Recommended Free Tools
To add SSL to WordPress, first install or activate a TLS certificate on the hosting account or web server. Then verify that your canonical hostname opens over HTTPS, change both WordPress URL fields to the HTTPS address, redirect HTTP traffic permanently, repair any HTTP asset links, and test the entire site. WordPress settings alone cannot create a certificate.
Antihost offers managed WordPress hosting with free migration, one-click staging and a 14-day free trial.
What “adding SSL” actually involves
SSL is the older name commonly used for the technology that now uses TLS. The certificate is installed where web traffic is encrypted: your hosting platform, web server, load balancer, CDN, or reverse proxy. WordPress runs behind that layer. Once the server presents a valid certificate for the hostname visitors use, WordPress can generate HTTPS links and accept secure requests.
As an Amazon Associate I earn from qualifying purchases.
WordPress’s official developer documentation describes the requirement plainly: “WordPress is fully compatible with HTTPS when an TLS / SSL certificate is installed and available for the web server to use.” Installing a plugin or changing a URL field does not issue a certificate, bind it to a hostname, or encrypt traffic by itself.
A complete migration has four separate outcomes:
- The certificate is valid for the exact public hostname, including the chosen
wwwor non-wwwform. - WordPress’s WordPress Address (URL) and Site Address (URL) both use the same HTTPS canonical address.
- Requests to the old HTTP address receive a permanent redirect to HTTPS.
- Images, stylesheets, scripts, fonts, embeds, forms, and other stored references no longer load over HTTP.
A padlock on the home page proves only that one page passed a browser’s basic checks. It does not prove that old URLs redirect correctly, that the administration area is secure, or that every template and media file is free of mixed content.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
Decide your canonical HTTPS address first
Choose one public hostname before you install or configure anything. Common choices are https://example.com and https://www.example.com. Both can work, but they must not compete as equal canonical addresses.
| Decision | Example | What to verify |
|---|---|---|
| Non-www canonical | https://example.com |
The certificate covers example.com; the www hostname redirects to it. |
| WWW canonical | https://www.example.com |
The certificate covers www.example.com; the bare hostname redirects to it. |
| Additional hostnames | https://shop.example.com |
Every hostname that serves content has a matching certificate name and an intentional redirect policy. |
Do not change WordPress’s URLs until the selected HTTPS hostname already responds successfully. If the certificate is missing, the web server is pointing at the wrong site, or DNS still reaches an old server, changing the settings can make the dashboard inaccessible.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minutePrerequisites and a safe starting point
- Administrative access to the hosting control panel, web server, CDN, or reverse proxy that terminates TLS.
- WordPress administrator access, or file access to
wp-config.phpif the URL fields are managed as constants. - A current backup of the database and files, including uploads, themes, plugins, and configuration.
- A list of the site’s important paths: the home page, representative posts and pages, search, forms, media attachments, login, and
/wp-admin/. - Knowledge of whether another system terminates TLS before the request reaches PHP, such as a CDN, load balancer, or hosting proxy.
Schedule the switch when you can test immediately afterward. Keep an existing administrator session open in a separate tab, but do not assume it will survive a URL change. If anything fails, you need a way to edit the database, restore a backup, or change configuration files without relying on the WordPress dashboard.
Choose who will manage the certificate
The right installation path depends on who controls the web server. The certificate itself may be issued automatically, uploaded as files, or managed by a provider; the WordPress steps remain broadly the same.
| Approach | Certificate and renewal responsibility | Redirect and server control | Mixed-content repair | Best fit |
|---|---|---|---|---|
| Managed hosting panel | The host activates issuance and usually handles renewal; exact automation depends on the plan. | Often a toggle or host-level rule, with limited server directives. | WordPress search-and-replace or an HTTPS remediation plugin may still be required. | Sites where the host controls the web server. |
| Self-managed server | The server administrator installs certificate and private-key files and maintains renewal automation. | Full control over virtual hosts, 301 rules, headers, and logs. | Database, theme, plugin, and template changes are handled by the site team. | Dedicated servers or custom stacks. |
| CDN or reverse proxy termination | The proxy holds the public certificate; the origin may use a separate connection policy. | Redirects can occur at the edge, but origin forwarding must preserve the HTTPS state. | WordPress still needs correct URL values and secure asset references. | Sites already fronted by a CDN, load balancer, or edge proxy. |
Do not choose a workflow solely because it includes a WordPress plugin. A plugin can help locate or rewrite stored URLs, but it cannot replace correct certificate installation, hostname configuration, or proxy behavior.
Install or activate the certificate at the hosting layer
Managed hosting control panel
- Open the hosting panel’s domain, security, or SSL/TLS section.
- Select the exact domain and any required subdomains. Confirm whether the panel is issuing a new certificate or attaching an existing one.
- Activate the certificate and wait until the panel reports that issuance and installation completed. If domain validation is required, complete the displayed DNS or HTTP validation step first.
- Enable the host’s HTTPS or “force SSL” option only after the HTTPS virtual host responds. If the panel offers separate switches for certificate activation and redirection, treat them as separate steps.
- Open the canonical HTTPS address in a private browser window. Confirm that the expected WordPress site, not a holding page or another virtual host, appears.
Record whether renewal is automatic and where failure notices are sent. A certificate that works today but expires without an owner is not a finished configuration.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
Self-managed web server
- Obtain a certificate whose names include the public hostname. Keep the private key readable only by the account or service that needs it.
- Install the certificate chain and key in the web server’s TLS configuration. The exact directives differ by server software, so use that server’s current documentation and syntax.
- Create or update the HTTPS virtual host for the site. Set the correct document root, PHP handler, and server name so HTTPS requests reach the same WordPress installation as HTTP requests.
- Reload the web server and inspect its error log. A successful reload does not necessarily mean the correct certificate is being served for every hostname.
- Test the hostname over HTTPS before changing WordPress’s stored URLs.
Never paste a private key into a WordPress post, theme setting, support ticket, or publicly readable file. Certificate files and private keys belong in the server’s protected configuration area.
CDN, load balancer, or reverse proxy
Install the public certificate on the component that accepts the browser’s TLS connection. Decide whether the connection from that component to the origin is also HTTPS; either design can work, but it must be intentional. The proxy must pass the original protocol state to WordPress, commonly through the HTTP_X_FORWARDED_PROTO request header. WordPress then needs configuration that trusts that signal for requests coming through the known proxy.
If the proxy terminates TLS but the origin receives an unmarked HTTP request, WordPress may believe every visitor arrived over HTTP. A forced-HTTPS rule then redirects the visitor repeatedly, creating an infinite redirect loop. Configure protocol forwarding and the corresponding WordPress recognition before enabling the redirect.
Verify the HTTPS virtual host before touching WordPress
Use a private browser window and test the exact canonical hostname. Check the certificate details in the browser and confirm that the name, validity status, and issuing chain are accepted without warnings. Then test the alternate hostname, if one exists, and note whether it serves the site or redirects.
- The HTTPS page loads the correct site and not a default server page.
- The address bar remains on the intended hostname.
- The certificate name matches that hostname.
- The server returns a normal successful response instead of a certificate, DNS, or handshake error.
- The HTTP version still loads for now; this lets you make the WordPress change without being locked out by a premature redirect.
If HTTPS shows a different installation, stop and correct DNS or virtual-host routing. Changing WordPress URLs while the wrong site answers can write the HTTPS address into the wrong database and complicate recovery.
Change both WordPress URL settings
In the dashboard, go to Settings → General. Change both fields to the same HTTPS canonical address, with no trailing slash:
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
- Set WordPress Address (URL) to the HTTPS location of the WordPress core files.
- Set Site Address (URL) to the HTTPS public address visitors should use.
- Verify spelling, hostname, and scheme. For example, use
https://example.com, not a mixture ofhttp://,www, and non-www. - Save the changes, then sign in again if WordPress ends the current session.
These fields are related but not identical. The WordPress Address identifies where the core installation resides; the Site Address identifies the public URL. In a standard single-site installation they are commonly the same, but each must carry the HTTPS scheme after migration.
When the fields are locked or revert
Open wp-config.php and look for WP_HOME or WP_SITEURL constants. When present, they override the values stored in the database, so editing the dashboard fields may appear to do nothing. Change the constants deliberately, preserve the existing syntax, and protect the file afterward.
WordPress core includes wp_update_urls_to_https(), which can update the home and siteurl options programmatically. That update can be reverted when WordPress does not recognize HTTPS as active, including situations where constants override the options. If values keep switching back, fix certificate detection and proxy forwarding before repeatedly running an update.
Redirect every HTTP request to HTTPS
After the HTTPS site works and the WordPress URLs are correct, add a permanent redirect at the layer that handles the request: the hosting platform, web server, CDN, or reverse proxy. A 301 is the normal migration choice because it tells browsers and crawlers that the HTTPS URL is the lasting address.
Preserve the path and query string during the redirect. A request for an old post should go to the same post over HTTPS, not merely to the home page. Apply the rule to both the canonical and alternate hostname so visitors cannot continue using an unsecured variant.
Test the redirect with a private browser window and a header-checking tool you control. Confirm that:
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
http://returns one redirect to the chosen HTTPS hostname.- The alternate
wwwor non-wwwform does not create a redirect chain. - The final response is the expected page, with its original path intact.
- HTTPS requests are not redirected back to HTTP.
Avoid stacking several redirect systems that each rewrite the URL differently. For example, a host-level rule, a plugin rule, and a proxy rule can create extra hops or loops. Choose one authoritative layer for the canonical redirect and disable conflicting rules.
Repair mixed content
Mixed content occurs when an HTTPS document requests a resource over HTTP. Browsers may block scripts, stylesheets, frames, fonts, or form submissions, while images can remain visible but still generate security warnings. The references can be stored in post content, widget text, theme files, plugin settings, serialized options, custom fields, menus, or third-party embeds.
Find the remaining HTTP references
- Open the browser developer tools and inspect the Console and Network panels on the home page and representative templates.
- Search the WordPress database for the old
http://hostname. Include post content, options, metadata, and custom fields rather than searching only visible page text. - Inspect theme and plugin settings for hard-coded script, stylesheet, image, API, iframe, or font URLs.
- Check menus, widgets, reusable blocks, page-builder data, and email or form integrations that may store absolute URLs.
- Review external embeds. If the provider supports HTTPS, update the embed; if it does not, determine whether the content can be removed or replaced.
Replace only the old site URLs that you control. Do not blindly rewrite every occurrence of http:// in the database: some values are documentation, webhook endpoints, local development addresses, or third-party services that require a different treatment.
Use a remediation tool carefully
An HTTPS or mixed-content remediation plugin can scan and rewrite references, and some tools provide temporary front-end fixes while you repair the underlying data. Treat that as a migration aid, not proof that the database and theme are clean. Take a database backup first, preview replacements where possible, and remove or disable temporary compatibility behavior after permanent URLs are corrected.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteCheck code and generated assets
Search theme templates and custom code for protocol-specific URLs. A protocol-relative URL such as //example.com/file.js follows the current page scheme, but replacing it with an explicit HTTPS URL is usually clearer when you control the resource. Regenerate caches, minified assets, and page-builder output after changing source values; otherwise an old cached file may continue to produce warnings.
Test the whole migration
Run the following checks from a private session and, where possible, from a second network. Test logged-out and logged-in states because caching and authentication paths can differ.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
- Home page: loads over HTTPS with no blocked resources in the browser console.
- Posts and pages: open several content types, including an older page with images and embeds.
- Media: open images, downloadable files, video embeds, and attachment URLs.
- Forms: submit a contact, login, search, or checkout form and confirm that the action remains HTTPS.
- Administration: sign in at
/wp-admin/, open the editor, upload media, and save a harmless setting. - Canonical redirects: test HTTP, alternate hostname, uppercase or legacy paths where relevant, and confirm there is no loop.
- Feeds and APIs: check feeds, REST endpoints, XML sitemaps, and integrations that publish absolute URLs.
- Cookies: verify that authentication and session cookies are marked for secure transport where your configuration expects it.
- Caches: purge host, CDN, page, and browser caches, then repeat the checks.
Record failures by URL, browser error, response code, and the layer responsible. “The site has a padlock” is not a sufficient acceptance test.
Troubleshoot common failures
| Symptom | Likely cause | Corrective action |
|---|---|---|
| Certificate warning | The certificate name does not match, is incomplete, expired, or is not installed on the answering server. | Check the hostname, certificate chain, renewal status, and which virtual host serves the request. |
| Dashboard redirects endlessly | A proxy terminates TLS but WordPress does not receive or trust the forwarded HTTPS state. | Configure protocol forwarding and WordPress recognition for the trusted proxy; then retest. |
| Site redirects to the wrong domain | URL fields, constants, canonical rules, or a proxy disagree about the hostname. | Choose one canonical address and align every layer with it. |
| Some images or scripts fail | Stored HTTP references, hard-coded template URLs, or blocked third-party resources. | Use console and database searches to identify each source, update controlled URLs, and replace unsupported embeds. |
| URL fields revert to HTTP | WP_HOME/WP_SITEURL constants override options, or WordPress cannot detect HTTPS. |
Inspect wp-config.php and proxy headers; do not keep repeating the dashboard change. |
| Old HTTP pages show 404 errors | The redirect rule is missing, path preservation is broken, or a rewrite rule is too broad. | Test the exact old path and adjust the authoritative server or proxy redirect. |
If you lose dashboard access after changing the URLs, restore the previous values through the database or wp-config.php, fix HTTPS detection, and then repeat the migration in the correct order. A backup gives you a safer rollback than editing random options.
Plan certificate renewal and ongoing maintenance
Certificate issuance is only the first event in its lifecycle. Identify who receives renewal alerts, which system performs renewal, and how you will verify that the renewed certificate is installed on every public hostname. Managed hosts may automate this; self-managed servers require an explicit renewal process and a reload of the web server or proxy when the certificate changes.
Keep the redirect and proxy configuration documented. If DNS, hosting, CDN, or server ownership changes, recheck certificate coverage, forwarded-protocol handling, and the canonical hostname. Periodically scan representative pages for newly introduced HTTP references after theme or plugin changes.
Final migration checklist
- Back up the database and files.
- Select one HTTPS canonical hostname.
- Install or activate a certificate at the hosting, server, or proxy layer.
- Verify that the correct virtual host serves that hostname over HTTPS.
- Set both WordPress URL fields to the same HTTPS address, without a trailing slash.
- Resolve any
wp-config.phpconstants that override those fields. - Configure one authoritative permanent redirect from HTTP and the alternate hostname.
- Configure forwarded-protocol handling when TLS terminates at a proxy.
- Find and repair HTTP references in content, settings, themes, plugins, and embeds.
- Test pages, media, forms, login, administration, redirects, feeds, APIs, and caches.
- Document renewal ownership and monitor for certificate or mixed-content failures.
When every item passes, WordPress is operating as an HTTPS site rather than merely displaying a secure home page. The certificate protects the transport, the URL settings tell WordPress which address to publish, the redirect closes the HTTP path, and mixed-content cleanup ensures the page’s own resources use the same secure scheme.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →
