Forcing HTTPS across your site
Redirect every page to its HTTPS version so visitors never land on the insecure version.
Installing an SSL certificate is only step one. You also need to tell your site to send every visitor to the HTTPS version.
In cPanel
Open Domains, find your domain, and toggle Force HTTPS Redirect on. Done.
In Plesk
Open the domain settings, go to Hosting & DNS, and tick Permanent SEO-safe 301 redirect from HTTP to HTTPS. Save.
In WordPress
Install the free Really Simple SSL plugin. Activate it. Click Go ahead, activate SSL. It sorts both the redirect and the mixed-content warnings (images or scripts still loaded over HTTP).
In .htaccess (for static sites)
Add these lines at the top of the .htaccess file in your webroot:
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]Test the redirect
Type http://yourdomain.com (with plain http) into a browser. It should immediately jump to https://yourdomain.com. If it does not, clear your browser cache and try again.
Was this article helpful?
Still need help?
If this article did not solve it, open a support ticket and we will see which article you already checked.