HSTS Header Generator

Generate HSTS headers to force browsers to use HTTPS.

Privacy: this tool processes your data entirely in your browser. Nothing you paste or type is sent to the server.

Minimum recommended: 31536000 (1 year).

Apply to all subdomains.

Submit to HSTS preload list.

Result

Enter your values and press Calculate — the result appears here.

Worked examples

Standard HSTS

  • maxAge = 31536000

Result: HSTS header generated.

Frequently asked questions

What does HSTS do?

HSTS forces browsers to only use HTTPS for your site.

💬 Discuss on BestWordz Community

Join the conversation about Cybersecurity, hsts, strict transport security on the BestWordz Community forum.

Visit Forum →
Copied!