Skip to main content
Once your site has an SSL certificate, you want every visitor to use the secure https:// version, even if they type http:// or follow an old link. This guide shows you how.
Your domain needs a working SSL certificate first, or visitors will see a security warning. Sites on HostCloud hosting get one free. See Free SSL with AutoSSL.

Turn on Force HTTPS Redirect in cPanel

1

Open Domains

Log in to cPanel, type Domains in the Search Tools box and open it.
2

Turn on the redirect

Find your domain in the list and switch on Force HTTPS Redirect.
3

Test it

Open http://yourdomain.com in a private browsing window. It should switch to https:// with a padlock.
Repeat for each domain and subdomain you want to secure.
If the switch can’t be turned on, the domain probably doesn’t have a valid certificate yet. Check that it points to HostCloud and wait for AutoSSL to issue one.

WordPress sites: update your site address

WordPress also needs to know your site uses HTTPS.
1

Open General Settings

Log in to WordPress and go to Settings → General.
2

Change both addresses

Change WordPress Address (URL) and Site Address (URL) from http:// to https://.
3

Save

Click Save Changes. You’ll be asked to log in again.
Type the addresses carefully. A mistake here can lock you out of your dashboard. If that happens, open a ticket.
After switching, some pages may show a “not fully secure” warning. See Fix mixed-content warnings. Still stuck? Open a ticket with your domain name.