After completing an installation with Duplicator, it’s essential to remove the installer files to keep your site secure. Deleting the Duplicator plugin will not automatically remove these files. You don’t need to remove the plugin after installation unless you no longer wish to use it.

Option 1: Leave “Auto delete installer” Checked

When the installer finishes, you can leave the Auto delete installer files after login to secure site checked and this will delete the files for you when you login.

If this option was unchecked for diagnostic reasons or you still need to remove the files for any other reason, see the other options below.

Option 2: Use the Admin Notification Link

1. Log in to your newly installed site’s WordPress admin area.
2. Click the “Remove Installation Files Now!” link at the top of the dashboard.
3. This will immediately delete the installer files.

Option 3: Use Duplicator Tools

1. Log in to your WordPress admin area.
2. Navigate to Duplicator » Tools » General.
3. Click the “Delete Installation Files” button.
4. Confirm the action if prompted.

Option 4: Manually Delete Files via FTP or File Manager

If you prefer to remove the files manually, follow these steps:

1. Connect to your website using FTP, SFTP, or your host’s file manager.
2. Locate the root directory of your WordPress site. This is usually where the wp-config.php file resides or where the wp-includes and wp-admin folders are located.
3. Delete the following files and folders:

Files and Folders to Remove

Duplicator Pro and Lite 1.3+ Versions

• dup-installer (directory)
• installer.php
• installer-backup.php
• installer-bootlog_[HASH].txt
• [HASH]_archive.zip/daf

Duplicator Lite 1.2 (Older Versions)

• installer.php
• installer-backup.php
• dup-installer-data_[HASH].sql
• dup-installer-log_[HASH].txt
• dup-database_[HASH].sql
• [HASH]_archive.zip/daf

Note: In older versions, these files may have been named: installer-data.sql, database.sql, or installer-log.txt

Important Security Reminder

Even though Duplicator’s installer includes password protection, it should only be used temporarily. To prevent unauthorized access, all installer files must be removed after the installation is complete.

By ensuring that these files are deleted, you’re protecting your site from potential security risks.

That’s it! Following these steps will help keep your site safe and secure by deleting the installer files.

If you are looking for a way to solve migration issues, check out our guide: “How to resolve WordPress migration issues?“