Manage SSL and HTTPS from WordPress
WP Encryption PRO helps WordPress site administrators generate and manage Let’s Encrypt SSL certificates through a guided process. The plugin is intended to reduce the technical work involved in domain verification, certificate setup, HTTPS activation, and ongoing security checks.
The Pro edition adds automation for core certificate tasks and extends the plugin with wildcard certificates, multisite and mapped-domain support, security headers, login security, monitoring, and scheduled scans. It can be used when moving a site to HTTPS, managing certificates across supported domains, or reviewing security-related settings from the WordPress dashboard.
Certificate automation
- Automatically verify domains.
- Automatically install SSL certificates.
- Automatically renew certificates, with renewal scheduled 30 days before expiration.
- Support wildcard SSL certificates for a primary domain and its subdomains.
- Use automatic DNS-based verification for wildcard installation when DNS is managed by cPanel or GoDaddy.
- Support multisite and mapped domains.
- Download generated SSL certificate, key, and Intermediate certificate files for manual server installation.
The downloadable certificate files can be useful for specialized VPS or dedicated servers without cPanel, where installation is completed by modifying the server configuration through SSH access as described in the product documentation.
HTTPS and site security tools
WP Encryption PRO includes one-click options for forcing HTTPS with a 301 htaccess redirection sitewide. The redirection feature includes a redirect-loop fix for Cloudflare, StackPath, load balancers, and reverse proxies. A mixed-content fixer helps address insecure content issues, while the SSL Health page provides an SSL score and controls for settings such as HSTS strict transport security and secure cookies.
The plugin can enable security headers including X-XSS-Protection, X-Content-Type-Options, and Referrer-Policy. Additional security features include stopping user enumeration, disabling file editing, hiding login errors, and hiding the WordPress version.
Monitoring and access protection
Pro includes SSL monitoring with automatic email notification before certificate expiration. It also provides login security through passkeys powered by WebAuthn, allowing authentication through passkeys protected by a browser or password manager.
Automated daily vulnerability scanning and reporting, daily malware and integrity scans, and instant notifications for threats and security issues add ongoing review to the certificate and HTTPS workflow. The product also lists one-to-one priority support through live chat, email, and a premium support forum, together with SSL installation help for non-cPanel sites.
Installation and setup
Install and activate the WP Encryption plugin, register the site, and follow the certificate-generation process to verify the domain and create an SSL certificate. After upgrading to PRO and activating the Pro plugin, automatic renewal starts in the background according to the stated schedule, with no additional auto-renewal configuration required.
Once the certificate is installed, enable HTTPS sitewide and review the SSL Health settings. If a page still shows insecure content, check for HTTP assets loaded by themes, builders, CSS, JavaScript, or external links. For Elementor content, the supplied guidance is to use Elementor > Tools > Replace URL to replace the HTTP site address with its HTTPS version.
