Really Simple SSL

Wordpress Plugin
Download latest - 2.1.x



Download Stats

Today 47
Yesterday 9,084
Last Week 47,039
All Time 4,437,269
Banner 772x250

Really Simple SSL automatically detects your settings and configures your website to run over https. To keep it lightweight, the options are kept to a minimum. The entire site will move to SSL.

Three simple steps for setup:

  • Get an SSL certificate (can't do that for you, sorry.) See our recommendations for a free SSL certificate.
  • Activate this plugin
  • Enable SSL with one click

Always backup before you go! If you do not have a sound backup policy, start having one! See our recommendations.

Any code suggestions? We're on GitHub as well!

Love Really Simple SSL?

Hopefully this plugin saves you some hours of work. If you want to support the continuing development of this plugin, you might consider buying the premium, which includes some cool features.

Pro features

* The mixed content scan, which shows you what you have to do if you don't have the secure lock yet * The option to enable HTTP Strict Transport Security * The option to configure your site for the HSTS preload list * Advanced security headers for additional security * Mixed Content Fixer for the back-end * More detailed feedback on the configuration page * Certificate expiration check: get an email when your SSL certificate is about to expire * Premium support

What does the plugin actually do

  • The plugin handles most issues that WordPress has with SSL, like when you're behind a reverse proxy/loadbalancer, or when no headers are passed which WordPress can use to detect SSL.
  • All incoming requests are redirected to https. Default with an internal WordPress redirect, but you can also enable a .htaccess redirect.
  • The siteurl and homeurl are changed to https.
  • Your insecure content is fixed by replacing all http:// URL's with https://, except hyperlinks to other domains. Dynamically, so no database changes are made (except for the siteurl and homeurl).

Check out other plugins developed by Really Simple Plugins as well: Complianz, Zip Recipes and WP Search Insights.

contact me if you have any questions, issues, or suggestions. Really Simple SSL is developed by Really Simple Plugins.

Like to have this plugin in your language?

Translations can be added very easily here. If you do, I can get you added as translation editor to approve the translations.

Releases (24 )

Version Release Date Change Log
3.3.3 2020-05-18
  • Dismiss review notice now uses get variable to dismiss it
3.3.2 2020-05-08
  • Added a notice when using Divi theme with a link to knowledge base instructions
  • Fixed a CSS issue where the active tab in setting didn't have an active color
  • Added an additional option to dismiss the review notice
  • Removed review notice capability check
  • Fixed a bug on multisite where a plusone was shown when it should only shown on non-multisite
  • Added prefix to uses_elementor() function and added checks if function_exists
3.3.1 2020-04-09
  • Fixed a typo in the backup link
  • Added instructions on how to add a free SSL certificate
3.3 2020-03-19
  • Updated SSL activated notice
  • Updated readme
3.2.6 2019-10-15
  • Optimized plusone count function
  • Disabled Javascript redirect by default
  • Fixed a bug in the setting highlight function where an undefined setting name could cause a warning
3.2.5 2019-08-20
  • Fixed type in trace_log() function call
3.2.4 2019-08-20
  • Improved and added dashboard notices
  • Improved debug logging
  • Added option to dismiss all Really Simple SSL notices
  • Fixed a bug where other plugins buttons had their style reset
3.2.3 2019-07-09
  • Added right-to-left text support
  • Show a plusone behind the notice that generated it
  • Added a dismiss text link to dismissible notices
  • Added highlighting to .htaccess redirect option after clicking on dashboard link
  • Added option to dismiss all notices
  • Added site health notice
3.2.2 2019-06-14
  • Fix: some single sites setup were having issues with multisite files being include.
3.2.1 2019-06-14
  • Fix: fixed a bug in the regex pattern to update existing update count
3.2 2019-06-14
  • Added update counter to Settings/SSL menu item if recommended settings aren't enabled yet
  • Added WP-CLI support
  • Tweak: made some dashboard items dismissible
  • Tweak: added link on multisite networkwide activation notice to switch function hook to fix conversions hanging on 0%
  • Tweak: required WordPress version now 4.6 because of get_networks() version
3.1.5 2019-05-03
  • Fix: fixed a bug where having an open_basedir defined showed PHP warnings when using htaccess.conf
3.1.4 2019-03-04
  • Tweak: added support for Bitnami/AWS htaccess.conf file
  • Tweak: multisite blog count now only counts public sites
  • Tweak: changed rewrite rules flush time to 1-5 minutes
  • Tweak: improved multisite site count
3.1.3 2018-12-06
  • Tweak: no longer shows notices on Gutenberg edit screens
  • Tweak: updated Google Analytics with link to SSL settings page
  • Fix: multisite blog count now only counts public sites
3.1.2 2018-11-09
  • Tweak: added cool checkboxes
  • Tweak: .well-known/acme-challenge/ is excluded from .htaccess https:// redirect
  • Tweak: implemented transients for functions that use curl/wp_remote_get()
  • Tweak: improved mixed content fixer detection notifications
  • Tweak: removed review notice for multisite
3.1.1 2018-10-12
  • Fix: Multisite network wide activation/deactivation cron not saving settings because user capability not set this early in the process.
3.1 2018-10-12
  • Fix: fixed a bug in certificate detection
  • Tweak: added HTTP_X_PROTO as supported header
  • Tweak: split HTTP_X_FORWARDED_SSL into a variation which can be either '1' or 'on'
  • Tweak: improved certificate detection by stripping domains of subfolders.
  • Tweak: Multisite bulk SSL activation now chunked in 200 site blocks, to prevent time out issues on large multisite networks.
  • Tweak: a 'leave review' notice for new free users
3.0.5 2018-07-22
  • Fix: untranslatable string made translatable.
3.0.2 2018-06-20
  • Fix: fixed an image containing uppercase characters, which can lead to the image not showing on some servers.
  • Fix: fixed an issue where the 'data-rsssl=1' marker wasn't inserted when the tag was empty.
3.0.1 2018-06-08
  • Tweak: Add privacy notice
  • Tweak: Set javascript redirect to false by default
  • Fix: Hide SSL notice on multisite for all subsites, and show only for "activate_plugins" cap users
2.5.26 2018-03-09
  • Fix: multisite menu not showing when main site is not SSL.
  • Fix: the admin_url and site_url filter get an empty blog_id when checking the URL for the current blog.
  • Tweak: added comment to encourage backing up to activation notice.
  • Tested the plugin with Gutenberg.
2.5.25 2018-02-08
  • Fix: "switch mixed content fixer hook" option not visible on the multisites settings page
  • Tweak: several typo's and uppercasing
2.5.24 2017-12-07
  • Fix: On multisite, admin_url forced current blog URL's over http even when the current blog was loaded over https. This will now only force http for other blog_urls than the current one, when they are on http and not https.
2.5.23 2017-11-16
  • Tested up to WP 4.9
  • Added secure cookie notice