---
title: "How to Secure Your WordPress Site with HTTPS (SSL Certificate)"
source: "https://docs.nexcess.com/software/give/how-to-get-https-ssl-certificate-wordpress-site/"
description: "If you are using any of our Premium Payment Gateways then we highly recommend you learn how to get HTTPS with an SSL certificate on your site. Enforce HTTPS on…"
vertical: "Software"
area: "Give"
date: "2019-12-12"
last_modified: "2019-12-12"
---

# How to Secure Your WordPress Site with HTTPS (SSL Certificate)

Ensuring your WordPress site runs on HTTPS is essential for protecting user data, improving SEO, and building trust. Many modern hosting providers offer free SSL certificates, making the process easier than ever. Here’s how to secure your site with HTTPS.

## **Why HTTPS Matters**

HTTPS encrypts data, secures transactions, and prevents browsers from flagging your site as “Not Secure.” For online donations, HTTPS is crucial—platforms like GiveWP require it to protect donor information and ensure secure payment processing.

## **1. Check Your Hosting Provider for SSL Support**

Most hosting providers include free SSL certificates, often powered by **Let’s Encrypt**. Check your hosting control panel or contact support to confirm SSL is enabled. If not, follow your host’s instructions—typically, activation requires just a few clicks.

## **2. Enable HTTPS for Your WordPress Site**

Once SSL is active, update WordPress to use HTTPS:

- Go to **Settings > General** in your WordPress dashboard.
- Update the **WordPress Address** and **Site Address** fields to use https:// instead of http://.

## **3. Force HTTPS Across Your Entire Site**

To ensure all traffic uses HTTPS, you need to enforce it sitewide:

### **Option 1: Use a Plugin**

Install **Really Simple SSL** to automatically detect your SSL certificate and configure WordPress for HTTPS, handling redirects and mixed content issues.

### **Option 2: Update .htaccess (For Advanced Users)**

Add the following code to your .htaccess file to redirect all traffic to HTTPS:

## **4. Fix Mixed Content Issues**

Mixed content errors occur when some resources still load over HTTP. To resolve them:

- Use **Better Search Replace Plugin** to replace http://yourdomain.com with https://yourdomain.com in your database.
- Open your browser’s **developer console** to identify and manually update insecure URLs.

## **5. Update External Services**

Ensure external services recognize your HTTPS setup:

- **Google Search Console**: Add your HTTPS site version and resubmit your sitemap.
- **Google Analytics**: Update tracking settings to reflect HTTPS.
- **CDNs**: Configure your Content Delivery Network to serve assets over HTTPS.

## **6. Verify Your HTTPS Setup**

Use tools like **[Why No Padlock?](https://www.whynopadlock.com/)** or **[SSL Labs](https://www.ssllabs.com/)** to check for security gaps and confirm that all site elements load securely.

By following these steps, you ensure your WordPress site is fully protected, delivering a safer experience for users and donors alike.