Manage SSL and HTTPS in WordPress

WP Encryption PRO guides WordPress administrators through generating and managing Let’s Encrypt SSL certificates. Its automated certificate tasks handle domain verification, installation and renewal, while dashboard tools help with HTTPS settings and ongoing security checks.

Certificate setup and renewal

• Automatically verify domains and install SSL certificates.
• Automatically renew certificates, with renewal scheduled 30 days before expiration.
• Support wildcard SSL certificates for a primary domain and its subdomains. Automatic DNS-based verification for wildcard installation is available when DNS is managed by cPanel or GoDaddy.
• Support multisite and mapped domains.
• Download the generated SSL certificate, key and Intermediate certificate documents for manual server installation.

Manual installation can be used on specialized VPS or dedicated servers without cPanel. It requires modifying the server configuration through SSH, as described in the product documentation.

HTTPS settings and security controls

One-click options force HTTPS with a sitewide 301 htaccess redirection. A redirect-loop fix is included for Cloudflare, StackPath, load balancers and reverse proxies. The mixed-content fixer helps address insecure content. The SSL Health page shows an SSL score and includes controls for HSTS strict transport security and secure cookies.

Security headers include X-XSS-Protection, X-Content-Type-Options and Referrer-Policy. Other settings can stop visitor enumeration, disable file editing, conceal login errors and hide the WordPress version.

Monitoring, scans and sign-in

SSL monitoring sends an automatic email before a certificate expires. Login security includes WebAuthn passkeys protected by a browser or password manager.

Scheduled checks include daily vulnerability scanning and reporting, plus daily malware and integrity scans. Instant notifications report threats and security issues. Pro also lists one-to-one priority support through live chat, email and a premium support forum, along with SSL installation help for non-cPanel sites.

Install and configure

Install and activate the WP Encryption add-on, register the site, then follow the certificate-generation process to verify the domain and create an SSL certificate. After upgrading to PRO and activating the Pro extension, automatic renewal starts in the background on the stated schedule; no additional auto-renewal configuration is required.

After the certificate is installed, enable HTTPS sitewide and review the SSL Health settings. If a page still shows insecure content, check for HTTP assets loaded by themes, builders, CSS, JavaScript or external links. In Elementor, use Elementor > Tools > Replace URL to replace the HTTP site address with its HTTPS version.