How to Move a WordPress Site Over to HTTPS / SSL? Handy Checklist and Complete Guide

Handy Checklist and Complete Guide Moving over to HTTPS (How to Migrate from HTTP to HTTPS)

Hello dear Cruncher!! Today we enabled HTTPS site-wide on Crunchify. It was something I wanted to do since last 6 months and finally made my mind to move to HTTPS.

You must have seen and heard a lot about moving to HTTPS secure connection everywhere so I’m not going to spend lot time on explaining but below.

Have any of below questions? Then you are at right place:

• Migrating your WordPress website from HTTP to HTTPS
• In-Depth HTTP to HTTPS Migration Guide for WordPress
• How to Add SSL and HTTPS in WordPress

Here are few key advantages moving to HTTPS on WordPress

1. As per Google Webmaster blog, it has SEO advantage. Google SERP (Search Engine Result Page) will honor HTTPS as a ranking signal and for any blogging business, it’s a big deal
2. Trust – More secure website experience avoiding man-in-middle attack.
3. If you have Shop, Cart and Checkout pages then it helps encrypts all communication, including site addresses, which guards credit/debit card numbers, social security number (SSN), browsing history, etc.
4. Better company/site reputation and identity verification.

Now here are the the real questions for moving to HTTPS on WordPress:

Question-1. How and What to prepare before moving to HTTPS

Step-1

Backup your Database. I use VaultPress realtime backup solution but still perform a simple DB backup.

Step-2

Buy SSL Certificate. It’s just $9 at Namecheap. If you are using CDN then buy SSL cert for your CDN domain too. In my case I purchased Two SSL certificates.

For us it’s https://crunchify.com and https://cdn.crunchify.com.

There are few options for you. You could buy wild card multiple subdomain certificate or you could purchase two single domain certificates which I got.

Step-3

Install SSL Certificates:

• On your Origin Domain: Follow detailed steps: http://crunchify.me/2aAzV8A.
• On CDN: I use MaxCDN as my CDN provider. Go to EdgeSSL and install your certificate.
• I’ve enabled HTTP/2 too.

Step-4

Change Origin URL to https:// under your Zone Configuration tab.

Step-5

Make sure https://crunchify.com and https://cdn.crunchify.com is working correctly.

Question-2. List of all tasks and complete guide moving WordPress Site to HTTPS

Step-1

1. Go to your site’s admin panel
2. Click on Settings
3. Click on General
4. Change WordPress Address (URL)
5. Change Site Address (URL)

Step-2

• Download plugin Better Search Replace
• Go to Tools -> Better Search Replace page
• Search for string: http://crunchify.com and replace it with https://crunchify.com
  • This will replace all your site’s http:// reference with https://

Step-3

Change to HTTPS URL on WP Super Cache -> CDN tab.

Question-3. How to fix issues happen after moving to HTTPS?

Fix Mixed Content Warnings. What does that means? If your site is loading non-https contents then you may not see green Padlock on your site.

• I would suggest to keep looking for http URL which is loading on your site and move it to https.
• Try following article on How to fix yellow pad lock issue?

Question-4. What are the post HTTPS verification and miscellaneous steps

Step-1

Go to Why No Padlock site and verify if everything is fine.

Step-2

It’s time to force everything over to HTTPS. Add below code to your site’s .htaccess file.

# Force HTTPS everywhere - Crunchify Tips
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

This code will redirect all non-secure http incoming urls to secure https.

Step-3

If you have followed this tutorial to Fix CDN and Image index issue then change URL in functions.php file too.

Step-4

Once you are done with all above steps and you verify your site’s most important pages, try changing your site URLs to all of your Social Profile, Webmaster tools, etc.

Here is a complete list of sites you need to update URL after moving site to HTTPS.

No need to submit a change of address in Google Search Console if you are only moving your site from HTTP to HTTPS.

1. Facebook Page Profile
2. Google+ Profile URL
3. Twitter, Pinterest, Flipboard Profile URL
4. WordPress.org and WordPress.com site Profile
5. Google Webmaster Tool / Search Console
   • Add new site: https://crunchify.com
   • Verify new site
   • Add your sitemap
6. Update robots.txt file and change sitemap URL. Sample: https://crunchify.com/robots.txt
7. Change Google Analytics URL
8. Submit new Sitemap to Bing Webmaster tool and Yandex
9. And more if you have more accounts

Reading "HTTPS as a ranking signal": http://t.co/nEjcGhm8bJ

— Matt Cutts (@mattcutts) August 7, 2014

Is there any immediate implications?

• We may see drop in search. This fluctuations can happen with any bigger site change and moving to https from http is a big change.
• How long will a move from HTTP to HTTPS take? It may take up-to few weeks or more in some cases.
• Do I have to remove http version of site from Google Search Console? I believe, i’m going to do that after couple of months.

The post How to Move a WordPress Site Over to HTTPS / SSL? Handy Checklist and Complete Guide appeared first on Crunchify.

Author: App Shah