---
title: "Add HSTS in Zenphoto"
description: "The HTTP Strict Transport Security (HSTS) HTTP header ensures web browsers always load your image gallery with HTTPS. After you force SSL usage, follow below to add HSTS in Zenphoto. Warning: Once..."
url: https://www.inmotionhosting.com/support/website/hsts-in-zenphoto/
date: 2019-12-13
modified: 2021-11-02
author: "InMotion Hosting Contributor"
categories: ["Website"]
type: post
lang: en
---

# Add HSTS in Zenphoto

The [HTTP Strict Transport Security (HSTS)](https://www.inmotionhosting.com/support/website/force-hsts-using-htaccess/) HTTP header ensures web browsers always load your image gallery with HTTPS. After you [force SSL usage](https://www.inmotionhosting.com/support/website/force-https-in-zenphoto/), follow below to add HSTS in Zenphoto.

Warning: Once enabled, HSTS disallows the user from overriding an [invalid or self-signed certificate message](https://www.inmotionhosting.com/support/website/ssl/self-signed-ssl-certificate-warning/). Your website will be inaccessible without a [valid SSL](https://www.inmotionhosting.com/support/amp/how-do-i-obtain-an-ssl-certificate/).

## Add HSTS

1. [Login to Zenphoto](https://www.inmotionhosting.com/support/website/login-zenphoto/).
2. [Install the **http_security_headers** plugin](https://www.inmotionhosting.com/support/website/install-zenphoto-plugin/) in the *Security* category.
3. Click the gear icon to change settings.
4. Specify HSTS settings:**Strict-Transport-Security: max-age** – how long HSTS should be active in seconds before rechecking its status**Strict-Transport-Security – includeSubdomains** – check to include subdomains**Strict-Transport-Security – preload** – check to submit your domain to the [preload list](https://www.inmotionhosting.com/support/website/force-hsts-using-htaccess/#preload)
5. Click **Apply** at the bottom.

![](https://www.inmotionhosting.com/support/wp-content/uploads/2019/12/zenphoto-hsts-1024x168.png)*Enable for [10886400 seconds (126 days)](https://duckduckgo.com/?q=10886400+seconds+to+days&ia=answer) and on subdomains*

To better secure your image galleries, configure [X-Frame-Options in Zenphoto](https://www.inmotionhosting.com/support/website/zenphoto-referrer-policy-and-x-frame-options/) and check out our [managed VPS host](https://www.inmotionhosting.com/vps-hosting).