Redirect HTTP traffic to HTTPS
When a WordPress site has an SSL certificate, WP Force SSL PRO can redirect its HTTP traffic to HTTPS. The main redirect option is active after you install and activate the plugin. Open Settings > WP Force SSL to review the tests and controls.
Choose how to provide an SSL certificate
If your hosting provider works with Let’s Encrypt, add a certificate through its hosting panel, then enable SSL with WP Force SSL. The extension also works with paid certificates and other SSL certificates. If the hosting panel approach does not work, WP Force SSL PRO can generate a free certificate for the site and regenerate it every 90 days.
The certificate tester checks whether a certificate is valid, properly installed and up to date. Other SSL tests check its expiry date, the WordPress and home URL settings, and whether the site is running locally.
Review HTTPS settings and issues
PRO includes controls for common HTTPS configuration tasks:
- Check for mixed content and use the mixed-content fix option.
- Enable HSTS and force secure cookies.
- Enable cross-site scripting protection and configure the expected Content Security Policy header and X-Frame settings.
- Enable file redirection and 404 redirection.
- Enable SSL monitoring and check whether HTTPS redirection is working.
The test area can also check for known incompatible SSL plugins, confirm whether the .htaccess file is available and writable, and display whether HSTS is enabled. It can check whether the latest version of Force SSL is in use, along with the certificate, URLs and redirect status.
Access controls in the WordPress dashboard
You can show the WP Force SSL menu in the admin bar and add its widget to the dashboard to reach settings and status information while managing the site.
Install and check the setup
- Install and activate WP Force SSL PRO on the WordPress site.
- Make an SSL certificate available through the hosting panel, Let’s Encrypt, a paid certificate, or the PRO certificate-generation option.
- Open Settings > WP Force SSL and confirm that the redirect option is active.
- Run the available SSL tests to review certificate status, URLs, redirection, mixed content and related settings.
