A word of caution about Yoast SEO for Wordpress

bartosimpsonio

Elite Member
Executive VIP
Jr. VIP
Joined
Mar 21, 2013
Messages
24,786
Reaction score
31,558
A client of mine asked me to install Yoast SEO plugin on her WP blog yesterday.

Yoast asked me permission to link the plugin to Google Webmaster Tools in order to optimize the site, so I said fine. Had never done this link before though.

To my surprise, Yoast pulled a list of every site I manage for clients on my GWT. It did not restrict itself to the current site, but pulled a list of every site and printed it right inside my client's WP panel.

If this customer were sitting beside me, they'd have seen all the sites I work for right inside her WP panel.

Also, whoever runs Yoast now knows every site, mine or third party, that I have on GWT. Why did the plugin have to do that?

This is becoming commonplace these days. You buy a phone and it asks you for permission to add a simple icon to your contacts. You grant permission for it to add the icon, and all of a sudden the fucking thing will upload every single contact in your phone up to Google's servers. Who asked the fucking phone to do that? I just wanted a simple icon. This is getting worse every day. You take a photo with your phone and it's immediately uploaded to wherever. Whatever happened to privacy?

Same thing is happening in SEO and on the WWW. Every single plugin in every single app is trying to mine all your info to upload it to servers across the globe. When did this suddenly become OK?

So you want a simple WP plugin to optimize titles and place some meta tags, and now my entire Google history and every single site I've worked for that uses GWT is linked inside my client's WP admin panel! Why?

Also, during regular use of the plugin, it seemed VERY intrusive on the WP admin panel. The thing is everywhere and monitoring every word you type to offer you "advice". Every keystroke is processed so it tells you "that title is too long" or "you haven't used the keyword yet". That's all bullshit, it's basically just monitoring everything I type for whatever reason but it's NOT just for SEO.

Be warned that Yoast is a very intrusive plugin that is monitoring every keystroke you type inside WP admin - every single one. They are gathering massive amounts of info from WP blogs and linked Google accounts. Maybe I'm old and this is ok nowadays, it's not ok for me. Any site I have in GWT is white hat and legit, but I didn't want the list to be there on my clients site. I have nothing to hide, but the issue is I did not grant it permission to dig into my data like that.

Whatever you do, do NOT link ANY plugin to ANY other account. Even the most harmless OAUTH permission might end up being a privacy hazard in the long run.
 
I use Yoast on my blog. I've never had this problem.

When did you last update the plugin? And are you using paid or free version?

I'm asking bc I use the free version, and as far as I know my plugin is up to date. But I've never run across this problem.
 
I use Yoast on my blog. I've never had this problem.

When did you last update the plugin? And are you using paid or free version?

I'm asking bc I use the free version, and as far as I know my plugin is up to date. But I've never run across this problem.

I got the last version yesterday from the Yoast site. Free version.

Maybe you haven't noticed what he plugin is doing then ;)
 
That is the reason why I switched back to All-in-one-seo. I also noticed that Yoast SEO used far more ram then other SEO plugins (which can be quite a big deal if you use shared hosting).

Another downside was that it forced SEO into your articles instead of going natural and making the article for your readers.
 
Stopped using Yoast or any other SEO plugin long ago, useless anyway if you know what to do.

Yeah I never use these plugins. I end up optimizing by hand old school.

I was surprised though that for the simplest stuff now your entire Google history gotta be linked with a stupid plugin.
 
Yeah I never use these plugins. I end up optimizing by hand old school.

I was surprised though that for the simplest stuff now your entire Google history gotta be linked with a stupid plugin.

You use HTML or a CMS? I only use SEO plugins for the sitemap + title/desc.
 
So Yoast is toast? I just use themes that have the SEO basics already built in.
 
I find myself over optimizing when i use plugins like yoast. Plus I try to use as few plugins as possible because you never know when the next update will install something like this.

I know what you mean by an app wanting access to your phone like contacts for something so simple. Your experience reminds me when I got my first iPhone and it imported all my contacts from Google. Well, I still had contact information for old girlfriends in gmail that were pulled into my phone. Try explaining that to your wife.
 
Usually i use different analytics accounts for every wordpress site and been using yoast seo for quite a long time with no much issues.
 
SEO plugin for what?! XD

I don't know why people keep using them, its just useless.
 
Also noticed the same thing yesterday, wasnt an issue for me as its only for my personal site, but I can see that being a big problem if you were using it on a clients site.
 
Just go old school and let Google write their own meta title and description. No one got time for filling that shit in.

And Google loves it, they know you mean business when you don't give a ham shank about your meta title.
 
I got the last version yesterday from the Yoast site. Free version.

Maybe you haven't noticed what he plugin is doing then ;)

Ah, OK. I logged into my site a week ago so I don't have the latest version.

I'll dump it. I only used it bc I'm super lazy , but I'm not entirely worried about my page rankings anyway. I'm perfectly capable of doing onpage SEO without a plugin. Not difficult.
 
If you really care about this, but you want to use the plugin, don't forget you have access to the source. Delete everything you want. I don't know if it requires to communicate with their servers to do its job, but you'll learn that as well, looking at the code.
 
If you really care about this, but you want to use the plugin, don't forget you have access to the source. Delete everything you want. I don't know if it requires to communicate with their servers to do its job, but you'll learn that as well, looking at the code.

Reading the code is a good idea. I don't have the time now, but it's definitely worth it.
 
Regarding the Webmaster Tools Access:
We did use the Webmaster Tools API for ourselves as well, and there was no other way to do that.
So Google itself shows via the API all your connected website. Not sure if this has changed in the last months, but I doubt.
 
Regarding the Webmaster Tools Access:
We did use the Webmaster Tools API for ourselves as well, and there was no other way to do that.
So Google itself shows via the API all your connected website. Not sure if this has changed in the last months, but I doubt.

It hasn't changed.
 
Back
Top