SSL certificates and domain coverage

WP Encryption PRO guides WordPress administrators through generating and managing Let’s Encrypt SSL certificates. It automates domain verification, certificate installation and renewal. To set up a certificate, install and activate the WP Encryption add-on, register the site, then follow the certificate-generation process. After upgrading to PRO and activating the Pro add-on, renewal runs in the background 30 days before expiration without additional renewal configuration.

Wildcard certificates cover a primary domain and its subdomains. Automatic DNS-based verification for wildcard installation is available when DNS is managed by cPanel or GoDaddy. The plugin also supports multisite and mapped domains.

Generated SSL certificate, key and Intermediate certificate files can be downloaded for manual server installation. This option can fit specialized VPS or dedicated servers without cPanel. Manual installation involves modifying the server configuration through SSH access, as described in the product documentation.

HTTPS behavior and site options

After installing the certificate, you can force HTTPS sitewide with a one-click 301 htaccess redirection. A redirect-loop fix covers Cloudflare, StackPath, load balancers and reverse proxies. A mixed-content fixer helps address insecure content. The SSL Health page provides an SSL score and controls for HSTS strict transport security and secure cookies.

Security headers include X-XSS-Protection, X-Content-Type-Options and Referrer-Policy. Other settings can stop visitor enumeration, disable file editing, hide login errors and hide the WordPress version.

Login protection and monitoring

Login security includes passkeys powered by WebAuthn. Users can authenticate with passkeys protected by a browser or password manager. SSL monitoring sends an automatic email notification before certificate expiration.

Scheduled checks include daily vulnerability scanning and reporting, plus daily malware and integrity scans. The plugin also sends instant notifications for threats and security issues. Pro lists one-to-one priority support through live chat, email and a premium support forum, along with SSL installation help for non-cPanel websites.

Review HTTPS after installation

Once the certificate is installed, enable HTTPS sitewide and review the SSL Health settings. If a page still shows insecure content, check for HTTP assets loaded by themes, builders, CSS, JavaScript or external links. For Elementor content, use Elementor > Tools > Replace URL to replace the HTTP site address with its HTTPS version.