How to force HTTPS using the .htaccess file

Sometimes it's necessary to make sure your website’s visitors use the SSL encrypted connection. If you’re not familiar with SSL and would like to know more please review our article “What is SSL and Why is it important?” 

Forcing visitors to use SSL can be accomplished through your .htaccess file using mod_rewrite. To force all web traffic to use HTTPS insert the following lines of code in the .htaccess file in your website’s root folder. 

Important: If you have existing code in your .htacess, add this above where there are already rules with a similar starting prefix.

RewriteEngine On 
RewriteCond %{SERVER_PORT} 80 
RewriteRule ^(.*)$ https://www.example.com/$1 [R,L]

Be sure to replace www.example.com with your actual domain name.

To force a specific domain to use HTTPS, use the following lines of code in the .htaccess file in your website's root folder:

RewriteEngine On 
RewriteCond %{HTTP_HOST} ^example\.com [NC]
RewriteCond %{SERVER_PORT} 80 
RewriteRule ^(.*)$ https://www.example.com/$1 [R,L]

Make sure to replace example\.com with the domain name you're trying force to https. Additionally, you need to replace www.example.com with your actual domain name.

If you want to force SSL on a specific folder you can insert the code below into a .htaccess file placed in that specific folder:

RewriteEngine On 
RewriteCond %{SERVER_PORT} 80 
RewriteCond %{REQUEST_URI} folder 
RewriteRule ^(.*)$ https://www.example.com/folder/$1 [R,L]

Make sure you change the folder reference to the actual folder name. Then be sure to replace www.example.com/folderwith your actual domain name and folder you want to force the SSL on.

Was this answer helpful?

 Print this Article

Also Read

Redirect site to https once you have SSL

Once you get an SSL, to use it on your site you need to enable it within your code. This little...

How to Purchase an SSL

For more information about SSL certificates and when you might need one for your website, please...

Let's Encrypt SSL certificate overview

Safety and security is a vital aspect to consider when hosting your website on the internet. It...

How To Enable SSL on Your WordPress Site

Before you Begin you Need the Following: An SSL Certificate has been purchased, installed and...

Why no padlock with my SSL enabled?

Are you pulling your hair out trying to find out why your secure page is not fully secure? Here's...