How to Enable SSL in WordPress

An SSL (Secure Sockets Layer) certificate encrypts the connection between your website and its visitors using HTTPS. Enabling SSL protects sensitive information, improves website security, and is considered a ranking signal by search engines.

This guide explains how to enable SSL in WordPress, update your website URLs, force HTTPS, and resolve common SSL-related issues.

Before You Begin

Before enabling SSL, make sure you have:

• An active SSL certificate installed on your hosting account
• Administrator access to WordPress
• Access to your hosting control panel
• A recent website backup

If you are unsure whether your SSL certificate is installed, contact your hosting provider before proceeding.

Verify That SSL Is Installed

Open your website using:

https://yourdomain.com

If your browser displays a secure padlock icon, your SSL certificate is active.

If the website does not load over HTTPS or displays a certificate warning, install or renew your SSL certificate before continuing.

Update the WordPress Address

To use HTTPS throughout your website:

1. Log in to the WordPress dashboard.
2. Go to Settings → General.
3. Update the following fields:

• WordPress Address (URL)
• Site Address (URL)

Both URLs should begin with:

https://

Save your changes.

Force HTTPS for All Visitors

After updating your website URLs, configure your web server or hosting control panel to automatically redirect all HTTP requests to HTTPS.

Benefits include:

• Consistent secure connections
• Improved SEO
• Better user trust
• Elimination of duplicate HTTP and HTTPS versions

Your hosting provider may offer a one-click option to enable HTTPS redirects.

Update Internal Links

Older websites may still contain links using HTTP.

Review and update:

• Navigation menus
• Custom links
• Images
• Buttons
• Theme settings
• Widgets

Using HTTPS consistently helps prevent mixed content warnings.

Fix Mixed Content Issues

Mixed content occurs when a secure HTTPS page loads resources over HTTP.

Common examples include:

• Images
• JavaScript files
• CSS files
• Fonts
• Videos

Modern browsers may block these resources or display security warnings.

Update all resource URLs to use HTTPS.

Update CDN Settings

If your website uses a Content Delivery Network (CDN), verify that:

• HTTPS is enabled
• SSL mode is configured correctly
• CDN URLs use HTTPS
• Cached files are refreshed after enabling SSL

This ensures all static assets are served securely.

Clear Website Cache

After enabling SSL:

• Clear your WordPress cache.
• Clear your server cache.
• Clear your CDN cache.
• Clear your browser cache.

Old cached resources may continue serving HTTP URLs until the cache expires.

Verify SSL Configuration

After completing the configuration:

• Visit multiple pages.
• Confirm the browser displays a secure padlock.
• Verify images load correctly.
• Check forms and login pages.
• Confirm internal links use HTTPS.

Your website should no longer serve content over HTTP.

Common SSL Issues

Mixed Content Warning

This usually occurs when one or more website resources still use HTTP.

Review:

• Theme files
• Plugin settings
• Custom HTML
• Embedded media

Update all resource URLs to HTTPS.

Redirect Loop

A redirect loop may occur when:

• HTTPS redirection is configured multiple times.
• CDN SSL settings conflict with server settings.
• Incorrect redirect rules exist.

Review your hosting and CDN configuration to ensure HTTPS is only enforced once.

SSL Certificate Not Trusted

Possible causes include:

• Expired certificate
• Incorrect domain name
• Missing intermediate certificates
• Self-signed certificate

Renew or reinstall the SSL certificate if necessary.

Website Loads Over HTTP

If visitors can still access the HTTP version:

• Verify HTTPS redirection is enabled.
• Clear all caches.
• Confirm your server configuration has been updated.

Best Practices

• Use HTTPS for your entire website.
• Keep your SSL certificate active.
• Renew certificates before expiration.
• Redirect all HTTP traffic to HTTPS.
• Update internal links after enabling SSL.
• Monitor your website for mixed content warnings.
• Clear caches after making SSL changes.

Frequently Asked Questions

Why should I enable SSL in WordPress?

SSL encrypts data transmitted between your website and visitors, improves security, increases user trust, and supports better search engine visibility.

Does SSL improve SEO?

HTTPS is a recognized ranking signal and helps search engines identify your website as secure. While SSL alone will not dramatically improve rankings, it is an important SEO best practice.

Can I use WordPress without SSL?

Yes, but it is not recommended. Websites without HTTPS may display browser security warnings and expose visitor data to unnecessary risks.

Why do I see a mixed content warning?

Mixed content warnings occur when an HTTPS page loads one or more resources over HTTP. Updating all resource URLs to HTTPS typically resolves the issue.