Move WordPress traffic to HTTPS
WP Force SSL PRO is designed for WordPress sites that need to redirect insecure HTTP traffic to secure HTTPS. It works with SSL certificates from Let’s Encrypt as well as paid SSL certificates, helping you move the entire site to HTTPS without editing code.
The plugin’s main redirect option is active after activation, so the basic HTTPS redirection workflow is ready to use. You can then open the WP Force SSL settings from the main WordPress Settings menu and review the available tests and controls.
SSL certificate support
If your hosting provider supports Let’s Encrypt, you can add the certificate through the hosting panel and then enable SSL with WP Force SSL. When that approach does not work, WP Force SSL PRO can generate a free SSL certificate for the site and regenerate it every 90 days.
WP Force SSL PRO works with any SSL certificate. Its certificate testing tool checks whether a certificate is valid, properly installed, and up to date. The available SSL tests also include certificate expiry, the WordPress and home URL settings, and whether the site is running locally.
Advanced HTTPS and security controls
Beyond the main redirect, the PRO edition includes options for handling common HTTPS configuration tasks:
- Mixed-content tools: Check for mixed-content issues and use the option to fix mixed content.
- HSTS: Enable HTTP Strict Transport Security.
- Secure cookies: Force secure cookies.
- Security headers: Use cross-site scripting protection and configure the expected Content Security Policy header and X-Frame options.
- Additional redirects: Enable file redirection and 404 redirection.
- Monitoring: Enable SSL monitoring and check whether HTTPS redirection is working.
The test area can also check for known incompatible SSL plugins, confirm whether the .htaccess file is available and writable, and show whether HSTS is enabled. These checks provide a practical way to review the site’s HTTPS setup from one WordPress interface.
Useful site administration tools
WP Force SSL can display its menu in the WordPress admin bar and add a WP Force SSL widget to the admin dashboard. These options make the plugin’s settings and status information easier to access while managing the site.
Installation and first setup
First, install and activate WP Force SSL PRO on the WordPress site. Make sure an SSL certificate is available, either through the hosting panel, Let’s Encrypt, or the PRO certificate-generation option. Then open Settings > WP Force SSL, confirm that the redirect option is active, and run the available SSL tests. Use the results to review certificate status, URLs, redirection, mixed content, and related settings.
