How to force HTTPS on your WordPress site Print

1. Make sure the domain has an SSL certificate (see How to install a free SSL certificate).
2. In WordPress, go to Settings › General.
3. Change both WordPress Address (URL) and Site Address (URL) to start with https:// and save. You'll be logged out; log back in.
4. Replace old http:// links stored in the database using Better Search Replace (see How to update WordPress URLs after a migration), replacing http://yourdomain.co.uk with https://yourdomain.co.uk.
5. Turn on Force HTTPS Redirect for the domain in cPanel under Domains.
6. Clear any caching plugin.

Still seeing "not secure"?

This is usually "mixed content", where an image or script still loads over http. Use your browser's developer tools (F12 › Console) to see which files, then update them, often in theme settings, widgets or page builder content.