To move WordPress to HTTPS, install an SSL certificate (most hosts offer free Let’s Encrypt certificates in the control panel), change the WordPress Address and Site Address in Settings, General to https, redirect all http traffic to https (host setting or .htaccess), update old http links in the database with a search-replace tool, and fix any mixed content warnings. Then add the https version to Google Search Console.
- Free SSL is standard on most hosts.
- Update both site URLs to https.
- Force a 301 redirect from http to https.
- Fix mixed content (http images and scripts).
- Turn on auto-renew for the certificate.
What is the step-by-step process?
- Install SSL in your hosting panel.
- Back up the site.
- Settings, General: WordPress Address and Site Address to https.
- Enable force HTTPS in hosting or add an .htaccess redirect.
- Search-replace http://yourdomain with https://yourdomain in the database.
- Check pages for the padlock; fix mixed content.
- Update Search Console, Analytics and your Google Business Profile link.
How do you fix mixed content?
| Cause | Fix |
|---|---|
| Images with http URLs | Database search-replace |
| Hard-coded links in theme or widgets | Edit to https |
| External scripts on http | Use https versions or remove |
| Elementor CSS cached | Regenerate CSS, clear caches |
Live 1-to-1 WordPress and Elementor lessons on your own site, from $40. Every lesson recorded. Beginners welcome.
Does HTTPS affect SEO?
Google treats http to https as a URL change, so redirects matter; its site move guidance covers this. Picture a shop that installed SSL but never redirected http, leaving two versions of every page. Adding a sitewide 301 to https consolidated everything. Also see domain, hosting, DNS and SSL explained.
Want to learn WordPress security basics faster with a tutor?
I teach WordPress and Elementor 1-to-1 over Zoom or Google Meet, on your own website, at your pace. Lessons start at $40, every lesson is recorded so you can rewatch it, and you get a short checklist afterwards. Beginners, business owners, students and freelancers are all welcome. See lessons and prices or book a free intro call.
Frequently asked questions
How do I add SSL to WordPress?
Install the free certificate in your hosting panel, update the site URLs to https and redirect http to https.
What is mixed content?
An https page loading some resources over http, which breaks the padlock.
Does moving to HTTPS affect SEO?
It is a URL change; with proper 301 redirects there is no lasting harm.
Is SSL free for WordPress?
On most hosts, yes, through Let’s Encrypt.
Sources
Live 1-to-1 WordPress and Elementor lessons on your own site, from $40. Every lesson recorded. Beginners welcome.
More WordPress guides
Guide, 3 min readWordPress and Elementor Tutoring: Your Questions Answered
Guide, 3 min readWordPress Multisite Explained: Who Needs It (and Who Does Not)
Guide, 3 min readWordPress Comments and Spam: Settings That Keep Your Site Clean
Guide, 3 min readHow to Add a Newsletter Sign-Up to WordPress (and Get Subscribers)Rather have an expert run your WordPress site?
Tanvir H is a Bangladesh-based WordPress and Elementor web designer with 7+ years of experience, 650+ projects and a 4.9 client rating. New websites, redesigns, fixes, speed, security and SEO, handled by one expert who explains everything in plain English and works with clients worldwide.
