WP Force SSL & HTTPS SSL Redirect icon

WP Force SSL & HTTPS SSL Redirect

by WebFactory

View on WordPress.org
84 Quality Score
Active Installs
22/30

With 90,000 active installs it has a solid user base, though it sits well behind category leaders like Really Simple SSL at 3 million.

Update Freshness
25/25

Last updated in May 2026 and tested with WordPress 7.0, so maintenance is current and active.

User Rating
14/15

A 94 out of 100 from 179 reviewers is a strong approval rating, indicating most users are happy with the result.

Support Health
8/15

Zero support threads and zero resolutions is technically a perfect track record, but it also means there is essentially no public support community to lean on if something breaks.

WP Compatibility
15/15

Requires PHP 5.2 and WordPress 4.6, making it compatible with virtually any WordPress environment still running today.

Scores higher than 93% of indexed plugins

About

Enable SSL & HTTPS redirect with 1 click! Add SSL certificate & WP Force SSL to redirect site from HTTP to HTTPS & fix SSL errors.

Active Installs 80k+
Rating ★★★★½ 4.7/5
Last Updated 2026-08-16 7:53pm GMT
Requires WordPress 4.6+
Tested Up To 7.1
Requires PHP 5.2+

Security History

1 known vulnerability, all patched
1 Medium

Most recent: June 7, 2024

View details ▸

Powered by Wordfence Intelligence

What It Does

WP Force SSL & HTTPS SSL Redirect handles the server-level redirect from HTTP to HTTPS on your WordPress site, forcing every page load through a secure connection. It also includes a mixed content fixer to clean up any insecure elements (images, scripts, styles) that may still load over HTTP after migration. In practice it is a one-click toggle that gets a site onto SSL without manual .htaccess edits.

Who It's For

This plugin is a good fit for small business owners running sites like local clinics, law firms, subscription services, or e-commerce stores that need a quick HTTPS fix without touching server config files. It suits users on shared hosting who want a simple, set-and-forget redirect tool rather than a full security suite. It is most appropriate for sites where HTTPS is already provisioned at the host but traffic is not consistently redirecting.

Who Should Skip It

If you already use Really Simple Security (formerly Really Simple SSL) or your host provides HTTPS redirect at the server level, this plugin is redundant. Anyone running a complex multisite network or needing deeper security hardening (firewall, login protection, vulnerability scanning) should look at a broader security plugin instead.

The Bottom Line

WP Force SSL delivers a focused, narrowly scoped tool that does one thing well, with a strong rating and active maintenance in 2026. The lack of any support threads is a double-edged sword: there is no track record of problems, but no community help either. For a simple, no-frills HTTPS redirect on a small site, it is a reasonable choice, though most users will be better served by Really Simple Security given its larger install base and ongoing support.

Tags

force ssl https mixed content ssl ssl certificate