How to force HTTPS on your WordPress site

How to force HTTPS on your WordPress site

  1. Make sure the domain has an SSL certificate (see How to install a free SSL certificate).
  2. In WordPress, go to Settings › General.
  3. Change both WordPress Address (URL) and Site Address (URL) to start with https:// and save. You'll be logged out; log back in.
  4. Replace old http:// links stored in the database using Better Search Replace (see How to update WordPress URLs after a migration), replacing http://yourdomain.co.uk with https://yourdomain.co.uk.
  5. Turn on Force HTTPS Redirect for the domain in cPanel under Domains.
  6. Clear any caching plugin.

Still seeing "not secure"?

This is usually "mixed content", where an image or script still loads over http. Use your browser's developer tools (F12 › Console) to see which files, then update them, often in theme settings, widgets or page builder content.

    • Related Articles

    • How to install WordPress

      You can install WordPress in a few clicks from cPanel. Option 1: WordPress Toolkit (recommended) In cPanel, open WordPress Management (WP Toolkit) in the Domains section. Click Install. Choose the domain and, if needed, a sub-folder. Leave the folder ...

    • How to send WordPress emails via SMTP

      In WordPress, go to Plugins › Add New Plugin, search for WP Mail SMTP and install and activate it. Go to WP Mail SMTP › Settings. Set From Email to a mailbox on your domain and tick Force From Email. Under Mailer, choose Other SMTP. Enter: SMTP Host: ...

    • How to deactivate WordPress plugins from cPanel

      If a plugin has broken your site and you can't reach wp-admin, you can turn it off from cPanel. WordPress Toolkit In cPanel, open WordPress Management. Select the site and open the Plugins tab. Switch off the plugin you want to deactivate (or tick ...

    • How to reset your WordPress password

      Option 1: Lost password link Go to yourdomain.co.uk/wp-login.php and click Lost your password? Enter your username or email address. Follow the link in the email to set a new password. If the email doesn't arrive, check spam, then try one of the ...

    • How to back up WordPress manually

      Your hosting is backed up automatically, but it's good practice to take your own copy before big changes. Quickest: WordPress Toolkit In cPanel's WordPress Management, select the site and click Back Up / Restore › Back Up. You can download the backup ...