Skip to content
Help Centre

Force your website to use HTTPS

Send every visitor to the secure https:// version of your site.

1 min read Updated

Make sure your SSL certificate is working first, or visitors will see an error.

In cPanel (easiest)

  1. Log in to cPanel and open Domains under Domains.
  2. Find your domain and switch Force HTTPS Redirect on.

WordPress

  1. In WordPress, go to Settings → General.
  2. Change both WordPress Address and Site Address to start with https://.
  3. Click Save Changes, and log in again.

Using .htaccess

For custom sites, add this to the top of the .htaccess file in public_html (using File Manager, and ticking Show Hidden Files):

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [L,R=301]

If the page then shows “too many redirects”, remove the rule and use the cPanel option instead.

Was this article helpful?

Related articles