WP Force SSL PRO

Redirect a WordPress site to HTTPS

WP Force SSL PRO redirects HTTP traffic to HTTPS using the site's SSL certificate, without requiring code edits. The main redirect option is active after you install and activate the add-on. Open Settings > WP Force SSL to review the available tests and options.

Choose how to provide the certificate

The extension works with Let’s Encrypt, paid certificates and other SSL certificates. If your host supports Let’s Encrypt, add the certificate through its hosting panel, then enable SSL with WP Force SSL. If that setup does not work, WP Force SSL PRO can generate a free certificate and regenerate it every 90 days.

The certificate tester checks whether a certificate is valid, properly installed and up to date. Other tests report its expiry date, whether the WordPress and home URLs use SSL, and whether the site is running locally. They also check for known incompatible SSL plugins and whether the .htaccess file is available and writable.

Review HTTPS issues and controls

PRO includes a mixed-content check and an option to fix mixed content. You can also enable HSTS, force secure cookies, use cross-site scripting protection, and configure the Expect-CT header and X-Frame settings.

Additional settings enable SSL monitoring, file redirection and 404 redirection. The test area reports whether HTTPS redirection is working, whether file redirection is working, whether 404 redirection is enabled and whether HSTS is enabled.

Set up the plugin

1. Install and activate WP Force SSL PRO.
2. Make an SSL certificate available through your hosting panel, Let’s Encrypt or the PRO certificate-generation option.
3. Open Settings > WP Force SSL and confirm the redirect option is active.
4. Run the available tests to review the certificate, site URLs, redirection, mixed content and related settings.

For easier access in WordPress, WP Force SSL can display its menu in the admin bar and add a widget to the dashboard.