How to force HTTPS on your WordPress site

How to force HTTPS on your WordPress site

  1. Make sure the domain has an SSL certificate (see How to install a free SSL certificate).
  2. In WordPress, go to Settings › General.
  3. Change both WordPress Address (URL) and Site Address (URL) to start with https:// and save. You'll be logged out; log back in.
  4. Replace old http:// links stored in the database using Better Search Replace (see How to update WordPress URLs after a migration), replacing http://yourdomain.co.uk with https://yourdomain.co.uk.
  5. Turn on Force HTTPS Redirect for the domain in cPanel under Domains.
  6. Clear any caching plugin.

Still seeing "not secure"?

This is usually "mixed content", where an image or script still loads over http. Use your browser's developer tools (F12 › Console) to see which files, then update them, often in theme settings, widgets or page builder content.

    • Related Articles

    • How to install WordPress

      You can install WordPress in a few clicks from cPanel. Option 1: WordPress Toolkit (recommended) In cPanel, open WordPress Management (WP Toolkit) in the Domains section. Click Install. Choose the domain and, if needed, a sub-folder. Leave the folder ...

    • How to fix WordPress images not displaying

      1. Check the image file In Media › Library, open the image and visit its File URL. A 404 means the file is missing; upload it again. 2. Check permissions In File Manager, wp-content/uploads and its folders should be 755 and image files 644. 3. Check ...

    • How to send WordPress emails via SMTP

      In WordPress, go to Plugins › Add New Plugin, search for WP Mail SMTP and install and activate it. Go to WP Mail SMTP › Settings. Set From Email to a mailbox on your domain and tick Force From Email. Under Mailer, choose Other SMTP. Enter: SMTP Host: ...

    • How to deactivate WordPress plugins from cPanel

      If a plugin has broken your site and you can't reach wp-admin, you can turn it off from cPanel. WordPress Toolkit In cPanel, open WordPress Management. Select the site and open the Plugins tab. Switch off the plugin you want to deactivate (or tick ...

    • How to update WordPress URLs after a migration

      After moving a site to a new domain, or from http to https, old addresses remain stored in the database and need replacing. Option 1: Better Search Replace plugin Back up your database. Install and activate Better Search Replace. Go to Tools › Better ...