How to Force HTTPS on Your Website
Once your SSL certificate is active, it's a good idea to make sure all visitors actually use the secure https:// version of your site, rather than the unencrypted http:// version. This is done by "forcing" HTTPS with...
0 views
Once your SSL certificate is active, it's a good idea to make sure all visitors actually use the secure https:// version of your site, rather than the unencrypted http:// version. This is done by "forcing" HTTPS with a redirect.
Before You Start
Make sure a valid SSL certificate is already installed and active for your domain — see "How to Install a Free SSL Certificate." Forcing HTTPS before a certificate is issued will make your site inaccessible.
Option 1: The cPanel Toggle
- Log in to cPanel.
- Under the Security section, open SSL/TLS Status (sometimes called "Domains" in newer cPanel themes).
- Find your domain in the list and enable the Force HTTPS Redirect toggle if it's available for your cPanel version.
Option 2: Using .htaccess
If the toggle isn't available, you can add a redirect rule directly to your site's .htaccess file:
- In cPanel, open File Manager and navigate to public_html.
- Locate the .htaccess file (enable "Show Hidden Files" in File Manager settings if you don't see it).
- Right-click and choose Edit, then add the following near the top of the file:
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
- Save the file.
If your site uses WordPress, most SEO plugins (like Yoast or Rank Math) also include a simple "Force HTTPS" option, which can be an easier alternative.
Verifying It Works
Visit your site using http:// (without the "s") and confirm it automatically redirects to https://.
Related Articles
- How to Install a Free SSL Certificate
Was this answer helpful?Your response helps us improve future guides.