Redirecting your website from HTTP to HTTPS is important, as it makes your site more secure, reliable, and safe for you, your site visitors, and all the data transmitted via your pages.
Depending on how your website is built, there are two main methods you can use to make the redirection setup:
- By using a .htaccess file that gives rules to the server and makes the redirecting from HTTP to HTTPS
- By using the settings on your CMS platform, should your website be based on one.
N.B: This is a quick guide on redirecting HTTP to HTTPS. If you wish to delve into details, then check out our comprehensive guide on the topic:
Redirect Your Website from HTTP to HTTPS with a .htaccess File
To redirect your website from HTTP to HTTPS with an .htaccess file, you should follow these steps:
- Get an SSL certificate. To be able to redirect to HTTPS, you need to get an SSL certificate for your domain name.
- Access your website’s File Manager section in the Hosting Control Panel
- Within the File Manager section, search for a file named “.htaccess”.
- If there is no such file within the website’s directory, create a new file and name it “.htaccess”.
- Open the .access file for editing.
- Choose one of the following rules to add to your website:Force “www.”: Redirect all HTTP traffic to HTTPS and the “www.” version of your domain:
RewriteEngine On RewriteBase / RewriteCond %{HTTPS} off RewriteRule ^(.*)$ https://www.protected-site.com%{REQUEST_URI} [L,R=301]Force “non-www.”:
Redirect all HTTP traffic to HTTPS and to the “non-www.” version of your domain name:
RewriteEngine On RewriteBase / RewriteCond %{HTTPS} off RewriteRule ^(.*)$ https://protected-site.com%{REQUEST_URI} [L,R=301]
Allow both “www.” and “non-www.” on your domain:
RewriteEngine On RewriteBase / RewriteCond %{HTTPS} off RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]Copy the preferred code to the .htaccess file and save it.
Read also: What is an SSL Certificate and Why is it Important to Use One on Your Website
Redirect Your Website from HTTP to HTTPS with a CMS
You can quickly set up your CMS to redirect HTTP to HTTPS. The setup usually involves changing the settings within the given CMS.
WordPress
Log in to your WordPress admin dashboard.
Navigate to Settings > General.
Update the WordPress Address (URL) and Site Address (URL) fields to use HTTPS instead of HTTP. Save changes.
Update any hardcoded HTTP links within your content or theme files to HTTPS.
Install and activate a plugin like “Really Simple SSL” or “WP Force SSL” to automatically handle HTTPS redirection and update insecure content.
Verify redirection by accessing your site using HTTP and ensuring that it automatically redirects to HTTPS.
Drupal:
Log in to your Drupal admin dashboard.
Navigate to Configuration > System > Trusted Host Settings.
Add your HTTPS domain to the list of trusted hosts.
Install and enable the “Redirect” module if not already installed.
Configure the Redirect module to redirect all HTTP traffic to HTTPS.
Save configuration changes and verify redirection by accessing your site using HTTP.
Joomla:
Log in to your Joomla admin dashboard.
Navigate to System > Global Configuration.
Under the Server tab, locate the “Force HTTPS” setting and set it to “Entire Site.”
Save changes and verify redirection by accessing your site using HTTP.
Magento:
Log in to your Magento admin dashboard.
Navigate to Stores > Configuration > General > Web.
Update the Base URL settings for both Secure and Unsecure sections to use HTTPS.
Flush Magento cache and verify redirection by accessing your site using HTTP.
Other CMS Platforms
For other CMS platforms, check the official documentation or consult the community support forums for guidance on setting up HTTPS redirection. In some cases, you may need to edit configuration files or use plugins/extensions to achieve redirection.
Conclusion
By following these steps, you can set up your website to redirect HTTP traffic to HTTPS, therefore enhancing the security of your website.