Even if your SSL certificate is installed, visitors who open your site with http:// get an unencrypted connection, and the browser shows a "Not secure" warning. You should redirect all visitors to https:// automatically.
Redirecting in Plesk
- On the Websites & Domains page, click Hosting Settings under your domain.
- Select Permanent SEO-safe 301 redirect from HTTP to HTTPS.
- Click OK.
You can also do this with the Redirect from HTTP to HTTPS switch on the SSL/TLS Certificates page.
Redirecting in cPanel
- Go to Domains in cPanel.
- Turn on the Force HTTPS Redirect switch next to your domain.
Redirecting with .htaccess
If there is no panel option, add these lines at the top of the .htaccess file in your site's root folder:
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [L,R=301]Extra steps for WordPress
- On Settings > General, update WordPress Address and Site Address to start with
https://. - If pages still load images over
http://, the browser does not show the padlock (mixed content). You can replace old addresses in the database with a plugin such as Better Search Replace.
Redirect loop warning
If you get an "ERR_TOO_MANY_REDIRECTS" error, you may have turned on the redirect in more than one place at the same time (panel, .htaccess and a plugin). Use only one.
