Force HTTPS
A lightweight plugin from LittleBizzy that redirects HTTP pages to their HTTPS versions with no settings screen. It also rewrites links and loads images, scripts and stylesheets over HTTPS to help prevent mixed-content warnings, and supports Multisite. It suits sites that already have an SSL certificate installed and want a one-click switch. The code is free on GitHub, while direct downloads and support come with a paid LittleBizzy membership.
Pros
- One small file with no settings to configure
- 301 redirect runs early on template_redirect
- Free, GPL licensed
Cons
- Last tested with WordPress 4.5.2
- Does not rewrite http links or mixed content
- wp-admin is covered only by the FORCE_SSL_ADMIN constant
Topics: SSL plugins
Mentioned in
Alternatives
-
Really Simple SSL
3M+ active installs · Rated 4.9/5 · Updated September 15, 2026
A security plugin, formerly Really Simple SSL, that moves a site to HTTPS in one click and adds core hardening features.
-
HTTPS redirection
100,000+ active installs · Rated 4.2/5 · Updated October 12, 2026
A plugin, also listed as Easy HTTPS Redirection, that automatically sends visitors from HTTP pages to their secure HTTPS versions.
-
SSL Insecure Content Fixer
100,000+ active installs · Rated 4.8/5 · Updated September 6, 2026
A plugin that cleans up insecure content and mixed-content warnings on WordPress sites running over HTTPS.
-
One Click SSL
10,000+ active installs · Rated 4.9/5 · Updated June 19, 2026
A plugin that switches a WordPress site to HTTPS with a single click after checking that the server supports SSL.
-
JSM Force SSL
7,000+ active installs · Rated 5.0/5 · Updated October 15, 2026
A no-settings plugin that forces HTTP addresses to HTTPS using standard WordPress filters and 301 permanent redirects.
-
SSL Secure Seal for WooCommerce
70+ active installs · Rated 4.0/5 · Updated November 11, 2017
A plugin that displays an SSL secure seal or custom trust badge on WooCommerce pages, especially near the checkout payment button.
-
Verve SSL
10+ active installs · Rated 4.0/5 · Updated June 21, 2019
A plugin that forces HTTPS for the WordPress login page and admin area, then switches back to plain HTTP after logging out.