Once you have an SSL certificate, you want every visitor to use the secure https version of your site, not the insecure http one. Forcing HTTPS keeps connections encrypted, shows the padlock, and helps SEO. This guide explains how to do it in DirectAdmin.
First, confirm SSL is active #
Before forcing HTTPS, make sure a valid SSL certificate is installed for your domain (Disoh includes free Let’s Encrypt certificates). If you force HTTPS without a certificate, visitors will see security warnings.
Option 1: DirectAdmin SSL setting #
- Log in to DirectAdmin.
- Open your domain’s SSL Certificates or domain setup.
- Enable the option to force or redirect to HTTPS if available.
- Save.
Option 2: WordPress #
If your site runs WordPress, set both the WordPress Address and Site Address to the https version under Settings > General, and use a plugin or setting to force HTTPS site-wide.
Option 3: .htaccess redirect #
For other sites, add a redirect rule to your .htaccess file in public_html that sends all http requests to https. Support can provide the exact rule for your setup if you are unsure.
After enabling #
- Visit your site with http and confirm it redirects to https.
- Check for the padlock and no “not secure” warning.
- Fix any mixed-content warnings by updating links to https.
Troubleshooting #
- Redirect loop: avoid forcing HTTPS in more than one place at once.
- Security warning: confirm the SSL certificate is valid and active.
Need help? #
If HTTPS will not force correctly, our support team can set it up for you over live chat.
