Force HTTPS from cPanel

The Force HTTPS Redirect option sends anyone who opens your website over HTTP to the HTTPS version. Before enabling it, the server must present a valid certificate for the domain.

Enable the redirect

1. Open the website by typing https:// before the domain. Check that no certificate error appears.
2. In SSL/TLS Status, check the variants you use, including www if applicable.
3. Go to cPanel > Domains and find the name.
4. Turn on Force HTTPS Redirect, if it is available for that domain.
5. Open an internal page over HTTP and confirm that it ends up on HTTPS keeping its path.

The toggle does not issue the certificate. Nor does it automatically change the addresses stored in the application. If you use WordPress, check its HTTPS settings.

If you cannot enable the option

Aliases do not show a toggle of their own. Availability also depends on the type of domain, its certificate and the server configuration. Check the coverage and contact support if the option is not available; do not delete and re-create the domain to make it appear.

Check the website afterwards

Test the home page, internal pages, admin access and forms. If you have a shop or integrations, also check payments, APIs and webhooks using their test mode where applicable.

To find HTTP resources, use the browser console and the mixed content guide.

If the loop starts right after turning on the toggle, you can turn it off from cPanel to diagnose the interaction with other rules. Avoid adding new redirects without identifying which one is sending the website back to HTTP.