WP Encryption – One Click SSL / HTTPS & Free SSL Certificate, HTTPS Redirect, Security vs Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

HTTPS Secure your WordPress site with SSL certificate provided by Let’s Encrypt® and force HTTPS / SSL sitewide, check your SSL score, fix insecure content & mixed content issues easily. Enable HTTPS secure padlock on your site within minutes. 5M+ SSL certificates generated – Switch to HTTPS easily WP Encryption plugin registers your site, verifies your domain, generates SSL certificate for your site in simple mouse clicks without the need of any technical knowledge. A typical SSL installation without WP Encryption would require you to generate CSR, prove domain ownership, provide your bussiness data and deal with many more technical tasks!. PRO FEATURES WORTH UPGRADING Automatic domain verification Automatic SSL certificate installation Automatic SSL renewal (Auto renews SSL certificate 30 days prior to expiry date) Wildcard SSL support – Install Wildcard SSL certificate for your primary domain that covers ALL sub-domains. Automatic DNS based domain verification for Wildcard SSL installation (DNS should be managed by cPanel or Godaddy) Multisite + Mapped domains support – Supports SSL installation for mapped domains Advanced security headers & SSL monitoring Top notch one to one priority support – Live Chat, Email, Premium Support Forum SSL installation help for non-cPanel sites Login security via passkeys (powered by WebAuthn) – No passwords. No brute force. Log in with passkeys protected by your browser or password manager — fast, secure, and frictionless. Automated daily vulnerability scanning & reporting. Automated daily malware & integrity scan Instant notification for threats & security issues BUY PREMIUM VERSION FREE SSL PLUGIN FEATURES Unlock every premium feature other plugins charge for — absolutely Free. Verify domain ownership and generate free SSL certificate Secure webmail and email with HTTPS Download generated SSL certificate, key and Intermediate certificate files Force HTTPS / Enable HTTPS with 301 htaccess redirection sitewide in one click HTTPS redirection includes redirect loop fix for Cloudflare, StackPath, Load balancers and reverse proxies. SSL Health page – Track your SSL score and control various SSL & Security features like HSTS strict transport security Header, HttpOnly secure cookies, etc,. Enable important security headers including X-XSS-Protection, X-Content-Type-Options, Referrer-Policy Enable mixed content / insecure content fixer SSL monitoring & Automatic email notification prior to SSL certificate expiration Advanced security features – stop user enumeration, disable file editing, hide login error, hide wp version and much more Security score & security scanners including malware & integrity scanner, vulnerability scanner. (Optional) Running WordPress on a specialized VPS/Dedicated server without cPanel? You can download the generated SSL certificate files easily via “Download SSL Certificates” page and install it on your server by modifying server config file via SSH access as explained in our DOCS. (7.8.6.0) PASSKEY LOGIN SECURITY Introducing ‘Login Security – Passkeys’ page – Enable passwordless biometric login powered by WebAuthn. Register secure passkey via profile page and enjoy seamless login experience without the need of remembering any password. (7.8.0) NEW ADVANCED SECURITY PAGE WITH INTEGRITY SCAN & MALWARE SCAN Discover the brand-new ‘Advanced Security & Scanner’ page — your command center for the most powerful protection your WordPress site has ever seen. Run malware and integrity scans to detect modified, additional, or suspicious files in your installation. Stay ahead of threats and keep your security score at its peak. ADVANCED HTTPS SECURITY HEADERS Safeguard your site from cross-site scripting attacks, clickjacking, MIME sniffing attacks. Enable HTTPS Strict Transport Security Header to avoid request protocol downgrading Disable directory listing to avoid directory traversing Enable X-XSS protection, secure cookies, X-Content-Type-Options to avoid cross site scripting and MIME sniffing Force HTTPS with 301 redirect One click enable HTTP to HTTPS redirection via FORCE HTTPS page if you already have valid SSL certificate installed on site. We highly recommend using Force HTTPS via htaccess method to enable server level faster redirection, use Force HTTPS via WordPress method only if you are using Cloudflare or other reverse proxies. Also, make sure to enable important security headers and implement advanced SSL features from the SSL Health page. Switch to HTTPS in seconds Secure HTTPS browser padlock in minutes. Free domain validated (DV) SSL certificates are provided by Let’s Encrypt (A non profit Global certificate Authority). SSL encryption ensures protection against man-in-middle attacks by securely encrypting the data transfer between client and your server. Optimized for Cloudflare and Reverse Proxies Forcing HTTPS using the .htaccess method prevents redirect loops when your site is behind Cloudflare. Compatible with reverse proxies and load balancers — avoids redirection conflicts. Top Reasons Your WordPress Site Needs an SSL Certificate SEO Benefit: Major search engines like Google ranks SSL enabled sites higher compared to non SSL sites. Thus bringing more organic traffic for your site. Data Encryption: Data transmission between server and visitor are securely encrypted on a SSL site thus avoiding any data hijacks in-between the transmission(Ex: personal information, credit card information). Trust: Google chrome shows non-SSL sites as ‘insecure’, bringing a feel of insecurity in website visitors. Authentic: HTTPS green padlock represents symbol of trust, authenticity and security. REQUIREMENTS Linux hosting, OpenSSL, CURL, allow_url_fopen should be enabled. Translations Many thanks to the generous efforts of our translators. If you would like to translate plugin to your language, Feel free to sign up and start translating! LOVE WP ENCRYPTION SSL PLUGIN? If you find this plugin useful, please leave a positive review. Your reviews are our biggest motivation for further development of plugin. Disclaimer WP Encryption uses SSLLabs API for SSL scan & detection. By using the plugin, you agree to terms & conditions of SSLLabs By enabling the Vulnerability Scan feature, you agree to terms & conditions of WPVulnerability Database API. The information provided by the information database comes from different sources that have been reviewed by third parties. There is no liability of any kind for the information. Security is an important subject regarding SSL/TLS certificates, of course. It is obvious that your private key, stored on your web server, should never be accessible from the web. When the plugin created the keys directory for the first time, it will store a .htaccess file in this directory, denying all visitors. Always make sure yourself your keys aren’t accessible from the web! We are in no way responsible if your private keys go public. If this does happen, the easiest solution is to check folder permissions on your server and make sure public access is forbidden for root folders. Next, create a new certificate.

Compress images, optimize images, and enable image lazy load automatically with the powerful Smush image optimizer to keep your WordPress site fast, without losing quality. Smush makes it easy to optimize images, compress images, and deliver images faster across your entire WordPress site. This all-in-one image optimizer automatically reduces image file sizes, enables image lazy load, and serves modern formats like WebP and AVIF, all without breaking image quality or adding extra work. Whether you’re running a blog, store, or portfolio, Smush helps you optimize images at scale and keep your site fast with a trusted WordPress image optimizer. Trusted by 1+ Million Sites | 4.8/5 Star Rating Get everything you need to optimize images and speed up your site. Smush works out of the box with no complicated setup – just install and let it handle the rest. Compress images without losing quality Reduce image file size automatically while keeping your images sharp and clear. Smush is an easy-to-use image optimizer which let’s you compress images using both lossless and lossy compression, giving you the best balance of quality and performance without extra work. You can also compress images outside the media library using Directory Smush, making it easy to optimize images stored in theme folders, plugins, or other directories on your server. Lazy load images for faster pages Enable image lazy load across your site so images load only when needed. This image optimizer improves initial page speed and creates a smoother experience for visitors without extra configuration. Serve WebP and AVIF images automatically (PRO) Convert images to WebP and AVIF and serve them automatically to supported browsers. Smush helps you optimize images using next-gen formats to reduce file size and improve load times across your WordPress site. Deliver images faster with an Image CDN (PRO) Serve images through a global image CDN to reduce latency and improve load times for visitors around the world. 119 global CDN servers Up to 500 GB of bandwidth Faster image delivery based on visitor location Improved performance for image-heavy and high-traffic sites Automatically resize and fix image dimensions (PRO) Eliminate common PageSpeed warnings and improve layout stability with automatic image sizing. Smush dynamically resizes images to perfectly fit their containers, regardless of original size, helping fix the “Properly size images” warning in Google PageSpeed Insights. It also automatically adds missing width and height attributes to your images, improving rendering speed and reducing layout shifts. This helps you meet the “Ensure images have explicit width and height” recommendation without any manual work. Optimize your entire site, automatically Smush works across your whole site as a powerful image optimizer to optimize images as you upload them and maintain performance over time without manual work. Optimize images automatically on upload Compress images in bulk or individually Works with your existing media library No need to re-upload images Enable image lazy load across your site Convert images to WebP and AVIF Deliver images with an integrated image CDN Automatically resize and serve correctly sized images Optimize images outside the media library with Directory Smush Built for performance Smush improves page speed and overall performance by reducing image weight and improving how images are delivered. Reduce page load times Improve user experience Better performance for image-heavy pages Supports image lazy load and preload images (PRO) for faster perceived performance Works with your existing setup Smush is built to work with your current WordPress setup, including popular themes, page builders, and plugins. Compatible with Gutenberg, Elementor, WPBakery, and more Works with WooCommerce stores No need to change your workflow Easy to enable and configure Designed to be simple You don’t need to be a performance expert to optimize images with Smush image optimizer. Works out of the box Simple settings when you need them No technical knowledge required Safe to use on any site Why choose Smush? There are plenty of image optimization plugins, but Smush focuses on making it easy to optimize images, compress images, and improve performance without complexity. As a leading WordPress image optimizer, Smush gives you powerful optimization tools without the technical hassle. Trusted by over 1 million WordPress users Built specifically for WordPress Regular updates and improvements Backed by the WPMU DEV team Get started in minutes Install Smush, activate it, and start to compress images, optimize images, and enable image lazy load right away. This easy-to-use image optimizer helps most sites see improvements immediately without changing how they upload or manage images. About Us WPMU DEV is a premium supplier of quality WordPress plugins, services and support. Learn more here: https://wpmudev.com/ Don’t forget to stay up to date on everything WordPress from the Internet’s number one resource: WPMU DEV Blog Hey, one more thing… we hope you enjoy our free offerings as much as we’ve loved making them for you! Contact and Credits Originally written by Alex Dunae at Dialect (dialect.ca, e-mail ‘alex’ at ‘dialect dot ca’), 2008-11.