WPMozo Add-ons and tools for WordPress, Block Editor, Elementor and WooCommerce Explore add-ons
⚡ Security · Client-side · No data sent to server

Security Headers Generator

Generate the common HTTP security headers (HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy) for Apache or Nginx. Pick your settings and copy a block you can paste straight into your config.

Server

Strict-Transport-Security (HSTS)

Other headers

.htaccess 
 Copied 
 
 
 
  
Test before you trust HSTS. A long HSTS max-age locks browsers to HTTPS, so confirm your certificate and every subdomain work first. A Content-Security-Policy is powerful but site-specific; build one with our dedicated CSP Builder. Headers are generated in your browser.
 
    
  
 
Related tools
 
  Nginx Redirect Generator Build clean 301 and 302 redirects for Nginx, including www and HTTPS canonical rules.  Apache to Nginx Config Converter Translate common .htaccess redirect and rewrite rules into equivalent Nginx directives.  .htaccess Builder Generate common WordPress .htaccess rules safely.  Nginx Gzip Configuration Generator Build a ready-to-paste Nginx gzip block with the right MIME types and compression level.  SPF Record Generator Build a valid SPF TXT record by selecting your mail providers and IP ranges. No server-side requests, runs in your browser.  DMARC Record Generator Set your DMARC policy, reporting addresses, and alignment to generate a ready-to-publish DMARC TXT record. Runs in your browser.  
 
     DiviExtended  Premium Divi child themes and plugins View Divi Plugins