Forcing HTTPS Usage for Your Website

Forcing HTTPS ensures that all traffic to your website is securely encrypted, providing better security for visitors and improving SEO rankings. Follow these steps to force HTTPS on your website using Plesk.

Step 1: Log in to Plesk #

1. Open your web browser and go to the Plesk login page.
2. Enter your credentials and click Log in.

#

Step 2: Navigate to the Websites & Domains Section #

1. In the Plesk dashboard, locate and click on Websites & Domains.
2. Select the domain you want to secure.

Step 3: Access Hosting Settings #

1. Under the selected domain, click Hosting Settings.
2. This will open the hosting configuration page.

Step 4: Enable HTTPS Redirect #

1. In the Hosting Settings page, locate the Security section.
2. Check the box for Permanent SEO-safe 301 redirect from HTTP to HTTPS.
3. Ensure the SSL/TLS certificate dropdown has the correct certificate selected for your domain.
4. Click OK or Apply to save the changes.

#

Step 5: Verify the Redirect #

1. Open a web browser and enter your domain using http:// (e.g., http://yourdomain.com).
2. Confirm that the browser automatically redirects to https://.
3. Check for the padlock icon in the address bar to ensure the connection is secure.

Alternative Method: Using .htaccess #

If your hosting setup requires manual configuration or you need custom rules, you can force HTTPS using the .htaccess file:

1. Navigate to the File Manager in Plesk.
2. Open the httpdocs folder and locate the .htaccess file.
3. Add the following lines to the file: <pre>
   <code>
   RewriteEngine On
   RewriteCond %{HTTPS} !=on
   RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]</code> </pre>
4. Save the changes and test the redirect as described above.

Tips #

• Always back up your .htaccess file before making changes.
• Use a 301 redirect for SEO benefits, as it informs search engines of the permanent change.
• Verify that your SSL certificate is valid and installed correctly before enabling HTTPS.