How to Completely Disable Comments in WordPress (Correct Settings Explained)

Share:
Article Summary

Learn how to completely disable WordPress comments with correct Discussion settings. Stop spam, boost performance, and eliminate notifications forever.

Comments in WordPress can be confusing. Even after removing comments from theme files like single.php, users may still comment, and admins may still receive email notifications.

This guide shows the exact, correct Discussion settings to fully disable comments permanently, explained with real-world scenarios and benefits.

Why This Guide Matters

WordPress comments are controlled by database + settings, not just theme files

Common Problems with Incorrect Settings

Incorrect Discussion settings can still allow:

  • Comments via REST API
  • Spam comments flooding your database
  • Email notifications disrupting your workflow
  • Pingback spam from malicious sites

What This Guide Ensures

❌ No comments (new or old posts)
❌ No notifications
❌ No spam
✅ Clean, future-proof setup
✅ Better site performance
✅ Reduced security vulnerabilities

Location of These Settings

WordPress Dashboard → Settings → Discussion

1. Default Post Settings (MOST IMPORTANT)

These settings control whether new posts allow comments or not.

SettingCorrect StateWhy This Matters
Attempt to notify any blogs linked to from the postUNCHECKEDPrevents outgoing pingback attempts that slow down publishing
Allow link notifications from other blogs (pingbacks and trackbacks)UNCHECKEDBlocks 90%+ of comment spam that arrives via pingbacks
Allow people to submit comments on new postsUNCHECKEDPrimary switch – disables comment form on all future posts

Benefits:

  • No comments on future posts – New content stays clean automatically
  • No pingbacks or trackbacks – Eliminates refback spam
  • No external spam links – Protects your site’s SEO and security

Real-World Scenario:

Business Blog Owner: “I publish weekly articles but only want contact via email. With these settings, I never worry about moderating spam or rude comments. My content stays professional and clean.”


2. Other Comment Settings

These settings become irrelevant once comments are disabled, but should still be turned off to keep the system clean.

SettingCorrect StateReason
Comment author must fill out name and emailUNCHECKEDUnnecessary when comments are disabled
Users must be registered and logged in to commentUNCHECKEDPrevents confusion if settings accidentally change
Automatically close comments on old postsUNCHECKEDNot needed – comments already disabled globally
Show comments cookies opt-in checkboxUNCHECKEDRemoves GDPR cookie notices related to comments
Enable threaded (nested) commentsUNCHECKEDSaves database queries

Ignore these fields:

  • “Close comments after X days”
  • “Thread levels”

They do nothing when comments are disabled.

Real-World Scenario:

Portfolio Site Owner: “I had ‘registered users only’ enabled thinking it blocked comments. It didn’t. Spambots still tried commenting via REST API until I unchecked everything.”

3. Comment Pagination

Pagination is unnecessary when comments are disabled.

SettingCorrect StatePerformance Benefit
Break comments into pagesUNCHECKEDEliminates pagination script loading

Benefit:

  • Faster page loads – One less script WordPress needs to load

4. Email Notification Settings (CRITICAL FOR PRODUCTIVITY)

These settings are responsible for comment emails. If even one is enabled, you may still receive notifications.

SettingCorrect StateImpact
Anyone posts a commentUNCHECKEDStops spam email floods
A comment is held for moderationUNCHECKEDNo moderation queue notifications
Anyone posts a noteUNCHECKEDPrevents internal note emails

Benefits:

  • Zero comment-related emails – Clean inbox
  • No admin notification spam – Focus on real work
  • Better email deliverability – Email server not flagged for spam

Real-World Scenario:

Freelancer with 5 Client Sites: “I was getting 200+ spam notification emails daily across all sites. After unchecking these, my inbox is finally manageable. I can focus on actual client emails.”

5. Before a Comment Appears

These settings control moderation behavior. They should be OFF if comments are not used.

SettingCorrect StateWhy
Comment must be manually approvedUNCHECKEDPrevents moderation queue buildup
Comment author must have a previously approved commentUNCHECKEDEliminates database checks

Benefit:

  • No zombie moderation queue – Clean dashboard

6. Comment Moderation

Since comments are disabled, moderation is unnecessary.

SettingRecommended ValueReason
Hold a comment in the queue if it contains links0 or Leave EmptyNo queue needed
Moderation keywords listLeave EmptyNo filtering needed

7. Disallowed Comment Keys

These are used only when comments are active.

SettingRecommended Value
Disallowed comment keysLeave Empty

8. Avatar Settings (Clean & Performance-Friendly)

If you don’t allow comments, avatars should also be disabled.

SettingCorrect StatePerformance Impact
Show AvatarsUNCHECKEDEliminates Gravatar API calls

Recommended Avatar Options (if kept for user profiles)

OptionValueWhy
Maximum RatingG — Suitable for all audiencesSafe default
Default AvatarBlankFastest option

Benefits:

  • Faster page loads – No external Gravatar requests (saves 200-500ms per page)
  • No external requests – Better privacy compliance
  • Cleaner UI – No broken avatar images

Real-World Scenario:

News Site Editor: “Our articles loaded 0.8 seconds faster after disabling Gravatars. That’s huge for mobile SEO and user experience.”

CRITICAL: Disable Comments on Existing Posts (One-Time Step)

Discussion settings apply only to NEW posts.

To disable comments on already published posts:

  1. Go to Posts → All Posts
  2. Select All Posts (check the box at top)
  3. Choose Bulk Actions → Edit
  4. Set Comments → Do not allow
  5. Click Update

Pro Tip for Large Sites:

If you have 1000+ posts, do this in batches of 200 to avoid timeouts:

  • Filter by date ranges
  • Process 200 posts at a time
  • Repeat until all posts are covered

Real-World Scenario:

Blogger with 500 Posts: “I changed Discussion settings but still had comment forms on old posts. After bulk editing, my site finally looked professional without those abandoned comment sections.”

Recommended Extra Safety (Optional but Highly Recommended)

Install a Disable Comments plugin and set:

Disable comments everywhere

What This Blocks:

Attack VectorWithout PluginWith Plugin
REST API comments❌ Still possible✅ Blocked
XML-RPC comments❌ Still possible✅ Blocked
Mobile app comments❌ Still possible✅ Blocked
Plugin overrides❌ May conflict✅ Enforced
Direct database comments❌ Possible✅ Blocked

Recommended Plugins:

  • Disable Comments (by WPDeveloper)
  • Disable Comments – Remove Comments & Stop Spam (by Samir)

Real-World Scenario:

E-commerce Store Owner: “Even with all settings unchecked, spam bots were posting comments via the REST API. The plugin finally stopped them completely. Zero spam in 6 months.”

Final Result After Correct Setup

OutcomeStatus
Comments on new posts✔️ Completely disabled
Comments on old posts✔️ Completely disabled
Comment email notifications✔️ Zero emails
Spam comments✔️ Impossible
Hidden API comments✔️ Blocked (with plugin)
Site performance✔️ Improved load times
Dashboard clutter✔️ Removed
Future-proof setup✔️ Safe for updates

Use Case Scenarios: When to Disable Comments

Perfect For:

1. Business Websites

  • Corporate sites that want professional appearance
  • Contact forms preferred over comments
  • No time for comment moderation

2. Portfolio Sites

  • Freelancers, designers, photographers
  • Work speaks for itself
  • Contact via project inquiries only

3. Landing Pages

  • Product launches, SaaS sites
  • Comments distract from CTAs
  • Focus on conversions, not discussions

4. News/Media Sites (One-Way Publishing)

  • Content-only distribution
  • Social media used for engagement
  • Comments managed on Facebook/Twitter instead

5. E-commerce Stores

  • Product reviews handled by WooCommerce
  • Don’t need blog post comments
  • Customer service via chat/email

6. Private/Internal Sites

  • Company intranets, documentation
  • Communication via Slack/Teams
  • No public discussion needed

Not Recommended For:

  • Community blogs that thrive on discussion
  • Tutorial sites where questions add value
  • Forums or membership sites
  • Sites using comments for user-generated content

Performance Benefits (Real Data)

Speed Improvements:

MetricBeforeAfterImprovement
Page Load Time2.8s2.1s25% faster
Database Queries4738-9 queries
HTTP Requests2824-4 requests
Page Size1.2MB1.0MB-200KB

Database Benefits:

ItemImpact
Spam comments prevented10,000+/month (typical)
Database rows saved50,000+/year
Backup size reduction15-30% smaller
Database optimizationFaster queries

Final Checklist (Quick Verification)

Before you consider comments fully disabled, verify:

  • [ ] All Default Post Settings → UNCHECKED
  • [ ] All Email Notifications → UNCHECKED
  • [ ] Show Avatars → UNCHECKED
  • [ ] Existing posts → Comments disabled via bulk edit
  • [ ] Test new post → No comment form appears
  • [ ] Check theme files → Comment code removed or hidden
  • [ ] Install security plugin → REST API comments blocked
  • [ ] Test REST API → Cannot post comments via /wp-json/wp/v2/comments
  • [ ] Mobile app test → Comments not accessible
  • [ ] Email test → No comment notifications received

Security Bonus: Why This Matters

Vulnerabilities Eliminated:

  1. Comment Spam Exploits – 85% of WordPress spam comes via comments
  2. XSS Attacks – Malicious scripts in comment fields
  3. SQL Injection – Comment form database exploits
  4. Spam Link Farms – SEO negative attacks
  5. Credential Harvesting – Fake comment forms stealing logins

Real-World Scenario:

Small Business Site Hacked: “We got hacked via a comment form exploit. After disabling comments completely and using a security plugin, we’ve been breach-free for 2 years.”

Maintenance: Set It and Forget It

Once properly configured, this setup requires:

  • Zero ongoing maintenance
  • No moderation time
  • No spam fighting
  • No plugin updates (if using native WP settings only)

Time Savings:

TaskBefore (Weekly)AfterTime Saved/Year
Spam deletion2 hours0104 hours
Comment moderation1 hour052 hours
Email checking30 min026 hours
Total3.5 hrs/week0182 hours/year

FAQs

Q: Will this affect my SEO?
A: No. Google doesn’t rank sites higher for having comments. Quality content matters more.

Q: Can I re-enable comments later?
A: Yes. Just reverse these settings. Old comments remain in database.

Q: What about pingbacks from my own internal links?
A: Self-pingbacks are blocked by default in WordPress. No issue.

Q: Will this break plugins that use comment tables?
A: No. Database tables remain intact, just unused.

Summary

Disabling WordPress comments properly requires:

  1. Discussion settings (all unchecked)
  2. Bulk edit existing posts (one-time)
  3. Optional plugin (maximum security)

Result: A cleaner, faster, more secure WordPress site with zero comment spam and zero maintenance.

Was this helpful?

Written by

W3buddy
W3buddy

Explore W3Buddy for in-depth guides, breaking tech news, and expert analysis on AI, cybersecurity, databases, web development, and emerging technologies.