WordPress.org

Weston Ruter

WordPress Performance Team

<p><em>This plugin was formerly called as “No-cache BFCache”, which admittedly was a poor jargony name and was too narrowly scoped.</em></p>
<p>This plugin enables instant back/forward navigation via the browser’s <a href="https://developer.mozilla.org/en-US/docs/Glossary/bfcache" rel="nofollow ugc">bfcache</a>. It does this by removing the <code>no-store</code> directive from the <code>Cache-Control</code> response header, which WordPress sends by default when <code>nocache_headers()</code> is called. This happens primarily when a user is logged in, but some plugins may send these “no-cache” headers such as on the Cart or Checkout pages for an e-commerce site. <strong>Upon activation, to see the effect, you must log out of WordPress and log back in again, ensuring “Remember Me” is checked.</strong> Even so, another plugin, theme or server configuration may be active which makes pages <a href="https://web.dev/articles/bfcache#optimize" rel="nofollow ugc">ineligible for bfcache</a> due to other <a href="https://developer.mozilla.org/en-US/docs/Web/API/Performance_API/Monitoring_bfcache_blocking_reasons#blocking_reasons" rel="nofollow ugc">blocking reasons</a>. Nevertheless, the removal of <code>no-store</code> will <em>still speed up back/forward navigations</em> since pages may then be served from the browser’s HTTP cache, eliminating the need to re-download the HTML from the server. This is a feature plugin to implement <a href="https://core.trac.wordpress.org/ticket/63636" rel="nofollow ugc">#63636</a> in WordPress core.</p>
<p>Blog post: <a href="https://weston.ruter.net/2025/07/23/instant-back-forward-navigations-in-wordpress/" rel="nofollow ugc">Instant Back/Forward Navigations in WordPress</a></p>
<p>The speed of page navigations in WordPress saw a big boost in 6.8 with the introduction of <a href="https://make.wordpress.org/core/2025/03/06/speculative-loading-in-6-8/" rel="nofollow ugc">Speculative Loading</a>. However, by default Speculative Loading in WordPress is not configured to enable <em>instant</em> page loads, which requires a non-conservative eagerness with the prerender mode; not all sites can even opt in to prerendering due to compatibility issues, such as with analytics, and due to concerns about sustainability with unused prerenders (e.g. increasing server load and taxing a user’s bandwidth/CPU). While Speculative Loading (i.e. the Speculation Rules API) is relatively new and currently only supported in Chromium browsers (e.g. Chrome and Edge), there is a much older web platform technology that enables prerendering <em>and</em> which is supported in all browsers: the back/forward cache (bfcache). This instant loading involves no network traffic and no CPU load, since previously visited pages are stored in memory. According to the web.dev article on <a href="https://web.dev/articles/bfcache" rel="nofollow ugc">back/forward cache</a>:</p>
<p><strong>Chrome usage data shows that 1 in 10 navigations on desktop and 1 in 5 on mobile are either back or forward. With bfcache enabled, browsers could eliminate the data transfer and time spent loading for billions of web pages every single day!</strong></p>
<p>Also learn more via the following video:</p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/Y2IVv5KnrmI?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<p>Normally, WordPress sends a <code>Cache-Control</code> header with the <code>no-store</code> directive when a user is logged in. This has the effect of <a href="https://web.dev/articles/bfcache#minimize-no-store" rel="nofollow ugc">breaking the browser’s bfcache</a>, which means that navigating back or forward in the browser requires the pages to be re-fetched from the server and for any JavaScript on the page to re-execute. The result can be a sluggish navigation experience not only when navigating around the WP Admin (see <a href="https://github.com/Automattic/jetpack/pull/44322#:~:text=page%20load%20is%3A-,Without%20bfcache,-With%20bfcache" rel="nofollow ugc">Jetpack demo video</a> and demo video below) but also when navigating around the frontend of a site. Furthermore, the lack of bfcache can cause data loss when data has been entered via a JavaScript-built UI since this state is lost when a page is not restored via bfcache (see <a href="https://github.com/woocommerce/woocommerce/pull/58445#issuecomment-3014404754" rel="nofollow ugc">WooCommerce demo video</a> and demo video below).</p>
<p>The reason why the <code>no-store</code> directive was added in the first place was due to a privacy concern where an authenticated user may log out of WordPress, only for another person to access the computer and click the back button to view the contents of the authenticated page loaded from bfcache or the HTTP cache. (See <a href="https://core.trac.wordpress.org/ticket/21938" rel="nofollow ugc">#21938</a>.) In practice this issue depends on the user being on a shared computer who didn’t exit the browser, and it requires the malicious user to act soon before the page is evicted from bfcache (e.g. Chrome as a <a href="https://developer.chrome.com/docs/web-platform/bfcache-ccns#:~:text=The%20bfcache%20timeout%20for%20Cache%2DControl%3A%20no%2Dstore%20pages%20is%20also%20reduced%20to%203%20minutes%20(from%2010%20minutes%20used%20for%20pages%20which%20don%27t%20use%20Cache%2DControl%3A%20no%2Dstore)%20to%20further%20reduce%20risk." rel="nofollow ugc">10-minute timeout</a>).</p>
<p>To address this privacy concern, a safeguard is in place to protect against restoring pages from bfcache and the HTTP cache after the user has logged out:</p>
<p>When authenticating to WordPress, a “bfcache session token” cookie is set along with the other authentication cookies. This cookie is not HTTP-only so that it can be read in JavaScript; it is a random string not used for any other purpose. When an authenticated page is served, this bfcache session token is included in the HTML as well as a script which reads the value of this cookie. When a user navigates away from the page and then navigates back to it, a script on the page checks if the current session token in the cookie matches the initial session token sent with the page. If they do not match (e.g. because the user has logged out or another user has logged in), then the contents of the page are cleared and the page is reloaded so that the contents are not available.</p>
<p>Since JavaScript is required to invalidate cached pages, the login form is extended to pass along whether scripting is enabled. Only when JS is enabled will the <code>no-store</code> directive be omitted from the <code>Cache-Control</code> response header. This ensures that users with JavaScript turned off will retain the privacy protection after logging out. Lastly, <code>no-store</code> is also only omitted if the user checked the “Remember Me” checkbox on the login form. Since it is highly unlikely a user on a shared computer would have checked this checkbox, this provides yet an additional safeguard (which may in the end prove excessive). A ✨ emoji is displayed next to the checkbox in a button that opens a popover that promotes the capability. If you want to opt out of this opt-in (and the sparkle) so that all logged-in users get bfcache, you can use the <code>nocache_bfcache_use_remember_me_as_opt_in</code> filter which you can use in a custom plugin or your theme:</p>
<pre>add_filter( 'nocache_bfcache_use_remember_me_as_opt_in', '__return_false' );</pre>
<p>When this plugin strips out the <code>no-store</code> directive, it also ensures that the <a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Cache-Control#private" rel="nofollow ugc"><code>private</code> directive</a> is sent in its place: “The <code>private</code> response directive indicates that the response can be stored only in a private cache (e.g., local caches in browsers).” WordPress is already sending <code>private</code> as of <a href="https://core.trac.wordpress.org/ticket/57627" rel="nofollow ugc">#57627</a>. This directive ensures that proxies do not cache authenticated pages. In addition to ensuring <code>private</code> is present, this plugin also adds <code>no-cache</code>, <code>max-age=0</code>, and <code>must-revalidate</code> while ensuring <code>public</code> is removed, all to further guard against any misconfigured proxy from caching the private response.</p>
<h4>Demo: Navigating the WordPress Admin</h4>
<p>Without bfcache:</p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/Cz-_L6q9ZRc?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&start=22&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<p>With bfcache:</p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/z4dILiwe0Rk?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&start=27&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h4>Demo: Navigating the WordPress Frontend</h4>
<p><strong>Without bfcache:</strong> The drafted BuddyPress activity update is lost when navigating away from the page before submitting. The activity feed and Tweet have to be reconstructed with each back/forward navigation.</p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/Ko1w_SRlCig?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<p><strong>With bfcache:</strong> The drafted BuddyPress activity update is preserved when navigating away from the page without submitting. The activity feed and Tweet do not have to be reconstructed when navigating to previously visited pages via the back/forward buttons.</p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/bzGm6LcHHAs?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>


Instant Back/Forward


This is now a "must install" plugin for me on every site I work on. It's absolutely magical.


Magical

Enables back/forward cache (bfcache) for instant history navigations even when “nocache” headers are sent, such as when a user is logged in.

JoomUnited

<p>WP Speed of Light is a WordPress speedup plugin and load time testing. Cache, Gzip, minify, group, Lazy Loading, CDN</p>
<h3>IMPORTANT NOTE ABOUT THIS PLUGIN:</h3>
<p>After careful consideration, we’ve decided to merge the free versions of WP Meta SEO, WP Speed of Light, and WP Latest Posts into their respective premium versions. This consolidation will allow us to focus our resources on developing more robust, feature-rich extensions. We do offer some easy migration and prices for free users though.</p>
<h4>Read the full article: <a href="https://www.joomunited.com/news/important-announcement-evolving-our-wordpress-extensions-for-better-service-and-performance" title="Important announcement: Evolving our extensions for better service and performance" rel="nofollow ugc">Blog post announcement</a>.</h4>
<p>WordPress does not have a system for speed optimization by default. That’s why you need a powerful plugin that speed up WordPress with technical and advanced features, yet accessible to everyone.<br />
WP Speed of Light starts with an advanced static cache, plus, you got a file minification and group tools, a database cleanup system, a .htaccess optimization, an auto-cache cleaner and a full CDN integration.</p>
<p>When it comes to performance loading time, it requires some test to identify which plugin, theme, page may require more attention.<br />
WP Speed of Light also includes a speed loading test and compare, and a database queries test. To go one step beyond with your WordPress speed, a PRO ADDON upgrade (optional) with custom support is available.</p>
<p><strong><a href="https://www.joomunited.com/wordpress-products/wp-speed-of-light" rel="friend nofollow ugc">More information and feature details here!</a></strong></p>
<h4>Video demo:</h4>
<div class="embed-vimeo" style="text-align: center;"><iframe loading="lazy" src="https://player.vimeo.com/video/186057806" width="750" height="422" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe></div>
<h3>WP Speed of Light, speed optimization plugin features</h3>
<ul>
<li>Generate full static cache</li>
<li>Selective or global cache for Desktop, Tablet, and Mobile</li>
<li>Check for GZIP compression activation</li>
<li>Remove Query strings: better score on Pingdom, Gtmetrix, Google Page Speed…</li>
<li>Minify resources (files): HTML, CSS, JS in a smart way to avoid conflicts</li>
<li>Group resources (files): CSS, JS in a smart way to avoid conflicts</li>
<li>Exclude files from group or minify</li>
<li>Add Expire Headers (browser cache)</li>
<li>Database optimization, clean: post revision, auto-draft content, trashed content, spam comments, trackbacks and pingbacks, transients options</li>
<li>CDN integration: load any CDN content</li>
<li>Automatic clean cache on interval and cache cleaner button</li>
<li>Automatic clean cache on content saving</li>
<li>Option to disable the WordPress REST API</li>
<li>Option to disable the WordPress RSS feeds</li>
<li>Cache external resources such as scripts served from Google (served locally)</li>
<li>WooCommerce dedicated integration</li>
<li>WordPress Multisite compatible</li>
<li>Page builders compatibility: ACF, DIVI Builder, Beaver Builder, Site Origine, Themify builder, Live Composer, Elementor…</li>
<li>Developer friendly using Hooks and Filters</li>
<li>Gutenberg auto-cache cleanup on save</li>
</ul>
<h3>PRO Addon plugin (optional): additional speed optimization</h3>
<blockquote>
<ul>
<li>Image compression</li>
<li>Image lazy loading with page exclusion</li>
<li>Local Font and Google Font Group</li>
<li>Visual File Exclusion from Group & Minification</li>
<li>Cache Pre-Loading</li>
<li>DNS Prefetching</li>
<li>Cleanup CDN data: Cloudflare, KeyCDN, MaxCDN, Varnish, Siteground cache</li>
<li>Database Automatic Cleanup</li>
<li>Possibility to disable Emojis</li>
<li>Possibility to remove Gravatar</li>
<li>Possibility to load scripts in footer</li>
<li>Disable Cache per WordPress User Role</li>
<li>Page Caching Exclusion Using PHP Rules</li>
<li>Custom support for configuration</li>
</ul>
</blockquote>
<h3>WP Speed of Light speed optimization testing:</h3>
<ul>
<li>Page loading time, first load</li>
<li>Page loading time, second load</li>
<li>First byte time</li>
<li>Time to start rendering</li>
<li>Element served from cache in %</li>
<li>Elements compressed with Gzip in %</li>
<li>Percent on compressed images</li>
</ul>
<p>Get a comfortable navigation experience, a better search engine rank with a radical speed optimization</p>
<p>Main plugins from JoomUnited:</p>
<ul>
<li><a href="https://www.joomunited.com/wordpress-products/wp-media-folder" rel="friend nofollow ugc">WP Media Folder:</a>  Supercharge your media library with folders</li>
<li><a href="https://www.joomunited.com/wordpress-products/wp-file-download" rel="friend nofollow ugc">WP File Download: </a>  Best in class file and document manager</li>
<li><a href="https://www.joomunited.com/wordpress-products/wp-meta-seo" rel="friend nofollow ugc">WP Meta SEO: </a>  Search Engine Optimization made easy</li>
<li><a href="https://www.joomunited.com/wordpress-products/wp-latest-posts" rel="friend nofollow ugc">WP Latest Posts: </a>  Super flexible latest posts and content</li>
<li><a href="https://www.joomunited.com/wordpress-products/wp-table-manager" rel="friend nofollow ugc"> WP Table Manager: </a>  Create and manage tables with style</li>
</ul>
<h4>Support</h4>
<p>Before leaving a review >> Feel free to ask questions here in the support section, we reply to every question!<br />
A dedicated private ticket support is also available on the website.</p>
<ul>
<li>
<p>Product page on the <a href="https://www.joomunited.com/wordpress-products/wp-speed-of-light" rel="friend nofollow ugc">**[JoomUnited website]</a></p>
</li>
<li>
<p>Detailed documentation <a href="https://www.joomunited.com/support/wordpress-plugins-documentation?extension=wp-speed-of-light" rel="friend nofollow ugc">**[JoomUnited documentation section]</a></p>
</li>
</ul>
<h3>Requirements</h3>
<p>PHP 5.6+, PHP 7.x recommended for better performance, WordPress 5.0+</p>


WP Speed of Light

Nice one

WP Speed of Light is a WordPress speedup plugin and load time testing. Cache, Gzip, minify, group, Lazy Loading, CDN

Instant Back/Forward vs WP Speed of Light