How to Enable HTTPS(SSL) in WordPress


SSL enabled on WP site

In this tutorial, we will show you how to enable https in WordPress, so you can connect to your website securely over SSL. For more information, see our guide titled “What is SSL and why is it important?

WARNING: You will need an SSL before attempting to complete this tutorial.
An SSL Certificate is just one way to protect your WordPress website. Be sure to check out the many features WordPress Hosting by InMotion Hosting includes and host your customized website in an environment developed for optimal security.

Enabling HTTPS in WordPress

  1. Log into the WordPress Dashboard.
  2. Roll your mouse over Settings in the navigation menu, then click General. Below is a depiction of the steps:

    WP settings menu

  3. In the WordPress Address (URL) field, enter your https address.

    WP URL update

  4. Enter your https address in the Site Address (URL) field. WordPress advises “Enter the address here if you want your site homepage to be different from the directory you installed WordPress.

    WP URL update to https

  5. Click the Save Changes button on the bottom.

    Save https address

    You are finished when you see a “Settings saved” message.

Congratulations, now you know how to Enable SSL in WordPress! You will now be able to connect to your WordPress site over an SSL connection.

Thoughts on “How to Enable HTTPS(SSL) in WordPress

    • In order to control whether your website is accessible through https or http, you would need to specify this when building your website. How did you build your website?

  • Hi there!

    I couldn’t access into my dashboards after accidentally change HTTP to HTTPS.

    I update the wp-config.php adding the 2 lines suggested above:

    define(‘WP_HOME’,’http://example.com’);
    define(‘WP_SITEURL’,’http://example.com’);

    fixed the access problem, now I don’t have any plugins installed.

    Does anyone know why that happened?

    Thank you!

    • Not sure how changing the URL to use HTTPS would remove your plugins (or your access for that matter). If you have a security plugin causing the issue with access – because of the change, then it’s possible. You may need to re-load your plugins because of the change in path, but I would double-check your WP site to make sure that it is functioning properly with the HTTPS path before proceeding.

  • Hi there, and thanks for taking the trouble to help us all. I have a wordpress site hosted with bluehost and they give a free SSL. Can I follow your instructions and get my site to show “secure” in the URL bar? My site is at ****. Thank you kindly for your advice. Gerald.

    • Hello Gerald.

      You should be able to follow these instructions with any WordPress website. In order to get your site secured, I recommend using the website WhyNoPadLock.com to run a scan of your website. This will help you identify the security implementations that are required for the padlock to display for your website. I hope this helps!

      Sincerely,
      Carlos D.

  • I have setup clouldflare ssl certificate to my website :https://www.tutsmake.com/

    all the things working fine. i have create my own email id in cpanel it was successfully created and send mail to anyone . but i can’t receive email. anyone send me mail to that time show aunthanticated.

    help me.

    • No, a Free SSL will only be installed if it passes Domain Control Validation. However, you may be able to install a Wildcard SSL Certificate from a third party.

  • Please help me.. One wordpress site cannot be opened unless i add an ssl exception.. How do I get over that so that my site can be accessed by other users without any disturbance?

    • From the information in your question, it’s possible there’s an issue with the SSL itself or the URL being used to connect to the site. If you have more information, you may share it here or contact our Live Support team so they can replicate the issue and troubleshoot it with you.

    • That field is a normal part of a stand-alone WordPress installation. If you don’t have it, then either you’re not looking at a stand-alone installation of WordPress or you have plugins or some other modification of WordPress that is affecting that particular entry. My suggestion is to first troubleshoot by disabling your current plugins and if the problem persists double-check your installation for updates. If you still have issue, I would recommend going to the WordPress Support forums for further assistance.

  • after changing url from www to https:// in wordpress admin panel. Still website don’t have secure connection..can you please help me to solve this issue.

    • If your page is displaying mixed content (secure and insecure) the padlock will not display. Often, doing a find and replace in the database can correct this. There are also plugins available for accomplishing this from the WP dashboard. We are happy to help you troubleshoot further if you can provide a link to the website.

      Thank you,
      John-Paul

    • It is likely that there are certain URLs within the site that are not using “https” protocol. There is a website called Why No Padlock? which scans the site and isolates these instances, so they can be updated. Most often, the “insecure” elements turn out to be image links within posts or pages.

  • Hello,

    I mistakenly followed these directions before actually installing the SSL. Now I am locked out of the WP admin backend – my browser keeps redirecting to https which, of course, will not work. Please help.

  • Hey, if you are using WordPress and have activated a ssl certificate, you can use a free plugin: Really simple ssl. That will fixe the image links.

  • I thought I got locked out too. But then I tried logging into wordpress again and everything was working. The settings was properly saved as the new https://

    Try logging in again.

    • We are happy to help you troubleshoot further, but will need some additional information. Can you provide a link to your site for us to test?

      Thank you,
      John-Paul

  • This did part of the job for me, but I ran into two issues: 1) After switching to HTTPS my images wouldn’t load, and 2) The address bar in my browser showed the “not fully secure” icon.  

    Here’s how I fixed it:

    1) I use MaxCDN as my CDN.  After changing my site address to https in WordPress, none of my images showed up and my stylesheets didn’t load.  So I knew something was wrong with my CDN.  Turns out I had to go into my MaxCDN account, go to my Pull Zones, edit my zone, go to the SSL tab, then Shared SSL, then Enable.  After that, I had to go to my W3 Total Cache plugin settings in wordpress, go to CDN settings, and paste the URL that MaxCDN gives you as the “SSL” CDN URL.  LOL.

    2) My wordpress site menus had some “Custom Link” items that had static http:// addresses.  I found these by inspecting page Source Code with chrome.  Change these to https://

    3) My theme had some Google Font addresses hard-coded into the functions.php file.  I had to change these to https:// manually using the Theme editor in wordpress.

    After that, my site displayed the green Secure icon next to the address bar (see it live at https://*************.com ) instead of the exclamation point icon.

  • Hi,
    I have purchased ssl from you. After change http to https site urls in admin i am unable to access site admin and front. Its showing following error:

    Secure Connection Failed

    An error occurred during a connection to mayanoil.com. SSL received a record that exceeded the maximum permissible length. Error code: SSL_ERROR_RX_RECORD_TOO_LONG

    my domain is mayanoil.com and id is kcengle@roadrunner.com
    Please check and assist me is it installed on my server and wordpress.
    Thanks
    Ken

    • If our Support technicians installed the SSL they will be happy to take another look to see if something may have happened. I advise you contact Live Support for more information regarding the SSL installation. Or, if you have any comments or questions about the steps in the article above, using https with WordPress, let us know.

  • I have done that but it simply locked me out of my Dashboard. I cant access my dashboard any more. How do i revert it back

    • Hello Oluwaseyi,

      You can stop using the SSL by using the following lines in your wp-config.php file.

      define(‘WP_HOME’,’http://example.com’);
      define(‘WP_SITEURL’,’http://example.com’);

      Best Regards,
      TJ Edens

  • Hi there.  This feature does not work – in my WordPress install I cannot see an option to edit the site URL.  It’s all greyed out. 

Leave a Reply to AC Cancel reply