How to Redirect HTTP to HTTPS | Step-by-Step Guide

Howto

How to Redirect HTTP to HTTPS?

If you’ve recently installed an SSL certificate on your website, the next crucial step is to redirect all HTTP traffic to HTTPS — ensuring users always visit your secure version of your site.

This not only protects data but also improves your SEO rankings, as Google favors HTTPS websites

There are several ways to redirect HTTP to HTTPS, but the most common method is to use a server-side language like Apache or Nginx to configure the redirection.

Redirect HTTP to HTTPS Using .htaccess (Apache)

If your website uses Apache (common with shared hosting), follow these steps:

Open or create the .htaccess file in your website’s root directory (usually /public_html/).
Add the following code:

RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Explanation:

RewriteEngine On enables the rewrite module.
The condition checks if HTTPS is off.
The rule forces all traffic to redirect to the HTTPS version permanently (301 redirect).

Redirect HTTP to HTTPS in Nginx

If you’re using Nginx as your web server:

Open your site configuration file, usually found at: /etc/nginx/sites-available/yourdomain.conf

Add the following block:

server {
listen 80;
server_name yourdomain.com www.yourdomain.com;
return 301 https://$host$request_uri;
}

Save and restart Nginx:

sudo systemctl restart nginx

This ensures every visitor on port 80 (HTTP) gets redirected to HTTPS automatically.

Difference between HTTP vs HTTPS

HTTP (HyperText Transfer Protocol) is the traditional way browsers communicate with web servers.

HTTPS (HTTP Secure) adds a layer of encryption (SSL/TLS) to make your website secure and prevent data interception.

HTTP (Hypertext Transfer Protocol) and HTTPS (HTTP Secure) are both protocols for transmitting data over the internet, but HTTPS uses an additional layer of security, called SSL (Secure Sockets Layer) or TLS (Transport Layer Security), to encrypt data sent between a web server and a browser. This encryption helps protect sensitive information, such as login credentials or credit card numbers, from being intercepted by hackers. Additionally, HTTPS is often used to establish a secure connection to a website, indicated by a padlock icon in the browser’s address bar and the “https” prefix in the URL.

The benefit of moving to HTTPS from HTTP

There are several benefits to moving from HTTP to HTTPS, including:

Security: HTTPS provides an added layer of security by encrypting the data that is sent between the user’s browser and the website’s server. This means that any sensitive information, such as login credentials or credit card information, is protected from being intercepted by third parties.

Search engine optimization: Google and other search engines give preference to websites that use HTTPS over those that use HTTP. This means that HTTPS-enabled websites are more likely to appear higher in search engine results.

Browser trust indicators: Browsers such as Chrome, Firefox, and Safari will display a padlock icon in the address bar for HTTPS-enabled websites, which can increase users’ trust in the website.

Improved privacy: HTTPS encrypts the full web communication, so eavesdroppers can’t see what you’re visiting and can’t manipulate your website’s content.

Compliance: Many industries and businesses are required to use HTTPS in order to comply with regulations and standards related to data privacy and security.

Common Issues to Watch Out For

Mixed Content Errors: Some elements (like images or scripts) might still load over HTTP. Use your browser’s console or tools like WhyNoPadlock to find and fix them.
Infinite Redirect Loops: Happens if HTTPS redirection is set multiple times (in .htaccess, Cloudflare, and CMS simultaneously). Keep only one active redirect.
Broken SSL Certificate: Ensure your SSL is valid and installed for all subdomains (use wildcard SSL if needed).

Example for WordPress Users

If you’re on WordPress, you can use plugins like:

Really Simple SSL – Automatically configures HTTPS redirects.
WP Force SSL – Enforces HTTPS and fixes mixed-content issues.

Redirecting HTTP to HTTPS is one of the simplest yet most impactful ways to secure and optimize your website.
It protects users, improves SEO, and boosts your credibility online.

If you’re using hosting services from RevoTrads, our team can help you install SSL and set up HTTPS redirection automatically, no technical skills required.

Overall, HTTPS is the best choice for any website to ensure the privacy, security and trust of its users.