How to Force SSL

After installing SSL on your site, if you don't see the secure padlock icon or "HTTPS" preceding your domain, it might still load with "HTTP" and display an unsecured warning to visitors. This issue often arises from having insecure links on your site, but it can be resolved by manually enforcing SSL.

First, ensure that SSL is properly installed on your site. You can verify this by using tools like www.sslshopper.com. After confirming the SSL installation, use www.whynopadlock.com to diagnose why the browser isn't displaying a secure padlock for your site.

To address this issue:

1. Enter your site’s full URL on WhyNoPadLock to get a detailed report on your SSL status.

2. If advised to enforce HTTPS, note down the provided code for later use.

Next, to implement HTTPS enforcement:

1. Navigate to the File Manager in your hosting panel.

2. Access the public_html folder and find the .htaccess file. If it’s not visible, you may need to create it or adjust your settings to unhide it.

3. Look for RewriteEngine On within the file, then add the following lines of code directly below it, replacing yourdomain.com with your actual domain name:
   RewriteEngine On

   RewriteCond %{HTTP_HOST} yourdomain.com [NC]

   RewriteCond %{SERVER_PORT} 80

   RewriteRule ^(.*)$ https://yourdomain.com/$1 [R,L]

4. Save your changes to the .htaccess file.

Finally, refresh your browser to see the changes on your site. You can also recheck your SSL status on WhyNoPadlock to confirm the security padlock is now visible.