WP Force SSL PRO

What activation changes

After installation and activation, the main redirect option is already enabled. It sends site traffic from HTTP to HTTPS using the website's SSL certificate, so a working certificate is required. WP Force SSL PRO works with Let’s Encrypt, paid certificates and other SSL certificates, without requiring code edits.

Provide and check the certificate

If your hosting provider supports Let’s Encrypt, add a certificate through its hosting panel and then enable SSL with WP Force SSL. If that setup does not work, WP Force SSL PRO can generate a free certificate for the site and regenerate it every 90 days.

The certificate tester reports whether a certificate is valid, properly installed and up to date. Other tests check its expiry date, whether the WordPress and home URLs use SSL, and whether the site is running locally. They can also check for known incompatible SSL plugins, whether the .htaccess file is available and writable, and whether the latest version of WP Force SSL is in use.

Review HTTPS status and settings

The test results cover whether HTTPS redirection is working, whether file and 404 redirection are enabled, whether HSTS is enabled, and whether mixed-content issues are present. SSL monitoring is also available in the PRO edition. These checks help you review certificate and site configuration from the WP Force SSL settings in the WordPress Settings menu.

Configure additional controls

PRO settings include an option to fix mixed content, enable HTTP Strict Transport Security (HSTS), and force secure cookies. Security controls include cross-site scripting protection, an Expect-CT header and X-Frame settings. You can also enable file redirection and 404 redirection, and turn on SSL monitoring.

For quicker access in WordPress, WP Force SSL can show its menu in the admin bar and add a widget to the dashboard.

Install and run the checks

Install and activate WP Force SSL PRO, then make sure an SSL certificate is available through your hosting panel, Let’s Encrypt or the PRO certificate-generation option. Open Settings > WP Force SSL, confirm that the redirect option is active and run the available tests. Review the results for certificate status, URLs, redirects, mixed content and related settings.