When loging into Moodle by default, the login information is transmitted over an HTTP connection. HTTP connections are not secure connections and a perpetrator could snoop on the network connection and potentially gain access to your username and password. To prevent this, the HTTPS connection can be used. HTTPS is an encrypted connection that encrypts the data in transit over the network, preventing the data from being read by hackers. Moodle 2.3 has a setting that enables the HTTPS connection for the login, while keeping the rest of the website HTTP.

VERY IMPORTANT! Before you set the Login to work on HTTPS, the server that hosts your Moodle site will need to be able to access through an SSL connection. If there is no SSL connection, the LOGIN WILL BREAK, locking you out of your Moodle software. To find out if your server has an ssl connection, visit your site by going to:

https://yourdomain.com

You will need to change yourdomain.com to your domain where your moodle site is installed. If the server does not have an SSL installed, there will be an error when visiting the site like the following snapshots.

force-ssl-login-connection-failed-moodle force-ssl-login-untrusted-moodle

For more information on SSL and HTTPS connections, please click here. Now that the details are explained, we can  go through the steps of setting up Moodle for logging in on an HTTPS / SSL connection.

Forcing HTTPS login

  1. Log into the Moodle Dashboard
  2. force-ssl-login-1-moodle Navigate to Site administration > Security > HTTP security in the Settings section.
  3. force-ssl-login-2-security-moodle On the HTTP security page, select the Use HTTPS for logins and Secure cookies only check boxes.

    Click Save Changes.


    force-ssl-login-3-final-moodle Now when going to the Moodle login the site will go to HTTPS instead of HTTP. If the HTTPS is working correctly, the data will transmit securely.


This concludes the article for Setting the Moodle login to work over HTTPS.

Continued Education in Course 201: Moodle site security and server settings
You are viewing Section 1: Setting the Moodle login to work over HTTPS
Section 2: Forcing Moodle 2.3 to work over SSL
Did you find this article helpful?

We value your feedback!

Why was this article not helpful? (Check all that apply)
The article is too difficult or too technical to follow.
There is a step or detail missing from the instructions.
The information is incorrect or out-of-date.
It does not resolve the question/problem I have.
How did you find this article?
Please tell us how we can improve this article:
Email Address
Name

new! - Enter your name and email address above and we will post your feedback in the comments on this page!

Related Questions

Here are a few questions related to this article that our customers have asked:
Ooops! It looks like there are no questions about this page.
Would you like to ask a question about this page? If so, click the button below!
Ask a Question
n/a Points
2014-09-15 9:05 pm

after switching to HTTPS no longer appears the login screen, openssl active ta ... resolving to return HTTP

Post a Comment

Name:
Email Address:
Phone Number:
Comment:
Submit

Please note: Your name and comment will be displayed, but we will not show your email address.

1 Questions & Comments

Post a comment

Back to first comment | top

Need more Help?

Search

Ask the Community!

Get help with your questions from our community of like-minded hosting users and InMotion Hosting Staff.

Current Customers

Chat: Click to Chat Now E-mail: support@InMotionHosting.com
Call: 888-321-HOST (4678) Ticket: Submit a Support Ticket

Not a Customer?

Get web hosting from a company that is here to help. Sign up today!