How to Add an SSL Certificate to WordPress (2026)

How to Add an SSL Certificate to WordPress

SSL (Secure Sockets Layer) encrypts data between your site and visitors. The padlock icon in browsers signals a secure connection. Google uses HTTPS as a ranking factor, and modern browsers warn users about non-HTTPS sites. Every WordPress site needs SSL.

SSL on SiteICO Hosting

If you're hosting on SiteICO, SSL is handled automatically. SiteICO uses Caddy with On-Demand TLS — SSL certificates are provisioned via Let's Encrypt the first time a visitor hits your domain. No manual steps required. Your site is HTTPS from day one.

Update Your WordPress Site URL

After SSL is active, update your WordPress URLs. Go to Settings → General and change both the WordPress Address and Site Address from http:// to https://. Click Save Changes.

Set Up HTTP to HTTPS Redirect

Ensure all HTTP traffic redirects to HTTPS. On SiteICO, this is handled at the Caddy gateway level automatically. On other hosts, add these lines to your .htaccess file:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Fix Mixed Content Errors

Mixed content errors occur when your HTTPS page loads resources (images, scripts, stylesheets) over HTTP. Install the Really Simple SSL plugin — it automatically fixes most mixed content issues by rewriting HTTP URLs to HTTPS. For persistent issues, check your theme and plugin settings for hardcoded HTTP URLs.

Verify SSL Is Working

• Visit your site — the browser should show a padlock icon
• Check for mixed content warnings in Chrome DevTools (F12 → Console)
• Use SSL Labs (ssllabs.com/ssltest/) to verify your certificate grade