How to Enable a WordPress SSL

WordPress SSL Title Image

In this tutorial, we will show you how to enable your WordPress SSL, so you can connect to your website securely using an SSL certificate. For more information, see our guide titled “What is SSL and why is it important?

Note: You will need an SSL Certificate before attempting to complete this tutorial.

An SSL Certificate is just one way to protect your WordPress website. Be sure to check out the many features WordPress Hosting by InMotion Hosting includes and host your customized website in an environment developed for optimal security.

Browser with green lock indicating HTTPS in use
Browser with green lock indicating HTTPS in use

Enabling your WordPress SSL

  1. Log into the WordPress Dashboard.
  2. Roll your mouse over Settings in the navigation menu, then click General.
  3. In the WordPress Address (URL) field, enter your https address.
    WordPress Address (URL) Field
  4. Enter your https address in the Site Address (URL) field. WordPress advises that you enter the address here if you want your site homepage to be different from the directory you installed WordPress.
    Field for the Site Address (URL)
  5. Click the Save Changes button on the bottom of the screen. When the changes have been saved you will see a confirmation message.

Remember that the SSL Certificate you are using is only good for the URL of your site. If you use any media assets or coding references on your site that use a different URL that is not secure, then your site will be detected as insecure. This detection is common in internet browsers and the padlock icon in the address bar will not show as green or locked if there are insecure references on your site. There are several online services that can check your site to determine why your site may be insecure. For example, you can use Why No Padlock? to see if there are insecure links on your site.

Congratulations, now you know how to Enable SSL in WordPress! You will now be able to connect to your WordPress site over an SSL connection. Looking for more guides? Check out our WordPress How To Articles!

AC
Arnel Custodio Content Writer I

As a writer for InMotion Hosting, Arnel has always aimed to share helpful information and provide knowledge that will help solve problems and aid in achieving goals. He's also been active with WordPress local community groups and events since 2004.

More Articles by Arnel

51 Comments

  • SSL was so eas yto do on namecheap.com but basically it was a probem that they had to solve whenever it goes into revolt and won’t activate they can push i trhough.

  • Well written in-depth tutorial. I was perfectly able to setup SSL for my WordPress site but I used WP Encryption WordPress plugin to generate free SSL certificate and installed it on my Godaddy cpanel hosting.

    • It may be blocked by another plugin. There are other ways to update the home and site URL, but the easiest thing to do will be to install the Really Simple SSL plugin which performs this step along with a few others like updating links in the database and setting up an SSL redirect.

  • Hi Everyone,

    I install the SSL on my website w3path[.]com. Everything is working fine except the email.

    Anyone can help me to fix the issue

    Thanks

  • Hi,

    My free SSL is already installed successfully.

    My HTTPS site OK – that is, if I type it manually in the address bar.

    Question: Do I have to create a redirect (Permanent 301) so that it goes to the HTTPS site? OR Is there any settings so that I can actually have it to go directly to the HTTPS without using a redirect.

    NOTE: You know – Google web crawlers don’t want redirecting stuff 🙂

    Thank you in advance.

  • Hello there
    I have read your article. it was few but useful. what host services do you know which offer free SSL ?
    thanks a lot

    • In order to control whether your website is accessible through https or http, you would need to specify this when building your website. How did you build your website?

  • Hi there!

    I couldn’t access into my dashboards after accidentally change HTTP to HTTPS.

    I update the wp-config.php adding the 2 lines suggested above:

    define(‘WP_HOME’,’https://example.com’);
    define(‘WP_SITEURL’,’https://example.com’);

    fixed the access problem, now I don’t have any plugins installed.

    Does anyone know why that happened?

    Thank you!

    • Not sure how changing the URL to use HTTPS would remove your plugins (or your access for that matter). If you have a security plugin causing the issue with access – because of the change, then it’s possible. You may need to re-load your plugins because of the change in path, but I would double-check your WP site to make sure that it is functioning properly with the HTTPS path before proceeding.

  • Hi there, and thanks for taking the trouble to help us all. I have a wordpress site hosted with bluehost and they give a free SSL. Can I follow your instructions and get my site to show “secure” in the URL bar? My site is at ****. Thank you kindly for your advice. Gerald.

    • Hello Gerald.

      You should be able to follow these instructions with any WordPress website. In order to get your site secured, I recommend using the website WhyNoPadLock.com to run a scan of your website. This will help you identify the security implementations that are required for the padlock to display for your website. I hope this helps!

      Sincerely,
      Carlos D.

  • I have setup clouldflare ssl certificate to my website :https://www.tutsmake.com/

    all the things working fine. i have create my own email id in cpanel it was successfully created and send mail to anyone . but i can’t receive email. anyone send me mail to that time show aunthanticated.

    help me.

    • No, a Free SSL will only be installed if it passes Domain Control Validation. However, you may be able to install a Wildcard SSL Certificate from a third party.

  • Please help me.. One wordpress site cannot be opened unless i add an ssl exception.. How do I get over that so that my site can be accessed by other users without any disturbance?

    • From the information in your question, it’s possible there’s an issue with the SSL itself or the URL being used to connect to the site. If you have more information, you may share it here or contact our Live Support team so they can replicate the issue and troubleshoot it with you.

    • That field is a normal part of a stand-alone WordPress installation. If you don’t have it, then either you’re not looking at a stand-alone installation of WordPress or you have plugins or some other modification of WordPress that is affecting that particular entry. My suggestion is to first troubleshoot by disabling your current plugins and if the problem persists double-check your installation for updates. If you still have issue, I would recommend going to the WordPress Support forums for further assistance.

  • after changing url from www to https:// in wordpress admin panel. Still website don’t have secure connection..can you please help me to solve this issue.

    • If your page is displaying mixed content (secure and insecure) the padlock will not display. Often, doing a find and replace in the database can correct this. There are also plugins available for accomplishing this from the WP dashboard. We are happy to help you troubleshoot further if you can provide a link to the website.

      Thank you,
      John-Paul

    • It is likely that there are certain URLs within the site that are not using “https” protocol. There is a website called Why No Padlock? which scans the site and isolates these instances, so they can be updated. Most often, the “insecure” elements turn out to be image links within posts or pages.

  • Hello,

    I mistakenly followed these directions before actually installing the SSL. Now I am locked out of the WP admin backend – my browser keeps redirecting to https which, of course, will not work. Please help.

  • Hey, if you are using WordPress and have activated a ssl certificate, you can use a free plugin: Really simple ssl. That will fixe the image links.

  • I thought I got locked out too. But then I tried logging into wordpress again and everything was working. The settings was properly saved as the new https://

    Try logging in again.

    • We are happy to help you troubleshoot further, but will need some additional information. Can you provide a link to your site for us to test?

      Thank you,
      John-Paul

  • This did part of the job for me, but I ran into two issues: 1) After switching to HTTPS my images wouldn’t load, and 2) The address bar in my browser showed the “not fully secure” icon.  

    Here’s how I fixed it:

    1) I use MaxCDN as my CDN.  After changing my site address to https in WordPress, none of my images showed up and my stylesheets didn’t load.  So I knew something was wrong with my CDN.  Turns out I had to go into my MaxCDN account, go to my Pull Zones, edit my zone, go to the SSL tab, then Shared SSL, then Enable.  After that, I had to go to my W3 Total Cache plugin settings in wordpress, go to CDN settings, and paste the URL that MaxCDN gives you as the “SSL” CDN URL.  LOL.

    2) My wordpress site menus had some “Custom Link” items that had static https:// addresses.  I found these by inspecting page Source Code with chrome.  Change these to https://

    3) My theme had some Google Font addresses hard-coded into the functions.php file.  I had to change these to https:// manually using the Theme editor in wordpress.

    After that, my site displayed the green Secure icon next to the address bar (see it live at https://*************.com ) instead of the exclamation point icon.

  • Hi,
    I have purchased ssl from you. After change http to https site urls in admin i am unable to access site admin and front. Its showing following error:

    Secure Connection Failed

    An error occurred during a connection to mayanoil.com. SSL received a record that exceeded the maximum permissible length. Error code: SSL_ERROR_RX_RECORD_TOO_LONG

    my domain is mayanoil.com and id is [email protected]
    Please check and assist me is it installed on my server and wordpress.
    Thanks
    Ken

    • If our Support technicians installed the SSL they will be happy to take another look to see if something may have happened. I advise you contact Live Support for more information regarding the SSL installation. Or, if you have any comments or questions about the steps in the article above, using https with WordPress, let us know.

  • I have done that but it simply locked me out of my Dashboard. I cant access my dashboard any more. How do i revert it back

    • Hello Oluwaseyi,

      You can stop using the SSL by using the following lines in your wp-config.php file.

      define(‘WP_HOME’,’https://example.com’);
      define(‘WP_SITEURL’,’https://example.com’);

      Best Regards,
      TJ Edens

  • Hi there.  This feature does not work – in my WordPress install I cannot see an option to edit the site URL.  It’s all greyed out. 

Was this article helpful? Let us know!