How to Force HTTPS in WordPress

A step-by-step guide on how to force HTTPS in WordPress, ensuring that all traffic to your website is redirected to HTTPS, thus enhancing security and improving SEO.

We will set up HTTPS in WordPress by modifying the wp-config.php file, updating settings in the admin panel, and using a free plugin to redirect all HTTP requests to HTTPS.

Step 1: Update your site URL to HTTPS

• Log in to your WordPress admin panel and go to Settings > General.
• Change both WordPress Address (URL) and Site Address (URL) from http:// to https://.

Step 2: Update the wp-config.php file

• Open the wp-config.php file located in the root directory of your WordPress installation and add the following code before the line /* That's all, stop editing! Happy publishing. */:

  define('FORCE_SSL_ADMIN', true);
  

• This code forces the admin area to use HTTPS.

Step 3: Set up a 301 redirect in .htaccess

• Open the .htaccess file in the root directory of your WordPress installation and add the following code at the top:

  <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond %{HTTPS} off
    RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
  </IfModule>
  

• This will redirect all HTTP traffic to HTTPS.

Step 4: Use the "Really Simple SSL" plugin

• Install and activate the "Really Simple SSL" plugin from the WordPress admin panel.
• Once activated, the plugin will automatically detect the SSL settings and configure your site to use HTTPS.

System Requirements

• A web server that supports HTTPS with an installed SSL certificate.
• WordPress version 4.0 or later.
• "Really Simple SSL" plugin version 5.0 or later.

How to install plugins and configure to run force HTTPS on WordPress

1. Go to Plugins > Add New in the WordPress admin panel.
2. Search for "Really Simple SSL" and click Install Now.
3. Activate the plugin and follow its instructions to enforce HTTPS.

Tips

• Check your entire website to ensure that no internal links are still using HTTP.
• Use an online SSL checker tool to ensure your SSL certificate is correctly installed.