How to implement HSTS in magento?

I have just moved from http to https, and I read that HSTS should be implemented to reduce latency and improve security, so how do I go about it?

2 Answers 2


You can add the following to your .htaccess file to enable it:

<ifModule mod_headers.c>
    Header add Strict-Transport-Security "max-age=84600; includeSubDomains"
  • how to add it for particular store?
    – User0434
    Commented Apr 10, 2020 at 12:09

Ikonoshirt_StrictTransportSecurity is a free extension which implements HSTS in Magento. You can find it on GitHub. Just install it and you are done.

  • 1
    If you have any problem with my extension, tell me and I'll fix. Afaik is this extension only in use on my site :-) Commented Aug 25, 2014 at 15:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.