How to force your site to use HTTPS

Once your SSL certificate is active, redirect visitors from http to https so everyone gets the secure version of your site.

WordPress sites

  1. In WordPress, go to Settings → General.
  2. Make sure both the WordPress Address and Site Address start with https:// and save.
  3. For a full redirect, a plugin like Really Simple SSL handles it automatically.

Other sites (.htaccess)

Add these lines to the top of the .htaccess file in your public_html folder:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Check it works

Visit your site with http:// — it should jump to https:// automatically. Make sure SSL is active first (see installing a free SSL certificate). Stuck? Open a ticket.

Was this answer helpful?

 Print this Article

Also Read

How to install a free SSL certificate

An SSL certificate adds the padlock and https:// to your site, encrypting traffic and building...

What is an SSL certificate and why you need one

An SSL certificate encrypts the connection between your website and your visitors, shown by...

How to fix mixed content warnings

A mixed content warning means your page loads over https but still pulls some items (images,...

How SSL certificate renewal works in CHPanel

SSL certificates have an expiry date, but on BPHOST you never renew them by hand: CHPanel renews...

How to fix common SSL errors

SSL errors look alarming but are usually quick to resolve. Here are the common ones and where to...