per IP

How the failed-attempt limit counts, when an IP address gets locked out and how to lift a lockout

Enable two-factor by email

Code prompt after the password: enable globally, unlock per administrator and test the flow beforehand

Hardening: headers, file editor, request filter

Which toggles the Hardening area offers and what each one changes in what gets delivered

Check core files against wordpress.org

Checksum comparison for every file of the WordPress core and what changed, missing and unknown mean

Read and export the activity log

Which events end up in the log table, how long they stay and how the CSV export works

Malware scan across wp-content

Pattern search for web shells and obfuscated code, with clear limits and no automatic judgement

Moving the login URL: set up, verify, revert

How to move the WordPress login to a path of your own, what Kakapo Security checks itself in the process and how to get back out.

Set up the file watcher

How to create the confirmed baseline, read findings and set up the instant alert so that it actually gets read when it matters.

Enter and activate the license key

Where the license section sits in each plugin and how you enter the key there

What the license status shows

Active, Saved, Unverified, Invalid — where the information comes from and when it is checked

License when moving or copying a website

What is transmitted during activation and why a copy needs the key again

Set up White-Label

Your own brand name, your own color and your own entry in the WordPress plugin list

Who may change license and White-Label

Which role may open the system areas and how you unlock them in Consent

Scheduled backup does not start

Why the daily run can fail to happen and where you read the real cron status

Connection to the Remote-Site fails

What the messages mean when connecting and testing a remote installation

Placeholder instead of video or map

Once the embed block is switched on, a placeholder box appears instead of the frame

Analytics is not counting visitors

The check chain before every measurement and the order you work through it

Locked out of the login after failed attempts

How the temporary lockout comes about and where you lift it again