How do I force my site to use https

Forcing SSL for your site can be accomplished numerous ways depending on your content.  We have listed the most common below.


Go to Settings > General and make sure that the WordPress Address (URL) and Site Address (URL) is https. If not, add S after http to make https and save it :

WordPress HTTPS Setting Page

If your site does not automatically begin re-directing to SSL you may need to use the code in the .htaccess file below under "Others".

You may also need to use a plugin like "Really Simple SSL" to make sure you do not serve mixed content [SSL and non-SSL in the same page].


Go to System > Global Configuration. Navigate to the Server tab. Set the Force SSL option to Entire Site. Save settings.

Joomla HTTPS Setting Page


The most common for sites not listed is by using mod_rewrite within your .htaccess file.

To force all web traffic to use HTTPS [SSL] you can insert the following lines of code into the .htaccess file in the root folder of your website.  It is important that you insert this above any pre-existing mod_rewrite code - placing it at the top of the file is usually suggested.

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Should you wish to only force a specific domain to HTTPS you would use the following code - making sure to replace "example\.com" with your actual domain name.  The back slash "\" before the period is important.

RewriteEngine On 
RewriteCond %{HTTP_HOST} example\.com$ [NC]
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$$1 [R=301,L]

If you can not see the .htaccess file in the cPanel file manger ensure show hidden files is enabled by clicking the gear (settings) in the upper right and checking the box.

Show Hidden Files

If you force SSL using these .htaccess rules and you end up with an "endless redirection", "redirection loop", or similar it is quite likely your script/software is trying to re-direct back to non-ssl which is then being re-directed by .htaccess back to SSL.  In this case you will likely need to configure SSL usage within your script/software directly.

  • 17 Users Found This Useful
Was this answer helpful?

Related Articles

How do I get an SSL certificate and how do I use it?

Free Options include cPanel's AutoSSL and Let's Encrypt.There are a few ways to get an SSL...

I just had SSL Installed and my site has disappeared!

Do not worry - this is a temporary side effect of moving the account to a new IP and...

How do I obtain a CSR (Certificate Signing Request)?

There are two ways to generate a CSR depending on which type of account you have and both methods...

How do I order an SSL Certificate from MDDHosting?

SSL Certificates can be ordered at

Cannot issue Let's Encrypt Certificate or Renewal Failures

Let's Encrypt is an amazing tool that allows you to issue free valid SSL Certificates on the...