Quick answer: Download WordPress for free only from the official site, wordpress.org/download. The current version is WordPress 7.1.3 (October 2026), offered as a ZIP file (wordpress.org/latest.zip). Older versions are on the releases page. After downloading, upload the files to your hosting and run the installer — or skip the download completely by using your host’s one-click installer.
Where to download WordPress
| What you need | Where to get it |
|---|---|
| Latest version | wordpress.org/download |
| Older versions (for testing or rollback) | wordpress.org/download/releases |
| Beta / nightly builds (testing only) | WordPress.org beta-nightly page |
| Free themes | wordpress.org/themes |
| Free plugins | wordpress.org/plugins |
Do you even need to download WordPress?
Most people don’t. Almost every host offers a one-click installer that downloads and installs WordPress for you in minutes. You only need to download it manually if:
- your host has no installer,
- you’re installing on your own computer (localhost),
- you’re a developer setting up a server, or
- you need to replace corrupted core files.
See all three methods in our WordPress installation guide.
What’s inside the WordPress download
| Item | What it is |
|---|---|
wp-admin/ | The dashboard code |
wp-includes/ | Core functions and libraries |
wp-content/ | Themes, plugins and (later) uploads — your files live here |
wp-config-sample.php | Template for your database settings |
index.php, wp-login.php, etc. | Entry points for the site and login |
How to install after downloading (short version)
- Unzip the file on your computer.
- Create a database and user in your hosting panel.
- Upload the contents of the
wordpressfolder to your site’s root (oftenpublic_html) with SFTP or the file manager. - Visit your domain and follow the setup screens.
- Enter your database details and create your admin account.
Check your server is ready
WordPress.org recommends PHP 8.3 or newer, MySQL 8.0+ or MariaDB 10.11+ and HTTPS support. Older setups may still work but are past end-of-life and less secure — see choosing hosting for WordPress.
Verify you have a genuine copy
When you download from wordpress.org, the address bar should show https://wordpress.org with a valid padlock. The releases page also lists checksum files for each version, which developers can use to confirm the download wasn’t altered. After installing, the Dashboard → Updates screen lets you re-install the current version if you ever suspect core files were modified, and security plugins can compare your core files against the official ones.
Downloading themes and plugins safely
The same rule applies to add-ons: use the official WordPress.org directories or the developer’s own website. Check the last-updated date, active installs and ratings, and avoid anything offered “free” that normally costs money. See our picks of the best free WordPress themes and best SEO plugins.
Never download WordPress from unofficial sites
Search results sometimes show “WordPress download” pages on other websites, or “free premium” themes and plugins (often called nulled). Avoid them:
- They can contain hidden malware, backdoors or spam links.
- They may be outdated, with known security holes.
- Nulled premium products break licences and never get safe updates.
WordPress itself is free and open source, so there’s no reason to download it anywhere except WordPress.org. Learn more in our security guide.
Updating instead of downloading
If you already run WordPress, you don’t need to download new versions manually. Go to Dashboard → Updates and click Update (back up first). Minor security releases usually install automatically. Manual updates (uploading new wp-admin and wp-includes folders) are only needed when automatic updates fail.
WordPress versions: which one should you use?
Always use the latest version. WordPress focuses support on the newest release, and updates include security fixes, performance improvements and new features. Older versions are only useful for testing compatibility or temporarily rolling back on a staging site.
Frequently asked questions
Is WordPress free to download?
Yes, completely free and open source.
What is the latest WordPress version?
WordPress 7.1.3 as of October 2026. Check wordpress.org/download for the current release.
Can I download WordPress for Windows or Mac?
WordPress runs on a web server, not as a normal app. To run it on your computer, use a local server tool — see local WordPress guide.
Is WordPress.com the same download?
No. WordPress.com is a hosted service; you don’t download anything. See WordPress.com vs WordPress.org.
Final thoughts
Get WordPress only from WordPress.org — or let your host install it in one click. Then follow our beginner’s guide to start building.
What’s inside the WordPress download?
When you unzip the official download, you’ll see three folders and a handful of files. The wp-admin folder contains the dashboard. The wp-includes folder holds the core code that powers WordPress. The wp-content folder is where your themes, plugins and uploads will live — it’s the only folder you should ever change. Files such as wp-config-sample.php become your configuration file during installation, and index.php loads everything. Understanding this layout helps when you troubleshoot or move a site, because you’ll know which parts are safe to replace and which hold your content.
A real-world example
A small business owner found a “free WordPress download with premium themes included” on an unofficial site. After installing it, her site began sending spam emails and redirecting visitors. The bundled themes contained hidden backdoors. She had to rebuild the site from scratch using the official download from WordPress.org and themes from the official directory. The lesson is simple: WordPress is already free, so there’s never a reason to download it anywhere else.
Keep the server secure too
A genuine WordPress download is only part of a safe site. WordPress runs on PHP, and the server’s PHP version must be supported and patched. In October 2026, the PHP2Shell vulnerabilities affected unpatched PHP servers worldwide, regardless of how WordPress was installed. Check your PHP version under Tools → Site Health → Info after installing, and choose a host that applies security patches quickly.
Do you even need to download WordPress?
Most people don’t. Nearly every host offers one-click WordPress installation, which downloads the official files for you. Manual downloads are mainly useful for local development, custom server setups or replacing core files after a hack.
Which WordPress version should you download?
Always download the latest stable release from WordPress.org. Older versions are listed in the release archive for developers who need them for testing, but they don’t contain the latest security fixes and shouldn’t be used on live sites. Beta and release candidate versions are for testing only. If you’re worried a new version might break your site, test it on a staging copy first rather than installing an old version.
After downloading
Once you have the files, follow our installation guide, then work through the essential settings, choose a theme and set up backups before adding content. Keep the original zip file in case you ever need to replace core files.
Store the zip somewhere safe, alongside a note of which version it is and where you downloaded it from.
Verify, then install
Before uploading files to a server, confirm the download came from wordpress.org over a secure connection and that the zip opens normally. If your computer warns you about the file, stop and download it again from the official site.
WordPressPrime.com is an independent guide and is not affiliated with the WordPress Foundation, WordPress.org or Automattic. Always back up your website before making changes, and check official sources for the latest details.
