How to secure WordPress site with SSL and Https?

Are you hoping to move from HTTP to HTTPS and install a SSL certificate on your WordPress site? In this article, we will discuss proper methodologies to install SSL and HTTPS in WordPress.

What is HTTPS and SSL?

Consistently we share our own information with various websites whether it's making a buy or basically signing in.

With a specific end goal to ensure the data transfer, a secure connection should be made.

That is when SSL and HTTPS come in.

HTTPS or Secure HTTP is an encryption technique that secures the connection between clients' browser and your server. This makes it harder for programmers to listen in on the connection.

Each site is issued a unique SSL certificate for recognizable proof purposes. In the event that a server is professing to be on HTTPS, and it's certificate doesn't coordinate, at that point most present day browsers will caution the client from interfacing with the site.

Google Chrome demonstrating cautioning around an unsecure connection

Presently you are most likely pondering, for what reason would you ever need to move from HTTP to HTTPS and install a SSL certificate?

For what reason do you require HTTPS and SSL?

In the event that you are running an eCommerce website, at that point you totally require a SSL certificate uncommonly in the event that you are gathering payment information.

Most payment suppliers like Stripe, PayPal Pro, Authorize.net, and so forth will expect you to have a secure connection utilizing SSL.

As of late, Google additionally reported that they will utilize HTTPS and SSL as a positioning sign in their indexed lists. This implies utilizing HTTPS and SSL will help enhance your site's SEO.

The most effective method to Setup WordPress to Use SSL and HTTPS

On the off chance that you are beginning another site and/or need to utilize HTTPS wherever on your site, at that point you have to update your site URL.

You can do this by going to Settings » General and updating your WordPress and site URL address fields.

 

Presently in case you're adding SSL to your current site, at that point you have to setup WordPress SSL redirect from HTTP to HTTPS.

You can do this by including the accompanying code in your .htaccess document:

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://www.yoursite.com/$1 [R,L] </IfModule>

Bear in mind to supplant yoursite.com with your site URL.

On the off chance that you are on nginx servers (most clients are not), you would add the accompanying to redirect from HTTP to HTTPS:

server {
listen 80;
server_name yoursite.com www.yoursite.com;
return 301 https://yoursite.com$request_uri;
}

By following these means, you will avoid the WordPress HTTPS not working error since all your site URL and content will be on SSL.

In the event that you need to install SSL and HTTPS your WordPress multi-site admin range or login pages, at that point you have to design SSL in wp-config.php record.

Essentially install the accompanying code over the “That is all, quit altering!” line in your wp-config.php record:

define(‘FORCE_SSL_ADMIN', true);

This wp-config.php SSL trap works for single sites and in addition multi-sites.

Setup SSL and WordPress HTTPS on Exclusive Pages

Presently if for reasons unknown, you just need to install HTTPS and SSL particular pages of your site, at that point you would require the plugin called WordPress HTTPS (SSL).

In the first place thing you have to do is install and enact the WordPress HTTPS (SSL) plugin.

It would be ideal if you take note of that this plugin hasn't been updated for some time, yet it works fine and is sheltered to utilize. See our guide on installing plugins not tried with your WordPress adaptation for more information.

Upon actuation the plugin will include another menu thing marked HTTPS in your WordPress admin. You can click it to visit the plugin's settings page.

The main alternative of the settings page requests that you enter your SSL host. For the most part it is your domain name. In any case, in the event that you are configuring the site on a subdomain and the SSL certificate you got is for your fundamental domain name, at that point you will enter the root domain. On the off chance that you're utilizing a mutual SSL certificate gave by your web host, at that point you should enter the host information they gave rather than your domain name.

Now and again on the off chance that you are utilizing a non-traditional SSL host and need to utilize an alternate port, at that point you can include it in the port field.

Power SSL Administration setting powers WordPress to utilize HTTPs on all admin territory pages. You have to check this container to ensure that all activity to your WordPress admin region is secure.

The following choice is to utilize Force SSL Exclusively. Checking this crate will just utilize SSL on pages where you have checked the Force SSL choice. All other activity will go to the typical HTTP url.

This works in the event that you just need to utilize SSL on particular pages like shopping cart, checkout, client account pages, and so forth.

Click on the spare changes catch to store your plugin settings.

On the off chance that you need to utilize HTTPS only for particular pages, at that point you have to alter those pages and check the Force SSL checkbox.

Driving HTTPs on particular pages and posts

Once done, visit your page to guarantee that you have all green light in Chrome and different browsers.

 

That is all, we hope this article helped you install HTTPS and SSL in WordPress.