WP Encryption: Easy SSL / HTTPS & Free SSL certificate, HTTPS redirect

Descripción

HTTPS Secure your WordPress site with SSL certificate provided by Let’s Encrypt® and force HTTPS / SSL sitewide, check your SSL score, fix insecure content & mixed content issues easily. Enable HTTPS secure padlock on your site within minutes.

5M+ SSL certificates generated – Switch to HTTPS easily

WP Encryption plugin registers your site, verifies your domain, generates SSL certificate for your site in simple mouse clicks without the need of any technical knowledge. A typical SSL installation without WP Encryption would require you to generate CSR, prove domain ownership, provide your bussiness data and deal with many more technical tasks!.

PRO FEATURES WORTH UPGRADING

• Automatic domain verification
• Automatic SSL certificate installation
• Automatic SSL renewal (Auto renews SSL certificate 30 days prior to expiry date)
• Wildcard SSL support – Install Wildcard SSL certificate for your primary domain that covers ALL sub-domains. Automatic DNS based domain verification for Wildcard SSL installation (DNS should be managed by cPanel or Godaddy)
• Multisite + Mapped domains support – Supports SSL installation for mapped domains
• Advanced security headers & SSL monitoring
• Top notch one to one priority support – Live Chat, Email, Premium Support Forum
• SSL installation help for non-cPanel sites
• Login security via passkeys (powered by WebAuthn) – No passwords. No brute force. Log in with passkeys protected by your browser or password manager — fast, secure, and frictionless.
• Automated daily vulnerability scanning & reporting.
• Automated daily malware & integrity scan
• Instant notification for threats & security issues

BUY PREMIUM VERSION

FREE SSL PLUGIN FEATURES

• Unlock every premium feature other plugins charge for — absolutely Free.
• Verify domain ownership and generate free SSL certificate
• Secure webmail and email with HTTPS
• Download generated SSL certificate, key and Intermediate certificate files
• Force HTTPS / Enable HTTPS with 301 htaccess redirection sitewide in one click
• HTTPS redirection includes redirect loop fix for Cloudflare, StackPath, Load balancers and reverse proxies.
• SSL Health page – Track your SSL score and control various SSL & Security features like HSTS strict transport security Header, HttpOnly secure cookies, etc,.
• Enable important security headers including X-XSS-Protection, X-Content-Type-Options, Referrer-Policy
• Enable mixed content / insecure content fixer
• SSL monitoring & Automatic email notification prior to SSL certificate expiration
• Advanced security features – stop user enumeration, disable file editing, hide login error, hide wp version and much more
• Security score & security scanners including malware & integrity scanner, vulnerability scanner.

(Optional) Running WordPress on a specialized VPS/Dedicated server without cPanel? You can download the generated SSL certificate files easily via «Download SSL Certificates» page and install it on your server by modifying server config file via SSH access as explained in our DOCS.

(7.8.6.0) PASSKEY LOGIN SECURITY

Introducing ‘Login Security – Passkeys’ page – Enable passwordless biometric login powered by WebAuthn. Register secure passkey via profile page and enjoy seamless login experience without the need of remembering any password.

(7.8.0) NEW ADVANCED SECURITY PAGE WITH INTEGRITY SCAN & MALWARE SCAN

Discover the brand-new ‘Advanced Security & Scanner’ page — your command center for the most powerful protection your WordPress site has ever seen. Run malware and integrity scans to detect modified, additional, or suspicious files in your installation. Stay ahead of threats and keep your security score at its peak.

ADVANCED HTTPS SECURITY HEADERS

Safeguard your site from cross-site scripting attacks, clickjacking, MIME sniffing attacks.

• Enable HTTPS Strict Transport Security Header to avoid request protocol downgrading
• Disable directory listing to avoid directory traversing
• Enable X-XSS protection, secure cookies, X-Content-Type-Options to avoid cross site scripting and MIME sniffing

Force HTTPS with 301 redirect

One click enable HTTP to HTTPS redirection via FORCE HTTPS page if you already have valid SSL certificate installed on site. We highly recommend using Force HTTPS via htaccess method to enable server level faster redirection, use Force HTTPS via WordPress method only if you are using Cloudflare or other reverse proxies. Also, make sure to enable important security headers and implement advanced SSL features from the SSL Health page.

Cambia a HTTPS en segundos

• Secure HTTPS browser padlock in minutes.

• Los certificados SSL gratuitos de dominio validado (DV) son proporcionados por Let’s Encrypt (una autoridad global de certificación sin ánimo de lucro).

• SSL encryption ensures protection against man-in-middle attacks by securely encrypting the data transfer between client and your server.

Optimized for Cloudflare and Reverse Proxies

• Forcing HTTPS using the .htaccess method prevents redirect loops when your site is behind Cloudflare.

• Compatible with reverse proxies and load balancers — avoids redirection conflicts.

Top Reasons Your WordPress Site Needs an SSL Certificate

1. Ventajas SEO: Los principales motores de búsqueda, como Google, clasifican más alto los sitios con SSL activado en comparación con los sitios que no son SSL. Por lo que traen más tráfico orgánico a tu sitio.

2. Cifrado de datos: La transmisión de datos entre el servidor y el visitante es cifrado de forma segura en un sitio SSL, evitando así cualquier secuestro de datos entre la transmisión (Por ejemplo, información personal, información de la tarjeta de crédito).

3. Confianza: Google Chrome muestra los sitios que no son SSL como «no seguros», lo que genera una sensación de inseguridad en los visitantes de la web.

4. Autenticidad: El candado verde HTTPS representa un símbolo de confianza, autenticidad y seguridad.

REQUISITOS

Linux hosting, OpenSSL, CURL, allow_url_fopen should be enabled.

Traducciones

Muchas gracias a los generosos esfuerzos de nuestros traductores.

If you would like to translate plugin to your language, Feel free to sign up and start translating!

LOVE WP ENCRYPTION SSL PLUGIN?

If you find this plugin useful, please leave a positive review. Your reviews are our biggest motivation for further development of plugin.

Exención de responsabilidad

Let’s Encrypt™ is a trademark of the Internet Security Research Group. All rights reserved.

WP Encryption uses SSLLabs API for SSL scan & detection. By using the plugin, you agree to terms & conditions of SSLLabs

By enabling the Vulnerability Scan feature, you agree to terms & conditions of WPVulnerability Database API. The information provided by the information database comes from different sources that have been reviewed by third parties. There is no liability of any kind for the information.

La seguridad es un tema importante respecto a los certificados SSL/TLS, por supuesto. Es obvio que tu clave privada, almacenada en tu servidor web, nunca debe ser accesible desde la web. Cuando el plugin cree el directorio de claves por primera vez, almacenará un archivo .htaccess en este directorio, rechazando a todos los visitantes. ¡Asegúrate siempre de que tus claves no sean accesibles desde la web! No nos hacemos responsables de ningún modo si tus claves privadas se hacen públicas. Si esto ocurre, la solución más fácil es comprobar los permisos de las carpetas en tu servidor y asegurarte de que el acceso público está prohibido para las carpetas raíz. A continuación, crea un nuevo certificado.