WP Force SSL PRO: HTTPS Redirects and SSL Management
Redirect WordPress traffic to HTTPS
WP Force SSL PRO redirects insecure HTTP traffic to HTTPS using the site’s SSL certificate. The main redirect option is active after the plugin is installed and activated, so you can then check the site’s configuration from the WP Force SSL settings under the WordPress Settings menu.
Set up an SSL certificate
The site needs an SSL certificate. If your hosting provider supports Let’s Encrypt, add the certificate through the hosting panel, then enable SSL with WP Force SSL. If that setup does not work, WP Force SSL PRO can generate a free certificate and regenerate it every 90 days. The plugin also works with paid certificates.
Use the certificate tester to check whether the certificate is valid, properly installed and up to date. Other checks cover the certificate expiry date, WordPress and home URL settings, whether the site is running locally, and whether known incompatible SSL plugins are active.
HTTPS and security controls
Alongside HTTP-to-HTTPS redirection, the PRO controls include:
- Checking for mixed-content issues and using the mixed-content fix option.
- Enabling HSTS and forcing secure cookies.
- Cross-site scripting protection, the Expect-CT header and X-Frame options.
- File redirection and 404 redirection.
- SSL monitoring and a check that HTTPS redirection is working.
The test area can also check whether the .htaccess file is available and writable, whether HSTS is enabled, and whether file redirection is working and 404 redirection is enabled.
Access settings in WordPress
You can show the WP Force SSL menu in the admin bar and add its widget to the admin dashboard. These options provide access to the plugin’s settings and status while you manage the site.
Install and check the setup
- Install and activate WP Force SSL PRO.
- Make an SSL certificate available through your hosting panel or Let’s Encrypt. If that approach does not work, use the PRO certificate-generation option.
- Open Settings > WP Force SSL and confirm that the redirect option is active.
- Run the available tests to review the certificate, URLs, HTTPS redirection, mixed content and related settings.