HTTPS is a secure connection that encrypts the information exchanged between a website visitor’s browser and the server. It helps protect usernames, passwords and data entered into forms from interception and modification.
HTTPS uses the TLS protocol to protect data. A standard HTTP connection does not encrypt data, which means that someone else on an insecure network may be able to read or modify it.
HTTPS is enabled on the server by default for a new PrestaShop store
HTTPS is enabled on the server by default for a PrestaShop store installed on a new web hosting account or a new subdomain.
A free Let’s Encrypt certificate and HTTP-to-HTTPS redirection are configured automatically. You do not need to enable HTTPS separately in the server management panel or order a certificate manually.
For the certificate to be issued automatically, the domain or subdomain must point to the corresponding Zone server through its DNS records.
However, having HTTPS enabled on the server does not always mean that PrestaShop is configured to use HTTPS on every page of your store. If needed, check these settings using the instructions below.
When do you need this guide?
This guide is primarily intended for existing PrestaShop stores that still use HTTP. A store migrated from another hosting provider may also require changes to its PrestaShop settings, even if HTTPS is already enabled on the Zone server.
If your store already uses HTTPS on every page and works correctly, you do not need to follow the steps below.
1. Check whether HTTPS is enabled on the server
Open your store by entering its address starting with https:// in your browser’s address bar, for example https://yourdomain.eu.
If the store opens without a certificate error, HTTPS is enabled on the server and you can continue with the PrestaShop settings. PrestaShop may still redirect you back to the HTTP address if HTTPS is not enabled in the store’s settings.
If HTTPS is not yet enabled on your web hosting account or subdomain, install a free certificate by following the guide HTTPS and a free SSL certificate – Let’s Encrypt. After the certificate has been issued, HTTPS activation may take up to 15 minutes.
If your browser displays a certificate error, resolve it before proceeding with the next steps. If needed, contact Zone’s customer support.
2. Enable HTTPS in PrestaShop
Before making changes, back up your store’s files and database.
- Log in to your PrestaShop administration panel.
- Open the general settings:
- PrestaShop 1.7, 8 and 9:
Shop Parameters→General. - PrestaShop 1.6:
Preferences→General.
- PrestaShop 1.7, 8 and 9:
- Find
Enable SSL. If a link labelledPlease click here to check if your shop supports HTTPSappears instead of a switch, click it to check HTTPS support. - Set
Enable SSLtoYesand save your changes. - Then set
Enable SSL on all pagestoYesand save again.
Menu and setting names may vary depending on the language of your administration panel.
Both settings must be enabled. Enabling only Enable SSL does not ensure that HTTPS is used throughout your store. The Enable SSL on all pages setting applies HTTPS to every page.
If both settings are already enabled, you do not need to change them.
3. Update addresses in your store’s content if needed
Your store’s content may still contain HTTP references, for example images added to product descriptions or content pages.
If a resource does not load or causes a mixed content warning, change its address from HTTP to HTTPS in the relevant content. For example, replace http://yourdomain.eu/image.jpg with https://yourdomain.eu/image.jpg.
Before changing an address, check that the resource is available over HTTPS. An address belonging to another website cannot always be changed to HTTPS simply by editing its prefix.
If many references need updating or you cannot find where they are stored, ask your store administrator or developer for help.
4. Check that your store works correctly
Open your store using its HTTPS address and check several pages. Make sure that the homepage, categories, product pages, shopping cart and checkout work correctly.
Also check images, the layout, menus, forms and customer account login. The browser should not display certificate errors or mixed content warnings.
If an element does not load or the browser displays a mixed content warning, the theme or a module may contain HTTP references to images, fonts, CSS or JavaScript files.
Fixing these references may require changes to the theme or module settings or files. If you have not edited these files before, ask your store administrator or developer for help.
Proceed to the next step only once your store works correctly with HTTPS.
5. Check HTTP-to-HTTPS redirection
HTTP-to-HTTPS redirection is enabled by default on new web hosting accounts and subdomains.
To check it, open your store using its HTTP address, for example http://yourdomain.eu. Your browser should automatically redirect you to https://yourdomain.eu.
If redirection is not enabled, enable it only after updating the PrestaShop settings and checking that your store works correctly with HTTPS.
Open My Zone → Manage → Webserver. Under Main domain settings or Subdomains, click Redirect traffic to HTTPS for the relevant domain.
This redirects all HTTP addresses on your store to their corresponding HTTPS addresses using a permanent 301 redirect. It also tells search engines that your store’s addresses now use HTTPS.