JSM Force SSL
7,000+ active installs · Rated 5.0/5 · Updated October 15, 2026
A no-settings plugin that forces HTTP addresses to HTTPS using standard WordPress filters and 301 permanent redirects. Avoiding output buffering keeps it fast and compatible with page caching, and it understands proxy and load-balancer headers such as X-Forwarded-Proto. It suits sites that already have a working SSL certificate and want a simple, reliable switch. The plugin is free.
Pros
- No settings: activate and HTTP URLs become HTTPS
- Uses 301 redirects and filters instead of output buffering
- Honours X-Forwarded-Proto and X-Forwarded-Ssl proxy headers
Cons
- Does not change URLs stored in the database
- Only disabled through constants in wp-config.php
- Needs a site that already serves valid HTTPS
Topics: SSL plugins
Mentioned in
Alternatives
-
Really Simple SSL
3M+ active installs · Rated 4.9/5 · Updated September 15, 2026
A security plugin, formerly Really Simple SSL, that moves a site to HTTPS in one click and adds core hardening features.
-
HTTPS redirection
100,000+ active installs · Rated 4.2/5 · Updated October 12, 2026
A plugin, also listed as Easy HTTPS Redirection, that automatically sends visitors from HTTP pages to their secure HTTPS versions.
-
SSL Insecure Content Fixer
100,000+ active installs · Rated 4.8/5 · Updated September 6, 2026
A plugin that cleans up insecure content and mixed-content warnings on WordPress sites running over HTTPS.
-
One Click SSL
10,000+ active installs · Rated 4.9/5 · Updated June 19, 2026
A plugin that switches a WordPress site to HTTPS with a single click after checking that the server supports SSL.
-
SSL Secure Seal for WooCommerce
70+ active installs · Rated 4.0/5 · Updated November 11, 2017
A plugin that displays an SSL secure seal or custom trust badge on WooCommerce pages, especially near the checkout payment button.
-
Verve SSL
10+ active installs · Rated 4.0/5 · Updated June 21, 2019
A plugin that forces HTTPS for the WordPress login page and admin area, then switches back to plain HTTP after logging out.
-
Force HTTPS
A lightweight plugin from LittleBizzy that redirects HTTP pages to their HTTPS versions with no settings screen.