WP Encryption PRO

Set up certificates in WordPress

WP Encryption PRO helps WordPress administrators generate and manage Let’s Encrypt SSL certificates. Install and activate the WP Encryption extension, register the site, and follow the certificate-generation process to verify the domain and make a certificate. After upgrading to PRO and activating the Pro plugin, automatic renewal runs in the background 30 days before expiration, without additional renewal configuration.

Domain coverage and server installation

• Automatically verify domains and install SSL certificates.
• Use wildcard certificates for a primary domain and its subdomains. Automatic DNS-based verification for wildcard installation is available when DNS is managed by cPanel or GoDaddy.
• Support multisite and mapped domains.
• Download generated SSL certificate, key and Intermediate certificate documents for manual server installation.

Manual installation can suit specialized VPS or dedicated servers without cPanel. It requires modifying the server configuration through SSH access, as described in the product documentation.

Apply HTTPS and review settings

One-click controls can force HTTPS sitewide with a 301 htaccess redirection. The redirect option includes a redirect-loop fix for Cloudflare, StackPath, load balancers and reverse proxies. A mixed-content fixer helps address insecure content. The SSL Health page offers an SSL score and settings for HSTS strict transport security and secure cookies.

Security headers include X-XSS-Protection, X-Content-Type-Options and Referrer-Policy. Other settings stop user enumeration, disable file editing, conceal login errors and hide the WordPress version.

For pages that still display insecure content, check for HTTP assets loaded by themes, builders, CSS, JavaScript or external links. For Elementor content, the supplied guidance is to use Elementor > Tools > Replace URL to replace the HTTP website address with its HTTPS version.

Monitor certificates and protect login access

SSL monitoring sends an automatic email notification before a certificate expires. Login security includes passkeys powered by WebAuthn, which let visitors authenticate with passkeys protected by a browser or password manager.

Automated daily vulnerability scans include reporting. Daily malware and integrity scans, plus instant notifications for threats and security issues, provide ongoing checks. Pro support includes one-to-one priority help through live chat, email and a premium support forum, along with SSL installation help for non-cPanel sites.