SSL Manager for WordPress
A WordPress SSL manager that checks HTTPS health, forces secure redirects, finds mixed content, and enables HSTS from wp-admin.
Get WordPress HTTPS right, from wp-admin
SSL Manager is the HTTPS control layer inside All-in-One WP Settings. Many sites install a certificate but still serve pages over http, leak insecure references, or never enable HSTS, which leaves browsers showing not-secure warnings and breaks the padlock. This module reviews your SSL and HTTPS health and certificate status, forces https with site-wide redirects, scans for mixed content, and lets you enable HSTS, all without editing core or theme files. The result is a clear, central place to review whether visitors reach your site over a secure connection. You work entirely from wp-admin, so there is no manual file editing to get HTTPS behaving correctly.
Best for: Site owners and agencies who have an SSL certificate in place but want to confirm HTTPS is enforced correctly, clear mixed-content warnings, and manage HSTS without touching code.
See SSL Manager in action
What you can do inside SSL Manager
- Review SSL and HTTPS health and certificate status in one place
- Force HTTPS with site-wide redirects from http to https
- Scan for mixed content across your pages and assets
- Find and rewrite insecure http references surfaced by the scanner
- Enable HSTS to tell browsers to use HTTPS by default
- Review your HTTPS redirect and certificate state from a single screen
- Manage everything from wp-admin without editing core or theme files
Why SSL Manager matters
Helps clear not-secure warnings
Forcing https and clearing mixed content helps browsers show a secure connection instead of not-secure notices that can erode visitor trust.
No code editing required
You enforce redirects, run the scanner, and enable HSTS from wp-admin, so you do not have to edit core or theme files to get HTTPS right.
One clear view of HTTPS health
Reviewing SSL and HTTPS health and certificate status in a single screen makes it easy to check that your site is serving over a secure connection.
How teams use SSL Manager
-
Enforce HTTPS after installing a certificate
Once your host has the certificate in place, turn on site-wide http to https redirects so every visitor lands on the secure version.
-
Clear mixed-content warnings
Run the scanner to find insecure http references in your content and assets, then rewrite them so the padlock stays intact.
-
Harden the connection with HSTS
Enable HSTS so returning browsers default to HTTPS, reducing the chance of an insecure first request.
-
Audit certificate and HTTPS status
Review SSL and HTTPS health and certificate status to confirm everything is configured the way you expect.
Good to know: The scanner surfaces issues, but some fixes depend on your environment or pairing with Replace Manager, and issuing or renewing the certificate itself is handled by your host, not this module.
SSL Manager FAQ
No. Issuing and renewing the certificate is handled by your host. SSL Manager helps you review certificate status and enforce HTTPS once a certificate is in place.
Yes. You can force HTTPS with site-wide redirects from http to https so visitors always reach the secure version.
The mixed-content scanner finds insecure http references in your pages and assets, and provides tools to rewrite them so browsers can show a secure connection.
HSTS tells browsers to use HTTPS by default for your site. You can enable HSTS directly from this module.
No. You manage everything from wp-admin without editing core or theme files.
Some fixes depend on your environment or are best handled by pairing with Replace Manager to rewrite insecure references across your content.
Yes — SSL Manager ships on every direct annual plan and every AppSumo lifetime tier. Tiers differ only by the number of live production domains you can run (1, 3, or 5), never by which modules you get.
SSL Manager is included on every plan
Every direct annual plan and AppSumo lifetime tier includes all 15 modules. Choose a plan, then activate SSL Manager on your sites.