WordPress plugin
WP Force SSL PRO
WP Force SSL PRO redirects WordPress traffic from HTTP to HTTPS. Its main redirect option is active after activation, and code edits are not required. HTTPS needs an SSL certificate; the extension works with Let’s Encrypt, paid certificates and other SSL certificates.
HTTPS redirects and SSL certificates
WP Force SSL PRO redirects WordPress traffic from HTTP to HTTPS. Its main redirect option is active after activation, and code edits are not required. HTTPS needs an SSL certificate; the extension works with Let’s Encrypt, paid certificates and other SSL certificates.
If your hosting provider supports Let’s Encrypt, add a certificate through the hosting panel and then enable SSL with WP Force SSL. If that approach does not work, WP Force SSL PRO can generate a free certificate for the website and regenerate it every 90 days.
Review the site’s SSL setup
The certificate tester checks whether a certificate is valid, properly installed and up to date. Other tests cover certificate expiry, whether the site is running locally, and whether the WordPress and home URLs use SSL. They can also check for known incompatible SSL plugins, confirm whether the .htaccess file is available and writable, and report the status of HTTPS redirection, HSTS, mixed content, SSL monitoring, file redirection and 404 redirection.
HTTPS and security controls
Alongside the main redirect, the PRO options include an option to check and fix mixed content, enable HSTS, and force secure cookies. Security controls include cross-site scripting protection and settings for the expected Content Security Policy header and X-Frame settings. You can also enable SSL monitoring, file redirection and 404 redirection, with tests available for their status.
Access settings from WordPress
WP Force SSL can show its menu in the WordPress admin bar and add a widget to the dashboard. Open Settings > WP Force SSL to access the tests and controls.
Installation and first setup
Install and activate WP Force SSL PRO. Make an SSL certificate available through your hosting panel or Let’s Encrypt, or use the PRO certificate-generation option. Then open Settings > WP Force SSL, confirm that the redirect option is active, and execute the available tests to review certificate status, URLs, redirection, mixed content and related settings.
