{"id":712,"date":"2026-10-26T03:49:59","date_gmt":"2026-10-26T03:49:59","guid":{"rendered":"https:\/\/sitefitters.com\/learn\/guides\/install-ssl-and-force-https\/"},"modified":"2026-10-26T03:49:59","modified_gmt":"2026-10-26T03:49:59","slug":"install-ssl-and-force-https","status":"publish","type":"page","link":"https:\/\/sitefitters.com\/fr\/learn\/guides\/install-ssl-and-force-https\/","title":{"rendered":"How to Install an SSL Certificate and Force HTTPS"},"content":{"rendered":"<section class=\"sfl-hero sfl-hero-s\"><div class=\"sfl-w\"><div class=\"sfl-bc\"><a href=\"\/learn\/\">Learn<\/a> \/ <a href=\"\/learn\/guides\/\">How-To Guides<\/a><\/div><h1>How to Install an SSL Certificate and <em>Force HTTPS<\/em><\/h1><div class=\"sfl-lead\"><p>An SSL certificate encrypts the connection between your website and your visitors. It is what puts https and the secure padlock in front of your address. In this guide you will install a free certificate, make every visitor use the secure version and fix the warnings that sometimes appear afterward.<\/p><p>Browsers now label sites without HTTPS as not secure, and many visitors leave when they see that. Google also treats HTTPS as a ranking signal. If your site has a contact form, login or checkout, encryption protects your customers&#8217; details from being read in transit.<\/p><\/div><div class=\"sfl-meta\"><span>\u23f1 20 minutes<\/span><span>\u25ce Beginner<\/span><span>\u2630 8 steps<\/span><span>\u21bb Updated Oct 2026<\/span><\/div><\/div><\/section><div class=\"sfl-w sfl-art sfl-art3\"><nav class=\"sfl-toc\" aria-label=\"On this page\"><b>On this page<\/b><a href=\"#need\">What you need<\/a><a href=\"#steps\">Steps<\/a><a href=\"#mistakes\">Common mistakes<\/a><a href=\"#faq\">FAQ<\/a><\/nav><article class=\"sfl-prose\"><div class=\"sfl-box sfl-need\" id=\"need\"><h4>What you need<\/h4><ul><li>A domain already pointed to your hosting<\/li><li>Your cPanel login or hosting dashboard<\/li><li>WordPress admin access, if your site uses WordPress<\/li><li>A recent backup of your website<\/li><\/ul><\/div><h2 id=\"steps\">Steps<\/h2><div class=\"sfl-step\"><b>1<\/b><div><h3>Make sure your domain points to your host<\/h3><p>Free certificates are checked automatically, and the check only works when your domain and www both point to your hosting server. If you recently changed DNS, wait until the change has fully spread. Visit your domain without https to confirm it loads your site from your host before you continue. This step prevents most certificate errors.<\/p><\/div><\/div><div class=\"sfl-step\"><b>2<\/b><div><h3>Check the certificate status in cPanel<\/h3><p>Log in to cPanel and go to Security, then SSL\/TLS Status. You will see each domain and subdomain with an icon showing whether it is secured. Many hosts have AutoSSL turned on, which issues and renews free certificates for you. If your domains already show as AutoSSL Domain Validated, the certificate is installed and you can skip to forcing HTTPS.<\/p><\/div><\/div><div class=\"sfl-step\"><b>3<\/b><div><h3>Run AutoSSL if needed<\/h3><p>If any domain shows as unsecured, tick its checkbox and make sure it is included in AutoSSL. Then click Run AutoSSL. The page shows a progress message and reloads when it finishes, usually within a few minutes. If a domain still fails, the Certificate Status column explains why, often that it does not resolve to the server yet.<\/p><div class=\"sfl-tip\"><b>Tip:<\/b> Exclude subdomains you do not use, such as old test addresses, so they do not cause AutoSSL errors.<\/div><\/div><\/div><div class=\"sfl-step\"><b>4<\/b><div><h3>Use a paid certificate only if you need one<\/h3><p>Free domain validated certificates from AutoSSL or Let&#8217;s Encrypt give the same encryption as paid ones. A paid certificate mainly adds company identity checks or a warranty, which some banks or large clients ask for. If you buy one, your provider gives you files to install in cPanel under Security, then SSL\/TLS, then Manage SSL sites. Most small businesses never need this.<\/p><\/div><\/div><div class=\"sfl-step\"><b>5<\/b><div><h3>Force HTTPS for every visitor<\/h3><p>In cPanel, go to Domains, then Domains. In the list, find your main domain and turn the Force HTTPS Redirect switch to On. Now anyone who types http or follows an old link is sent to the secure version automatically. The switch only works once the domain has a valid certificate, so finish the earlier steps first.<\/p><\/div><\/div><div class=\"sfl-step\"><b>6<\/b><div><h3>Update your WordPress addresses<\/h3><p>If you use WordPress, log in and go to Settings, then General. Change both the WordPress Address and Site Address so they start with https instead of http, then save. You will be asked to log in again. This tells WordPress to build every link and image address with the secure version, which helps avoid mixed content warnings.<\/p><div class=\"sfl-tip\"><b>Tip:<\/b> Take a backup first, because a typo in these fields can lock you out of the admin area.<\/div><\/div><\/div><div class=\"sfl-step\"><b>7<\/b><div><h3>Fix mixed content warnings<\/h3><p>If the padlock is missing or shows a warning, some images, scripts or fonts are still loading over plain http. Open the page, right-click and choose Inspect, then look at the Console tab for messages about mixed content. Update those links in your pages, theme or settings. In WordPress, a reputable search and replace plugin can update old http links in your database.<\/p><\/div><\/div><div class=\"sfl-step\"><b>8<\/b><div><h3>Confirm renewals are automatic<\/h3><p>Certificates now last months, not years. Since March 2026, public certificates can be valid for no more than 200 days, and Let&#8217;s Encrypt certificates last 90 days, with shorter lifetimes coming. AutoSSL renews them for you. Check SSL\/TLS Status every few months, and update Google Search Console so it knows your site now uses https.<\/p><\/div><\/div><h2 id=\"mistakes\">Common Mistakes<\/h2><ul class=\"sfl-mk\"><li>Trying to install a certificate before the domain points to the new host, so the automatic check fails.<\/li><li>Forcing HTTPS but leaving images and scripts on http links, which breaks the padlock and can stop parts of the page loading.<\/li><li>Installing a paid certificate by hand and forgetting to renew it, which takes the site offline with a browser warning.<\/li><\/ul><h2 id=\"faq\">FAQ<\/h2><details class=\"sfl-faq\" open><summary>Is a free SSL certificate safe to use?<\/summary><p>Yes. Free certificates from AutoSSL or Let&#8217;s Encrypt use the same strong encryption as paid ones and are trusted by every major browser. The difference with paid certificates is extra identity checks on your company or a warranty, not stronger security. For most small business sites, free is the right choice.<\/p><\/details><details class=\"sfl-faq\"><summary>Will switching to HTTPS hurt my Google rankings?<\/summary><p>Not if you set it up properly. Google prefers HTTPS. Use permanent redirects from http to https, which the cPanel toggle does for you, and update your internal links. Your rankings may move a little for a week or two as Google recrawls, then settle. Add the https version in Search Console.<\/p><\/details><details class=\"sfl-faq\"><summary>Why does my site say not secure even with a certificate?<\/summary><p>Usually some content on the page still loads over http, which is called mixed content. It can also mean the certificate does not cover the version you are visiting, such as www. Check SSL\/TLS Status in cPanel to confirm both versions are covered, then look for http links in your pages and theme.<\/p><\/details><\/article><aside class=\"sfl-aside\"><div class=\"sfl-box sfl-box-o\"><h4>Want hosting handled?<\/h4><p>Fast, secure WordPress hosting with updates, backups and monitoring taken care of.<\/p><a class=\"sfl-btn sfl-btn-w\" href=\"\/wordpress-hosting\/\">See WordPress hosting<\/a><\/div><div class=\"sfl-box\"><h4>Terms in this guide<\/h4><div class=\"sfl-rel\"><a href=\"\/learn\/glossary\/ssl-tls-certificate\/\">SSL\/TLS certificate<\/a><a href=\"\/learn\/glossary\/https\/\">HTTPS<\/a><a href=\"\/learn\/glossary\/certificate-authority\/\">Certificate authority<\/a><a href=\"\/learn\/glossary\/cpanel\/\">cPanel<\/a><a href=\"\/learn\/glossary\/wordpress\/\">WordPress<\/a><a href=\"\/learn\/glossary\/technical-seo\/\">Technical SEO<\/a><a href=\"\/learn\/glossary\/browser\/\">Browser<\/a><\/div><\/div><div class=\"sfl-box\"><h4>More guides<\/h4><div class=\"sfl-rel sfl-col\"><a href=\"\/learn\/guides\/choose-and-register-a-domain-name\/\">How to Choose and Register a Domain Name for Your Business<\/a><a href=\"\/learn\/guides\/point-your-domain-to-your-website\/\">How to Point Your Domain to Your Website (DNS Records Explained)<\/a><a href=\"\/learn\/guides\/set-up-business-email-on-your-domain\/\">How to Set Up Business Email on Your Own Domain<\/a><a href=\"\/learn\/guides\/set-up-spf-dkim-dmarc\/\">How to Set Up SPF, DKIM and DMARC So Your Emails Don&#8217;t Land in Spam<\/a><\/div><\/div><\/aside><\/div><script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"Is a free SSL certificate safe to use?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Yes. Free certificates from AutoSSL or Let's Encrypt use the same strong encryption as paid ones and are trusted by every major browser. The difference with paid certificates is extra identity checks on your company or a warranty, not stronger security. For most small business sites, free is the right choice.\"}},{\"@type\":\"Question\",\"name\":\"Will switching to HTTPS hurt my Google rankings?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Not if you set it up properly. Google prefers HTTPS. Use permanent redirects from http to https, which the cPanel toggle does for you, and update your internal links. Your rankings may move a little for a week or two as Google recrawls, then settle. Add the https version in Search Console.\"}},{\"@type\":\"Question\",\"name\":\"Why does my site say not secure even with a certificate?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Usually some content on the page still loads over http, which is called mixed content. It can also mean the certificate does not cover the version you are visiting, such as www. Check SSL\/TLS Status in cPanel to confirm both versions are covered, then look for http links in your pages and theme.\"}}]}<\/script>","protected":false},"excerpt":{"rendered":"<p>Learn \/ How-To Guides How to Install an SSL Certificate and Force HTTPS An SSL certificate encrypts the connection between your website and your visitors. It is what puts https and the secure padlock in front of your address. In this guide you will install a free certificate, make every visitor use the secure version [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":533,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"sitefitters-canvas.php","meta":{"_acf_changed":false,"_yoast_wpseo_title":"How to Install a Free SSL Certificate and Force HTTPS","_yoast_wpseo_metadesc":"Secure your website with a free SSL certificate and send every visitor to HTTPS. Covers cPanel AutoSSL, the Force HTTPS toggle, WordPress settings and fixes.","sfb_learn":"1","footnotes":""},"class_list":["post-712","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.7 (Yoast SEO v28.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>How to Install a Free SSL Certificate and Force HTTPS<\/title>\n<meta name=\"description\" content=\"Secure your website with a free SSL certificate and send every visitor to HTTPS. Covers cPanel AutoSSL, the Force HTTPS toggle, WordPress settings and fixes.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sitefitters.com\/fr\/learn\/guides\/install-ssl-and-force-https\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Install an SSL Certificate and Force HTTPS\" \/>\n<meta property=\"og:description\" content=\"Secure your website with a free SSL certificate and send every visitor to HTTPS. Covers cPanel AutoSSL, the Force HTTPS toggle, WordPress settings and fixes.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sitefitters.com\/fr\/learn\/guides\/install-ssl-and-force-https\/\" \/>\n<meta property=\"og:site_name\" content=\"Sitefitters\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sitefitters.com\\\/learn\\\/guides\\\/install-ssl-and-force-https\\\/\",\"url\":\"https:\\\/\\\/sitefitters.com\\\/learn\\\/guides\\\/install-ssl-and-force-https\\\/\",\"name\":\"How to Install a Free SSL Certificate and Force HTTPS\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sitefitters.com\\\/#website\"},\"datePublished\":\"2026-10-26T03:49:59+00:00\",\"description\":\"Secure your website with a free SSL certificate and send every visitor to HTTPS. Covers cPanel AutoSSL, the Force HTTPS toggle, WordPress settings and fixes.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/sitefitters.com\\\/learn\\\/guides\\\/install-ssl-and-force-https\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/sitefitters.com\\\/learn\\\/guides\\\/install-ssl-and-force-https\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/sitefitters.com\\\/learn\\\/guides\\\/install-ssl-and-force-https\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/sitefitters.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Business Website 101\",\"item\":\"https:\\\/\\\/sitefitters.com\\\/learn\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"How-To Guides\",\"item\":\"https:\\\/\\\/sitefitters.com\\\/learn\\\/guides\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"How to Install an SSL Certificate and Force HTTPS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sitefitters.com\\\/#website\",\"url\":\"https:\\\/\\\/sitefitters.com\\\/\",\"name\":\"Sitefitters\",\"description\":\"Custom Websites, Apps &amp; WHMCS experts\",\"publisher\":{\"@id\":\"https:\\\/\\\/sitefitters.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/sitefitters.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/sitefitters.com\\\/#organization\",\"name\":\"Sitefitters\",\"url\":\"https:\\\/\\\/sitefitters.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/sitefitters.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/sitefitters.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/sitefitters-logo-elephant-dot.png\",\"contentUrl\":\"https:\\\/\\\/sitefitters.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/sitefitters-logo-elephant-dot.png\",\"width\":717,\"height\":140,\"caption\":\"Sitefitters\"},\"image\":{\"@id\":\"https:\\\/\\\/sitefitters.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How to Install a Free SSL Certificate and Force HTTPS","description":"Secure your website with a free SSL certificate and send every visitor to HTTPS. Covers cPanel AutoSSL, the Force HTTPS toggle, WordPress settings and fixes.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sitefitters.com\/fr\/learn\/guides\/install-ssl-and-force-https\/","og_locale":"fr_FR","og_type":"article","og_title":"How to Install an SSL Certificate and Force HTTPS","og_description":"Secure your website with a free SSL certificate and send every visitor to HTTPS. Covers cPanel AutoSSL, the Force HTTPS toggle, WordPress settings and fixes.","og_url":"https:\/\/sitefitters.com\/fr\/learn\/guides\/install-ssl-and-force-https\/","og_site_name":"Sitefitters","twitter_card":"summary_large_image","twitter_misc":{"Dur\u00e9e de lecture estim\u00e9e":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/sitefitters.com\/learn\/guides\/install-ssl-and-force-https\/","url":"https:\/\/sitefitters.com\/learn\/guides\/install-ssl-and-force-https\/","name":"How to Install a Free SSL Certificate and Force HTTPS","isPartOf":{"@id":"https:\/\/sitefitters.com\/#website"},"datePublished":"2026-10-26T03:49:59+00:00","description":"Secure your website with a free SSL certificate and send every visitor to HTTPS. Covers cPanel AutoSSL, the Force HTTPS toggle, WordPress settings and fixes.","breadcrumb":{"@id":"https:\/\/sitefitters.com\/learn\/guides\/install-ssl-and-force-https\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sitefitters.com\/learn\/guides\/install-ssl-and-force-https\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/sitefitters.com\/learn\/guides\/install-ssl-and-force-https\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sitefitters.com\/"},{"@type":"ListItem","position":2,"name":"Business Website 101","item":"https:\/\/sitefitters.com\/learn\/"},{"@type":"ListItem","position":3,"name":"How-To Guides","item":"https:\/\/sitefitters.com\/learn\/guides\/"},{"@type":"ListItem","position":4,"name":"How to Install an SSL Certificate and Force HTTPS"}]},{"@type":"WebSite","@id":"https:\/\/sitefitters.com\/#website","url":"https:\/\/sitefitters.com\/","name":"Sitefitters","description":"Custom Websites, Apps &amp; WHMCS experts","publisher":{"@id":"https:\/\/sitefitters.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sitefitters.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/sitefitters.com\/#organization","name":"Sitefitters","url":"https:\/\/sitefitters.com\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/sitefitters.com\/#\/schema\/logo\/image\/","url":"https:\/\/sitefitters.com\/wp-content\/uploads\/2026\/10\/sitefitters-logo-elephant-dot.png","contentUrl":"https:\/\/sitefitters.com\/wp-content\/uploads\/2026\/10\/sitefitters-logo-elephant-dot.png","width":717,"height":140,"caption":"Sitefitters"},"image":{"@id":"https:\/\/sitefitters.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/pages\/712","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/comments?post=712"}],"version-history":[{"count":0,"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/pages\/712\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/pages\/533"}],"wp:attachment":[{"href":"https:\/\/sitefitters.com\/fr\/wp-json\/wp\/v2\/media?parent=712"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}