Enable HTTPS in PrestaShop

Before changing PrestaShop, check in SSL/TLS Status and in the browser that the domain and the variants you need present a valid certificate. AutoSSL can only cover eligible names that pass validation.

Make a backup of the database and test the change in staging when the shop has custom modules, payments or proxies.

Current versions

In the PrestaShop back office, go to Shop Parameters > General, depending on the version, and use the Enable SSL check.

Save the change and check in the same section that the Enable SSL and Enable SSL on all pages options are turned on.

Older PrestaShop 1.6 and 1.7

In PrestaShop 1.7 the option is usually under Shop Parameters > General. In 1.6 it was under Preferences > General. These branches may be out of support: enabling HTTPS is no substitute for migrating them.

Additional notes

If after the change the website loads over HTTPS but warnings appear, check whether it is serving mixed content.

When the whole shop works over HTTPS, enable the HTTP to HTTPS redirect from cPanel or with a controlled rule. If there is a reverse proxy, first confirm that PrestaShop correctly receives the original protocol to avoid loops. Test the back office, cart, checkout, payments, webhooks and images.

If a loop appears or you cannot log in

Keep the previous configuration value and access to the hosting files. If it fails when you add a redirect rule, remove that rule first and check direct HTTPS. If the failure starts when you change PrestaShop, restore the previous configuration and review the proxy or module involved on a test copy. Avoid piling up redirects in cPanel, .htaccess, the CDN and modules without knowing which one responds.

In multistore, check the selected shop context before saving. A check of the main shop does not prove that every domain in the group has a certificate and correct links.