WP Encrypt is an easy-to-use client for the new Let’s Encrypt service which provides free SSL certificates for everyone. No reason to have an unprotected WordPress site any longer! 
Using the plugin, you can quickly acquire a new certificate for your site. Once you have registered and received a certificate, you can switch your site to HTTPS. 
The Let’s Encrypt service only provides certificates that are valid for 90 days. However, you can always renew them – no limitations there. And with this plugin you don’t even need to worry about that, the plugin will automatically renew existing certificates before they expire (as long as you want it to).
The plugin is fully compatible with Multisite and Multinetwork. In a Multisite it will take care of generating the certificate for all sites in the network. In a Multinetwork you will additionally have the option to generate the certificate for all sites in all networks. 
This plugin requires you to run at least PHP 5.3 on your server. You also need to have the
OpenSSL extensions active. Please check with your hosting provider if you’re not sure whether your server meets these requirements or how to set them up. You also need to be able to adjust the server configuration to use the certificate the plugin obtains.
If you don’t have permissions to modify the server configuration, you might be able to still use the certificates if your host provides an interface to upload your own SSL certificates. In that case you can simply upload the generated certificate files there.
 Almost no reason. You still need to be able to access and modify your server configuration to set up SSL and use the certificate the plugin obtained for you.
 The plugin does not automatically change your site to HTTPS. It obtains and the SSL certificate, but you still need to adjust your server configuration and change your site’s URL setting to use HTTPS. As a guide, you can follow this WP Beginner tutorial for example.
 The plugin currently generates the certificate for the entire setup in one step. Therefore it is most likely to fail on large setups with a huge amount of sites. This is the first thing on the list to be improved in a later version though.
The core of this plugin is mostly a rewrite of analogic/lescript, a PHP client for Let’s Encrypt. The plugin’s implementation includes fixes to work properly in WordPress, plus it provides some enhancements over the original client, like a reusable class hierarchy.
As a regular plugin
- Upload the entire
wp-encryptfolder to the
/wp-content/plugins/directory or download it through the WordPress backend.
- Activate the plugin through the ‘Plugins’ menu in WordPress (in a Multisite it can only be network-activated).
As a must-use plugin
If you don’t know what a must-use plugin is, you might wanna read its introduction in the WordPress Codex – don’t worry, that’s nothing purely for developers.
- Upload the entire
wp-encryptfolder to the
/wp-content/mu-plugins/directory (create the directory if it doesn’t exist).
- Move the file
/wp-content/mu-plugins/wp-encrypt/wp-encrypt.phpout of its directory to
Note that, while must-use plugins have the advantage that they cannot be disabled from the admin area, they cannot be updated through WordPress, so you’re recommended to keep them up to date manually.
- How do I use the plugin?
After plugin activation you will find a new admin page in the Settings menu where you can register, generate, renew and revoke certificates for your WordPress site. In a Multisite, this menu is not located in the regular admin, but in the network admin, and it will work for all sites in the network. On the admin page you will find a help tab on top which provides further information on how to get started.
- Why can’t I save the certificate?
The problem might be that WordPress is unable to write the certificate and save it on your server. By default WordPress needs to be able to write to the directories
.well-known(both paths are relative to the site’s root directory). If WordPress cannot write to these locations, it will show a warning on the plugin’s settings page, and you will be asked to enter your filesystem credentials when necessary. However, note that in this case automatically renewing the certificate is not possible (you will have to do it manually then).
- How can I change the location where the keys and certificates are being stored?
To change the directories where the certificates are being stored, please define a constant called
WP_ENCRYPT_SSL_CERTIFICATES_DIR_PATHcontaining the desired path in your
wp-config.php. This will override the default location. Note that if you change this after you have already registered a Let’s Encrypt account / generated a certificate, you need to start over with this process.
- I have obtained my certificate, but my site is still regular HTTP!
The plugin only acts as a connection between your WordPress site and Let’s Encrypt – it is used to obtain the certificate. WordPress cannot modify your server configuration to use it, that’s why you need to take care of it yourself. However, you will find basic instructions in the plugin. After adjusting your server configuration, you also need to switch your site to HTTPS.
- Something seems wrong and I would like to reset. How can I do that?
The plugin allows you to completely reset it. This will delete all certificates and keys created by the plugin. You must not reset the plugin while your server is using any of those files – if you need to reset, first unassign the certificates in your server configuration. Because the reset functionality is a critical area, it is hidden by default. You can enable it by defining a constant
WP_ENCRYPT_ENABLE_DANGER_ZONEand set it to true. After having done so, you will see a new section called “Danger Zone” on the settings page.
- Where should I submit my support request?
I preferably take support requests as issues on Github, so I would appreciate if you created an issue for your request there. However, if you don’t have an account there and do not want to sign up, you can of course use the wordpress.org support forums as well.
- How can I contribute to the plugin?
If you’re a developer and you have some ideas to improve the plugin or to solve a bug, feel free to raise an issue or submit a pull request in the Github repository for the plugin.
You can also contribute to the plugin by translating it. Simply visit translate.wordpress.org to get started.
Specially for multisite a real lifesaver 🙂
Many, many thanks!
A ferramenta mais complesta para ativar SSL no seu site WP.
Installed this on a Godaddy wordpress site. I found the instructions in the plugin to be a bit more complicated than required. Once you generate the certificates from the plugin then you can past the cert.pem and private.pem into the SSL/TLS manager in CPANEL. The instructions to edit the apache files as identified in the plugin weren’t required. Recommend this plugin even though it’s a Beta.
This plugin is exactly what I’ve been looking for to easily switch my sites to HTTPS. It has worked great on single installs, but I haven’t yet been able to get it to work on multi-site WP. Hopefully, the developer will get around to that soon.
Falta um guia de instalação… o certificado saiu em nome de meu Host ► Hostgator… e deu tudo errado…
After I activated WP Encrypt I was contacted by my hosting company with the following message :-
A script on your website, WP/wp-content/plugins/wp-encrypt/inc/WPENC/Core/Util.php – line 329 – is trying to ‘walk’ the servers file system, causing a massive amount of security exceptions.
A customers website is not allowed to attempt to access folders outside of their folder, and this needs to be removed or resolved asap.
Further to that I discovered that 1,000-2,000 lines per second was being added to my server log due to all the access violation error messages from what this Plug In was doing. Dodgy. Now uninstalled never to be used again.
Colaboradores y desarrolladores
“WP Encrypt” es un software de código abierto. Las siguientes personas han colaborado con este plugin.Colaboradores
Registro de cambios
- Added: New filter
wpenc_addon_domainsallows filtering the domains to generate the certificate for
- Enhanced: If an account has already been registered, the plugin will now fetch the details instead of failing
- Enhanced: Let’s Encrypt API errors are now being printed out for more transparent errors
cURL error 3: malformeddoes not happen anymore on WordPress 4.6
- Fixed: use new Multisite functions for WordPress 4.6
- Added: a link to the Let’s Encrypt Subscriber Agreement is now displayed in the admin interface
- Fixed: plugin now supports using the latest Let’s Encrypt Subscriber Agreement from August 1st, 2016
- Added: plugin main class instance can now easily be accessed via a
- Enhanced: the admin class instance is now publicly accessible through a
- Enhanced: the admin screen and form POST urls are now managed by single dedicated methods respectively and can be filtered
- Fixed: use
wp_remote_get()for challenge self check to be more error-prone
- Added: a reset functionality has been introduced including UI (hidden by default)
- Enhanced: error messages provide more detail about what exactly went wrong
- Tweaked: updated the plugin initialization library to be compatible with WordPress 4.6
- Fixed: fixed an error where the filesystem credentials form was posting to the wrong location
- First official beta