How to Force HTTPS Redirects in cPanel (Secure Your Website Automatically)

Enabling HTTPS is essential for protecting your visitors, boosting SEO rankings, and ensuring all data is securely encrypted. Fast2host provides FREE SSL certificates through AutoSSL on all cPanel servers, but after an SSL certificate is installed, you may still need to force your website to redirect from http:// to https://.

This guide explains how to force HTTPS using:

• ✔ cPanel’s Redirects tool
• ✔ The .htaccess file (recommended)
• ✔ WordPress Toolkit “Force HTTPS” option

---

1. Ensure SSL Is Installed (AutoSSL)

Before forcing HTTPS, your domain must already have a valid SSL certificate. Fast2host provides this automatically through AutoSSL.

To check the SSL status:

cPanel → Security → SSL/TLS Status

If the domain does NOT have a green lock, click:

Run AutoSSL

✔ Once the certificate is installed, continue below.

---

2. Forcing HTTPS Using cPanel Redirect Tool (Easy Method)

Inside your cPanel:

cPanel → Domains → Redirects

1. Select Permanent (301) redirect
2. Select your domain from the dropdown
3. Enter your domain WITHOUT http (example: yourdomain.com)
4. Set the redirect to: https://yourdomain.com/
5. Click Add

This creates an automatic redirect for your entire domain.

---

3. Force HTTPS Using .htaccess (Recommended)

This method is faster, more reliable, and compatible with most platforms including WordPress, Laravel, Joomla, Drupal, and custom PHP sites.

Edit your site’s .htaccess file located in:

/public_html/.htaccess

Add this code at the top:

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [L,R=301]
</IfModule>

✔ All HTTP pages will now redirect to HTTPS automatically.

---

4. Force HTTPS for WordPress Sites (WordPress Toolkit)

If your site is built with WordPress, cPanel makes this even easier.

cPanel → WordPress Toolkit → (Select Your Site)

Enable:

“Force HTTPS”

WordPress Toolkit will update URLs, enforce HTTPS redirection, and fix mixed-content warnings (optional toggle available).

✔ This is the best method for WordPress websites.

---

5. Troubleshooting HTTPS Redirect Problems

• Redirect loops → Two redirect rules may conflict. Remove duplicate rules.
• Mixed content warnings → Images/scripts still using http://.
• WordPress still loading HTTP → Update URLs in:

  Settings → General → Site URL

• .htaccess not working → Ensure mod_rewrite is enabled (it is by default on Fast2host).

---