Enable cPanel HTTPS Redirects After Verifying Certificates

cPanel’s Force HTTPS Redirect control requests HTTP-to-HTTPS redirection for eligible hosted domains. It does not issue a certificate, repair mixed content, secure an entire application or guarantee higher search rankings.

Verify TLS before enforcement

Confirm the intended hostname reaches the correct service and has a valid publicly trusted certificate covering the names visitors use. If AutoSSL is available, inspect actual issuance and renewal rather than assuming a submitted request succeeded. Do not bypass a certificate warning or enable redirects to hide it.

Use the supported control

1. Enter verified HTTPS cPanel through the actual hosting service. Do not use the older plaintext port-2082 login example.
2. Open Domains and locate the exact intended domain.
3. Review eligibility and the Force HTTPS Redirect toggle. Aliases and certificate state can affect availability; the installed release/provider determines the controls shown.
4. Enable the intended rule, or use reviewed bulk selection only for domains already verified individually.
5. Inspect actual HTTP and HTTPS responses and retain the prior setting for rollback.

Avoid conflicting redirect layers

Review application URLs, existing .htaccess rules, reverse proxies and CDN TLS mode. Multiple independent enforcement rules can cause loops or chains. Do not disable TLS verification, trust arbitrary forwarding headers or change every account’s settings as a shortcut.

Check representative nested paths, query strings, login and assets after the change. Fix mixed-content references separately. HTTPS source requests still need valid TLS even when another redirect ultimately changes their host.

Disable only the exact toggle if a controlled rollback is required, then verify the new response while accounting for browser/permanent-redirect caches. This documentation makes no universal current certificate-license or account-entitlement promise.

References: cPanel Domains and HTTPS controls and redirect guidance.

Reviewed October 16, 2026. No certificate, cPanel redirect or customer application was changed or tested.