How to Force HTTPS on Your Website

With your free SSL certificate active, the final step is sending every visitor to the https:// version automatically — one toggle in cPanel does it.

Step-by-step

1. Confirm SSL is valid first: Security → SSL/TLS Status must show a green lock for the domain (see AutoSSL). Forcing HTTPS without a certificate locks visitors out with warnings.
2. Open Domains → Domains in cPanel.
3. Switch on "Force HTTPS Redirect" for the domain. That is it — all http:// requests now 301-redirect to https://.
4. Alternative (.htaccess): if you prefer a manual rule, add to the top of public_html/.htaccess:
   RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]
5. Fix mixed content. If the padlock shows a warning after switching, some images/scripts still load over http:// — update those URLs in your pages to https:// or relative paths.
6. Test: type the plain http:// address in a private window and confirm it lands on https:// with a clean padlock.