/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ LH HSTS

LH HSTS

By shawfactor

Security & Privacy / Security Scanning & Malware Protection

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

LH HSTS Review - In-Depth Analysis

HSTS is a security feature that enforces SSL usage on your site. It sends proper headers for full SSL security and can be customized through filters.

Performance Overview

WPS Score

6.73/10

User Rating

3.9/5 (based on 7+ reviews)

Active Installations

600+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

1 / 10 (Very Low Risk) It is calculated using the weighted average of all versions.

What It Does

This plugin sends the proper headers for full SSL security. It ensures that browsers enforce the use of HTTPS even if users access the site through HTTP. For more information on what this is and why it is important, visit the Wikipedia page on HTTP Strict Transport Security.

The options are preset to enable browsers to preload the HSTS directive, but these settings can be overwritten by filters which are clearly documented in the code.

To update the max-age settings, you can add a specific filter to your functions.php file. This allows for customization based on your site's requirements. Similarly, you can adjust subdomain settings, preload settings, and redirect settings through additional filters.

Comparing to Alternatives

LH HSTS is a plugin focused on adding HTTP Strict Transport Security headers, with several other plugins offering similar functionality but with varying features and user experiences.

Top alternatives

Strengths

Simple and straightforward to use
Effectively sets HSTS header for most users
No known security vulnerabilities
Free to use without upsells

Weaknesses

Some users report inability to disable or remove HSTS once set
Does not provide advanced configuration options
Limited support and documentation
Inconsistent behavior reported by some users

User Sentiment Analysis

With a 3.9 average rating from 7 reviews, most users appreciate the plugin's functionality, though a significant minority report serious issues.

Positive highlights

"Works as advertised and can be configured via a manual edit of the code" - Mark Gilbert
"Nice work! This plugin fixed my issue." - benwp
"Works splendidly and sets the correct header." - Micah Wood
"Does the job and is a simple process." - minkahdesign

Common complaints

Plugin did not add the Strict-Transport-Security header as expected
Unable to disable or remove HSTS after plugin use, causing access issues

Weaknesses

Lack of ability to disable HSTS once enabled
Inconsistent functionality reported by some users
Limited user control over plugin settings

Who Should Use This?

Best for

Users seeking a simple, free plugin to add HSTS headers without advanced configuration needs.

Not ideal for

Users who require the ability to easily disable or remove HSTS headers or need more advanced security header management features.

Pricing & Value

Free version includes

The free version provides basic functionality to add the Strict-Transport-Security header to your site.

Final Verdict

LH HSTS offers a straightforward solution for adding HSTS headers with no known security vulnerabilities and positive feedback from most users. However, the inability to disable or remove HSTS once enabled is a significant drawback that may cause serious issues for some websites.

While it is a good choice for users needing a simple and free HSTS implementation, those requiring more control or advanced features should consider alternative plugins with better flexibility and support.