Title: WP Force SSL & HTTPS SSL Redirect Author: WebFactory Published: January 16, 2015 Last modified: December 3, 2025 --- Search plugins ![](https://ps.w.org/wp-force-ssl/assets/banner-772x250.png?rev=2650031) ![](https://ps.w.org/wp-force-ssl/assets/icon-256x256.png?rev=2649905) # WP Force SSL & HTTPS SSL Redirect By [WebFactory](https://profiles.wordpress.org/webfactory/) [Download](https://downloads.wordpress.org/plugin/wp-force-ssl.1.68.zip) * [Details](https://co.wordpress.org/plugins/wp-force-ssl/#description) * [Reviews](https://co.wordpress.org/plugins/wp-force-ssl/#reviews) * [Installation](https://co.wordpress.org/plugins/wp-force-ssl/#installation) * [Development](https://co.wordpress.org/plugins/wp-force-ssl/#developers) [Support](https://wordpress.org/support/plugin/wp-force-ssl/) ## Description [WP Force SSL](https://wpforcessl.com/?ref=wporg) helps you redirect insecure HTTP traffic to secure HTTPS and fix SSL errors **without touching any code**. Activate Force SSL and everything will be set and SSL enabled. The entire site will move to HTTPS using your SSL certificate. It works with any SSL certificate. It can be free SSL certificate from Let’s Encrypt or a paid SSL certificate. How to add SSL & enable SSL? Most hosting companies support the free SSL certificate from Let’s Encrypt, so login to your hosting panel and add SSL certificate. You’ll see a button labeled “Add SSL Certificate” or “Add Let’s Encrypt Certificate” and after that it’s 1 click to have the SSL enabled on your site with WP Force SSL. If that doesn’t work get [WP Force SSL PRO](https://wpforcessl.com/) and it’ll generate free SSL certificate for your site. And will regenerate SSL certificate every 90 days. Access WP Force SSL settings via the main Settings menu -> WP Force SSL. #### SSL Tests available in the plugin * is site on localhost? * check SSL certificate * check SSL certificate expiry date * is latest version of Force SSL used? * are known incompatible SSL plugins active? * is WP address URL set for SSL? * is WP home URL set for SSL? * is SSL monitoring enabled (pro feature) * is HTTPS redirection working? * is file redirection working (pro feature) * is HSTS enabled? * check mixed-content issue (pro feature) * is htaccess available & writable? * is 404 redirection enabled (pro feature) #### Settings * redirect HTTP to HTTPS * fix mixed-content (pro) * enable HSTS * force secure cookies (pro) * cross-site scripting protection (pro) * expect CT header * X-Frame options * show WP Force SSL menu in admin bar * show WP Force SSL widget in admin dashboard #### SSL certificate testing tool WP Force SSL comes with an SSL certificate testing tool. It tests if the SSL certificate is valid, properly installed & up-to date. #### Need support? We’re here for you! Things get frustrating when they don’t work so make sure you [open a support topic](https://wordpress.org/support/plugin/wp-force-ssl/) in the official Force SSL forum. We answer all questions within a few hours! #### External Assets A big thank you to [SweetAlert2](https://sweetalert2.github.io/) authors which we use to make alerts nicer. And to [DepositPhotos](https://depositphotos.com/248496280/stock-illustration-online-payment-protection-system-concept.html) for the lovely header image. ## Screenshots * [[ * Built-in tests verify your SSL configuration * [[ * SSL settings * [[ * SSL certificate tester ## Installation 1. Open Plugins – Add New in WP admin and search for “WP Force SSL” 2. Install and activate the plugin 3. Open plugin settings via Settings – WP Force SSL 4. Check provided tests and settings ## FAQ ### Who is this plugin for? For anyone who has an SSL certificate installed on their site and wants to be sure all content is accessed (and redirected if needed) via a secure connection. ### Do I need an SSL certificate for this to work? Yes, you do need an SSL certificate. If you don’t have one you can buy [WP Force SSL PRO](https://wpforcessl.com/) which will generate an SSL certificate for free. ### After activating WP Force SSL, do I need to do anything else? No, nothing. After activating WP Force SSL, the main option “redirect SSL” will already be active. What you can do is use our tests to make sure everything related to SSL is working. ### How can I report security bugs? You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. [Report a security vulnerability.](https://patchstack.com/database/vdp/wp-force-ssl) ## Reviews ![](https://secure.gravatar.com/avatar/c8c26e76f9da13f792e391998e3d31016f7e2531d155eaee9d26076e1f032711? s=60&d=retro&r=g) ### 󠀁[Simple but effective for maintenance](https://wordpress.org/support/topic/simple-but-effective-for-maintenance/)󠁿 [w7ef2r6qjym5t968qxjp83drnpd68zfb28okr4azpv63p](https://profiles.wordpress.org/w7ef2r6qjym5t968qxjp83drnpd68zfb28okr4azpv63p/) December 30, 2025 Great and thanks! ![](https://secure.gravatar.com/avatar/2f8559753f56dc4d74d0bcad800a09fc4dbe86b134c0cd886749f5042ecd218c? s=60&d=retro&r=g) ### 󠀁[Free version is useless](https://wordpress.org/support/topic/free-version-is-useless-109/)󠁿 [Aidatün](https://profiles.wordpress.org/aidatun/) September 1, 2025 Free version only redirects http to https. That’s all. All other configuration options are PRO. ![](https://secure.gravatar.com/avatar/0db743f42c0fea111d679dca67cdf3d9cc5eb985dfadf4daa4c62b69ad3c0d89? s=60&d=retro&r=g) ### 󠀁[they are not given sl install on my website](https://wordpress.org/support/topic/they-are-not-given-sl-install-on-my-website/)󠁿 [akteotia](https://profiles.wordpress.org/akteotia/) May 12, 2025 bad plugin.. ![](https://secure.gravatar.com/avatar/0f283ba4b93ee8a2cc58ae51f6a72e39bd9ab72332a97bf4bb9cb63f26405b0a? s=60&d=retro&r=g) ### 󠀁[Free version won’t do mixed content fixes.](https://wordpress.org/support/topic/free-version-wont-do-mixed-content-fixes/)󠁿 [rogueeasyweb](https://profiles.wordpress.org/rogueeasyweb/) October 30, 2024 I feel like fixing mixed content should not be a “Pro” option. That’s essential. Just another bait and switch plugin. ![](https://secure.gravatar.com/avatar/df756494021c2843260a1d1360621e4c25d4caaa794f91315f8ee57f5968cd98? s=60&d=retro&r=g) ### 󠀁[Robots](https://wordpress.org/support/topic/robots-5/)󠁿 [artjoms](https://profiles.wordpress.org/artjoms/) September 17, 2024 ok ![](https://secure.gravatar.com/avatar/3b0d41417fd811227f83f8c5b2169b3387aa4eca18fbed1b76e61a9aca92ffa5? s=60&d=retro&r=g) ### 󠀁[Work great with localhost using laragon](https://wordpress.org/support/topic/work-great-with-localhost-using-laragon/)󠁿 [3xploiton3](https://profiles.wordpress.org/3xploiton3/) August 9, 2024 Simple doesnt push to dizzy setup [ Read all 179 reviews ](https://wordpress.org/support/plugin/wp-force-ssl/reviews/) ## Contributors & Developers “WP Force SSL & HTTPS SSL Redirect” is open source software. The following people have contributed to this plugin. Contributors * [ WebFactory ](https://profiles.wordpress.org/webfactory/) “WP Force SSL & HTTPS SSL Redirect” has been translated into 18 locales. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/wp-force-ssl/contributors) for their contributions. [Translate “WP Force SSL & HTTPS SSL Redirect” into your language.](https://translate.wordpress.org/projects/wp-plugins/wp-force-ssl) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/wp-force-ssl/), check out the [SVN repository](https://plugins.svn.wordpress.org/wp-force-ssl/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/wp-force-ssl/) by [RSS](https://plugins.trac.wordpress.org/log/wp-force-ssl/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### v1.68 * 2025/07/31 * minor code fixes #### v1.67 * 2024/06/07 * Security fixes #### v1.66 * 2024/03/26 * WordPress 6.5 and PHP 8.2 compatibility #### v1.65 * 2022/01/12 * added admin Dashboard widget #### v1.60 * 2021/12/28 * new GUI & features * PRO version available #### v1.57 * 2021/01/30 * added flyout menu #### v1.56 * 2020/09/30 * minor bug fixes * added promo for WP 301 Redirects PRO * 602,200 downloads; 100,000 installations #### v1.55 * 2020/01/22 * minor bug fixes * 384,400 downloads; 90,000 installations #### v1.5 * 2019/09/23 * complete rewrite of entire WP Force SSL plugin * added support for HSTS * 288,290 downloads; 80,000 installations #### v1.4 * Changed function naming to avoid conflicts reported by users. #### v1.3 * Dropping support for PHP 5.3: Only 15.9% of the people that use WordPress use PHP 5.3, it reached end of life and you should ask your host to upgrade. #### v1.2.1 * Fixed an issue where some users were getting a error message for no valid header when activating the plugin. #### v1.2 * Dropping support for PHP 5.2: Only 5.7% of the people that use WordPress use PHP 5.2, it’s old, buggy, and insecure. #### v0.1 * 2015/01/15 * initial release ## Meta * Version **1.68** * Last updated **4 months ago** * Active installations **90,000+** * WordPress version ** 4.6 or higher ** * Tested up to **6.9.4** * PHP version ** 5.2 or higher ** * Languages * [Arabic](https://ar.wordpress.org/plugins/wp-force-ssl/), [Bengali (Bangladesh)](https://bn.wordpress.org/plugins/wp-force-ssl/), [Dutch](https://nl.wordpress.org/plugins/wp-force-ssl/), [Dutch (Belgium)](https://nl-be.wordpress.org/plugins/wp-force-ssl/), [English (UK)](https://en-gb.wordpress.org/plugins/wp-force-ssl/), [English (US)](https://wordpress.org/plugins/wp-force-ssl/), [French (France)](https://fr.wordpress.org/plugins/wp-force-ssl/), [Galician](https://gl.wordpress.org/plugins/wp-force-ssl/), [German](https://de.wordpress.org/plugins/wp-force-ssl/), [Greek](https://el.wordpress.org/plugins/wp-force-ssl/), [Hungarian](https://hu.wordpress.org/plugins/wp-force-ssl/), [Italian](https://it.wordpress.org/plugins/wp-force-ssl/), [Russian](https://ru.wordpress.org/plugins/wp-force-ssl/), [Spanish (Chile)](https://cl.wordpress.org/plugins/wp-force-ssl/), [Spanish (Mexico)](https://es-mx.wordpress.org/plugins/wp-force-ssl/), [Spanish (Spain)](https://es.wordpress.org/plugins/wp-force-ssl/), [Spanish (Venezuela)](https://ve.wordpress.org/plugins/wp-force-ssl/), [Swedish](https://sv.wordpress.org/plugins/wp-force-ssl/), and [Ukrainian](https://uk.wordpress.org/plugins/wp-force-ssl/). * [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/wp-force-ssl) * Tags * [force ssl](https://co.wordpress.org/plugins/tags/force-ssl/)[https](https://co.wordpress.org/plugins/tags/https/) [mixed content](https://co.wordpress.org/plugins/tags/mixed-content/)[ssl](https://co.wordpress.org/plugins/tags/ssl/) [ssl certificate](https://co.wordpress.org/plugins/tags/ssl-certificate/) * [Advanced View](https://co.wordpress.org/plugins/wp-force-ssl/advanced/) ## Ratings 4.7 out of 5 stars. * [ 163 5-star reviews ](https://wordpress.org/support/plugin/wp-force-ssl/reviews/?filter=5) * [ 1 4-star review ](https://wordpress.org/support/plugin/wp-force-ssl/reviews/?filter=4) * [ 1 3-star review ](https://wordpress.org/support/plugin/wp-force-ssl/reviews/?filter=3) * [ 5 2-star reviews ](https://wordpress.org/support/plugin/wp-force-ssl/reviews/?filter=2) * [ 9 1-star reviews ](https://wordpress.org/support/plugin/wp-force-ssl/reviews/?filter=1) [Add my review](https://wordpress.org/support/plugin/wp-force-ssl/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/wp-force-ssl/reviews/) ## Contributors * [ WebFactory ](https://profiles.wordpress.org/webfactory/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/wp-force-ssl/)