Looking for a solution to Fix HTTP Strict Transport Security not enabled on WordPress. This post will explain to you how to fix the "HTTP Strict Transport Security not enabled" problem on your Wordpress website.
Fix HTTP Strict Transport Security not enabled on WordPress

Please follow the following steps to Fix HTTP Strict Transport Security not enabled on WordPress:

  •  Login to your Cpanel of your Website & Open your File Manager.
  • Open or Browse through WWW or public_html directory or folder.
  • Search and Edit .htaccess file which is hidden so you must enable show hidden files option. If the .htacess file is not present then you can create a file name with .htaccess.
  • Copy & Paste the below code inside between opening <IfModule mod_rewrite.c>  & </IfModule> code.(Note: better to place next line of <IfModule mod_rewrite.c>)
        Header set Strict-Transport-Security "max-age=31536000" env=HTTPS 
  • Save your .htaccess file after adding the above code.
Congrats, now your problem of  HTTP Strict Transport Security is not enabled on the WordPress website is fixed.

Thank You