--- title: "Configuring HTTPS – WordPress" canonical_url: "https://www.zone.eu/support/kb/configuring-https-wordpress/" post_type: "ht_kb" published: "2026-10-13T10:28:24+00:00" modified: "2026-10-13T10:28:24+00:00" author: "kati" taxonomies: ht_kb_category: - name: "Security" url: "https://www.zone.eu/support/kb-categories/security/" - name: "Wordpress" url: "https://www.zone.eu/support/kb-categories/wordpress-en/" --- # Configuring HTTPS – WordPress HTTPS is a secure connection that encrypts the information exchanged between a website visitor’s browser and the server. It helps protect usernames, passwords and data entered into forms from interception and modification. HTTPS uses the TLS protocol to protect data. A standard HTTP connection does not encrypt data, which means that someone else on an insecure network may be able to read or modify it. ### You do not need to enable HTTPS separately for a new WordPress website **HTTPS is enabled on the server by default for a WordPress website installed on a new web hosting account or a new subdomain.** A free Let’s Encrypt certificate and HTTP-to-HTTPS redirection are configured automatically. You do not need to enable HTTPS separately in the server management panel or order a certificate manually. For the certificate to be issued automatically, the domain or subdomain must point to the corresponding Zone server through its DNS records. ### When do you need this guide? This guide is primarily intended for existing WordPress websites that still use HTTP. A website migrated from another hosting provider may also require changes to its WordPress settings, even if HTTPS is already enabled on the Zone server. **If your website already uses HTTPS and works correctly, you do not need to follow the steps below.** ### What do you need to do to start using HTTPS? #### 1. Check whether HTTPS is enabled on the server Open your website by entering its address starting with `https://` in your browser’s address bar, for example `https://yourdomain.eu`. If the website opens without a certificate error, HTTPS is enabled on the server and you can continue with the WordPress settings. WordPress may still redirect you back to the HTTP address if its settings contain the old address. If HTTPS is not yet enabled on your web hosting account or subdomain, install a free certificate by following the guide [HTTPS and a free SSL certificate – Let’s Encrypt](https://www.zone.eu/support/kb/https-and-free-ssl-certificate-lets-encrypt/). After the certificate has been issued, HTTPS activation may take up to 15 minutes. If your browser displays a certificate error, resolve it before proceeding with the next steps. If needed, contact [Zone’s customer support](mailto:info@zone.ee). #### 2. Change the WordPress addresses to HTTPS 1. Log in to your WordPress dashboard. 2. Open `Settings` → `General`. 3. In the `WordPress Address (URL)` and `Site Address (URL)` fields, change the beginning of the address from `http://` to `https://`. 4. Leave the rest of the address unchanged and save your changes. WordPress may log you out after saving. Log in again using the HTTPS address, for example `https://yourdomain.eu/wp-admin`. If both fields already contain HTTPS addresses, you do not need to change them. If the fields cannot be edited, ask your website administrator for help — the addresses may be defined in the WordPress configuration file. #### 3. Update addresses in your website content if needed Your website content and settings may still contain HTTP references to images, links or other resources. You can use a plugin such as [Better Search Replace](https://wordpress.org/plugins/better-search-replace/) to update them. 1. Install and activate the plugin from the WordPress menu `Plugins` → `Add New`. 2. Open `Tools` → `Better Search Replace`. 3. Enter your website’s old address as the search text, for example `http://yourdomain.eu`. 4. Enter the same address with HTTPS as the replacement, for example `https://yourdomain.eu`. 5. Select the database tables belonging to this WordPress website and first perform a *dry run*, which does not change any data. 6. If the entered addresses and selected tables are correct, run the actual replacement. Replace only your website’s full address. Do not replace every occurrence of `http://` on its own, as other websites’ addresses may not work with HTTPS. Once the changes are complete, you can deactivate and delete the plugin. #### 4. Check that your website works correctly Open your website using its HTTPS address and check several pages. Make sure that images, the layout, menus and forms work correctly and that the browser does not display any security warnings. If an element does not load or the browser displays a *mixed content* warning, the theme or an older plugin may contain HTTP references to images, fonts, CSS or JavaScript files. Fixing these references may require changes to the theme or plugin files. The video tutorial also includes an example of updating references. If you have not edited theme files before, ask your website administrator or developer for help. Proceed to the next step only once your website works correctly with HTTPS. #### 5. Check HTTP-to-HTTPS redirection HTTP-to-HTTPS redirection is enabled by default on new web hosting accounts and subdomains. To check it, open your website using its HTTP address, for example `http://yourdomain.eu`. Your browser should automatically redirect you to `https://yourdomain.eu`. If redirection is not enabled and your website works correctly with HTTPS, open `My Zone` → `Manage` → `Webserver`. Under `Main domain settings` or `Subdomains`, click `Redirect traffic to HTTPS` for the relevant domain. This redirects all HTTP addresses on your website to their corresponding HTTPS addresses using a permanent 301 redirect. It also tells search engines that your website’s addresses now use HTTPS.