- HTTP vs HTTPS - What are they, and what\u2019s the difference?<\/a><\/li>
- HTTP (Hypertext Transfer Protocol)<\/a><\/li>
- HTTPS (Hypertext Transfer Protocol Secure)<\/a><\/li>
- Why switch to HTTPS?<\/a><\/li>
- Security<\/a><\/li>
- SEO<\/a><\/li>
- User experience<\/a><\/li>
- Steps to switch from HTTP to HTTPS<\/a><\/li>
- Backup your website!<\/a><\/li>
- Set up a staging site & prepare on-page changes<\/a><\/li>
- Getting an SSL certificate<\/a><\/li>
- Installing your SSL certificate<\/a><\/li>
- Publishing the staging site<\/a><\/li>
- Post-switch changes<\/a><\/li>
- Monitoring your traffic<\/a><\/li>
- Summary \/ Checklist<\/a><\/li>
- Your site is secure!<\/a><\/li><\/ul><\/div>\n
HTTP vs HTTPS – What are they, and what\u2019s the difference?<\/strong><\/h2>\n
In your online adventures, you might have noticed that some website URLs start with \u201chttps:\/\/\u201d while others start with \u201chttps:\/\/\u201d. Although this may seem like a minor difference, the additional \u201cs\u201d has some important implications for websites and their visitors.<\/p>\n
HTTP (Hypertext Transfer Protocol)<\/strong><\/h3>\n
HTTP has been the foundation of data communication on the web since the late nineties. It facilitates the transfer of information between your web browser and the server hosting the website you’re visiting, allowing you to watch funny dog videos on YouTube or read another phenomenal SEO article on the Seobility blog. \ud83d\ude09<\/p>\n
The main downside of HTTP, however, is that it transfers information in plain text format, making it very easy for hackers to steal sensitive data while it\u2019s being sent from the browser to the server.<\/p>\n
![\"not](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/not-secure.png\")
<\/p>\nThis is where HTTPS comes in\u2026<\/p>\n
HTTPS (Hypertext Transfer Protocol Secure)<\/strong><\/h3>\n
HTTPS<\/a> is the secure counterpart of HTTP. It incorporates an extra layer of security through the use of TLS (Transport Layer Security)<\/a> encryption protocols (formerly referred to as SSL, Secure Socket Layer). This encryption layer ensures that data exchanged between your browser and the server is sent in an unreadable format instead of plain text, rendering the content useless to potential eavesdroppers.<\/p>\n
![\"Hypertext](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/Hypertext-Transfer-Protocol-Secure.png\")
<\/p>\nWhy switch to HTTPS?<\/strong><\/h2>\n
There are a number of reasons to use HTTPS, including security, SEO and usability.<\/p>\n
Let\u2019s take a look at each one in more detail.<\/p>\n
Security<\/strong><\/h3>\n
Switching to HTTPS ensures communication between the browser and the server is encrypted. This means that any information sent from the browser, like information provided in contact form submissions and payment requests, cannot be read if it\u2019s intercepted.<\/p>\n
![\"connection](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/communication-between-the-browser-and-the-server-is-encrypted.png\")
<\/p>\nNow, you might be thinking: \u201cHow can someone intercept a message being sent from my computer to a website?\u201d<\/p>\n
Without diving too deep into the technical side of things, here\u2019s a basic overview of how it might work\u2026<\/p>\n
When you send information through a contact form, it travels via the router, through a bunch of wires spanning (almost) the entire globe, to the server, which could be on the other side of the world. The information you sent could be intercepted by someone on its way to the server, which would allow them to view your message, as well as other important information you send along with it.<\/p>\n
One of the most common examples of this happening is the use of a spoofed public WIFI. Sometimes a hacker will spoof a public WIFI by setting up a hotspot with the same name as the public WIFI network, hoping that someone will connect to it. If someone does connect to the hacker\u2019s hotspot, then all information they send travels through it – allowing the hacker to see what they\u2019re doing!<\/p>\n
If this information is encrypted using TLS\/SSL, then the hacker can\u2019t do very much with it. But if it\u2019s not, then they can get their grubby little hands on your payment information, contact form message, or other personal information.<\/p>\n
There are many other ways that information can be intercepted, but the above example is easy to understand and clearly demonstrates the value of HTTPS when it comes to security.<\/p>\n
Here\u2019s an example of an unencrypted message.<\/p>\n
![\"unencrypted](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/unencrypted-message.png\")
<\/p>\nAnd this is what the same message looks like encrypted:<\/p>\n
![\"encrypted](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/message-looks-like-encrypted.png\")
<\/p>\nCompletely useless!<\/p>\n
SEO<\/strong><\/h3>\n
Serving your website over HTTPS also has important SEO benefits.<\/p>\n
Google announced<\/a> back in 2014 that HTTPS is a (lightweight) ranking signal. Serving pages securely, in which HTTPS plays an important role, is also part of Google\u2019s page experience update<\/a>, together with Core Web Vitals<\/a> and other usability<\/a> metrics. So although it\u2019s just a part of the ranking signal, it has more SEO benefits than just its isolated impact on rankings.<\/p>\n
HTTPS in no way compares to more important ranking factors like content relevance or website authority<\/a>\/trust when it comes to direct SEO impact. However, it can have an indirect impact on rankings too, since it influences your website\u2019s user experience and how visitors behave on your site.<\/p>\n
User experience<\/strong><\/h3>\n
Moving from HTTP to HTTPS has a number of benefits from a user experience standpoint, which may also contribute to your performance in the SERPs<\/a>.<\/p>\n
The most obvious benefit, based on what we\u2019ve discussed so far, is that it helps protect your users\u2019 data. Besides being mandatory by law in most countries today, protecting users\u2019 data obviously helps to improve their experience.<\/p>\n
![\"satisfied](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/satisfied-customer.png\")
<\/p>\nProbably not the sparkling review we\u2019re after!<\/p>\n
However, the use of HTTPS also has a direct impact on how users interact with your website. Most major browsers, including Edge, Chrome and Firefox, will issue a warning to users when accessing a site without it\u2026<\/p>\n
![\"warning](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/warning-to-users.png\")
<\/p>\nOr at the very least, these browsers will mark the site as insecure in the address bar.<\/p>\n
![\"insecure](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/insecure-in-the-address-bar.png\")
<\/p>\nAlthough some users may understand what this warning means and know how to browse HTTP websites safely, most won\u2019t. This will most definitely lead to some of your visitors bouncing to one of your competitors – especially if they\u2019re asked to share their data on your website. And if Google notices that many visitors are leaving your website and returning to the SERPs, it sends a strong signal that your website didn\u2019t provide a good experience and that it should probably be ranked lower.<\/p>\n
As you can see, there are plenty of reasons why you should move to HTTPS.<\/p>\n
- \n
- It protects your users and their data.<\/li>\n
- It\u2019s important to search engines like Google.<\/li>\n
- It will improve the user experience on your website.<\/li>\n<\/ul>\n
If that’s not already enough good reasons, it also ensures that you comply with local and international laws.<\/p>\n
Now that you\u2019re convinced it\u2019s the right choice, let\u2019s jump into how to make the switch!<\/p>\n
Steps to switch from HTTP to HTTPS<\/strong><\/h2>\n
Although transitioning from HTTP to HTTPS isn\u2019t too challenging, it\u2019s important to do it correctly to preserve as much of your ranking power as possible and avoid duplicate content<\/a> or other SEO issues.<\/p>\n
Before getting started, however, there\u2019s something we need to do.<\/p>\n
Tip: Since you\u2019re planning on migrating your site over to HTTPS, it may be worth performing a quick SEO audit to check if there are any severe issues on your website that you should fix before you make the switch.<\/em><\/p>\n
A tool like Seobility can crawl your complete website and check for technical errors and on-page SEO issues automatically. In case you don\u2019t have a Seobility account yet, we offer a <\/em>14-day free trial<\/em><\/a> to test our premium features.<\/em><\/p>\n
Backup your website!<\/strong><\/h3>\n
Before making any major changes to your website, it\u2019s important to create a backup in case something goes wrong. Most of the changes we\u2019ll make are quite easy to reverse, but it\u2019s still worth backing up the site in case you make a mistake. It wouldn\u2019t be the first time someone breaks their site while making routine changes, and certainly won\u2019t be the last.<\/p>\n
If you\u2019re using WordPress, you can use a plugin like UpdraftPlus, Jetpack, BackupBuddy or any of the (many) others with a good reputation.<\/p>\n
If you have cPanel on your site, it\u2019s as easy as clicking a button.<\/p>\n
![\"cPanel](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/cPanel.png\")
<\/p>\nAfter navigating to the backup section under the file tab, click on \u201cDownload a Full Account Backup\u201d.<\/p>\n
![\"Download](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/Download-a-Full-Account-Backup.png\")
<\/p>\nIt only takes two minutes but can save you days of work if something goes wrong.<\/p>\n
And if something does go wrong, this guide shows you how to restore a WordPress site from a backup<\/a>.<\/p>\n
Set up a staging site & prepare on-page changes<\/strong><\/h3>\n
After backing up the site, it\u2019s worth setting up a staging site in order to prepare the on-page changes before migrating to HTTPS.<\/p>\n
If you have a particularly small website or you\u2019re not getting any search traffic, you might be able to get away with making these changes after switching to HTTPS. However, it\u2019s generally best practice to prepare the on-page changes on a staging site ahead of time. This ensures that you send clear signals to search engines when you do make the switch, rather than rushing changes to the main site after implementing HTTPS.<\/p>\n
Setting up a staging site is really easy once you know how. This post by Themeisle<\/a> shows you exactly how to do it on WordPress.<\/p>\n
Staging site ready? Let\u2019s dive into the changes\u2026<\/p>\n
Canonical Links<\/strong><\/h4>\n
The most important change you should make is changing the canonical tags<\/a> to the new URL with HTTPS. The reason is that we\u2019re later going to be 301 redirecting all HTTP pages to their HTTPS counterparts. But if the HTTPS page in turn has the HTTP version as a canonical, you\u2019re creating a kind of infinite loop, since the pages will be pointing to one another.<\/p>\n
![\"infinite](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/infinite-loop.png\")
<\/p>\nDefinitely something we want to avoid!<\/p>\n
If you\u2019re on WordPress and using a plugin like Yoast, this will likely be changed automatically when you apply the redirect (you may have to change the main site address URL in the settings, though). That being said, this won\u2019t be the case for everyone.<\/p>\n
If you don\u2019t have canonical tags set up, it can be worth using an SEO plugin to do this.<\/p>\n
Internal linking<\/strong><\/h4>\n
Your web pages refer to each other through internal links<\/a> \u2013 but all of the addresses they point to are about to change. Since all links on your site currently use the HTTP version, they need to be changed to point to the HTTPS URL.<\/p>\n
First, it\u2019s a good idea to change the main navigation<\/a>, footer navigation, sidebar and other important navigation elements. Since these are site-wide or at the very least used on many different pages, they\u2019re the most important links to change.<\/p>\n
The homepage, main category pages and other important pages are next in line.<\/p>\n
This will get you 80% of the way there and ensure that the most important internal links on your website are pointing to the correct URLs and sending clear signals to search engine crawlers<\/a>.<\/p>\n
You can then go through the rest of the pages one by one, if you have a small website, or use a plugin like Better Search Replace<\/a> if you\u2019re on WordPress, to speed up the process. If you do choose the plugin method, make sure to backup your site beforehand.<\/p>\n
Schema markup<\/strong><\/h4>\n
Schema markup<\/a> is another important aspect, especially if you\u2019re using your own custom-written markup. Some SEO plugins will make the necessary changes automatically if you change the main website URL, but it\u2019s important to double-check whether this is the case or not with your plugin.<\/p>\n
If you\u2019re not using a plugin, make sure to switch all URLs to the secure version throughout your markup now.<\/p>\n
In WordPress, you can either make the changes on a page-by-page basis manually, or use a search and replace plugin<\/a> to speed things up. Simply replace all occurrences of https:\/\/yourdomain<\/em> with https:\/\/yourdomain<\/em> using the plugin.<\/p>\n
If you\u2019re writing your schema in a separate file, most code editors have a bulk edit feature that will allow you to make these changes.<\/p>\n
Sitemaps & Robots.txt file<\/strong><\/h4>\n
Next, check your sitemap(s)<\/a> and Robots.txt file<\/a> and make any necessary changes to ensure all links are pointing to the correct version.<\/p>\n
![\"sitemap\"](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/sitemap.png\")
<\/p>\nAgain, this is something that many SEO plugins will do for you when you change the main site URL later, but it\u2019s still worth double-checking whether this is the case with your plugin. If not, change them on the staging site now to ensure a smooth switch.<\/p>\n
HREFLang links<\/strong><\/h4>\n
The hreflang tags<\/a> on your pages are another important thing to consider. These are generally added to WordPress sites using SEO plugins or multi-lingual plugins, so the main site URL can usually be changed in the settings in order to reflect these changes site-wide.<\/p>\n
Now that you\u2019ve finished preparing your staging site, make sure you\u2019ve saved everything, as we\u2019ll need it later.<\/p>\n
But now it\u2019s time to get your SSL\/TLS certificate.<\/p>\n
Getting an SSL certificate<\/strong><\/h3>\n
SSL\/TLS certificates are available from many different vendors. However, in 99% of cases, it\u2019s easiest to obtain the certificate directly from your hosting provider. As a matter of fact, most hosting providers will offer free SSL\/TLS certificates as part of their hosting plan! Although this free certificate might not work for websites handling a lot of sensitive personal data\/payment details, it works great for blogs and smaller sites.<\/p>\n
If you require something more, you have a few options:<\/p>\n
Certificates with Domain Validation (DV):<\/strong><\/p>\n
Domain-validated certificates are suitable for most websites. This certificate only requires the applicant to prove they have control of a domain and nothing else. The validation usually takes place via an e-mail to the domain holder. Domain-validated certificates are generally pretty cheap, starting at roughly $50 per year.<\/p>\n
Certificates with Organization Validation (OV):<\/strong><\/p>\n
The organization-validated certificate actually verifies the organization as well as the website ownership. Although the validation for these certificates is more extensive, it\u2019s a common misconception that they provide better encryption. The main difference is in the level of validation of the certificate holder\u2019s identity. These certificates often come with a warranty of up to $1,000,000 or more, making them a great fit for e-commerce stores.<\/p>\n
Due to the complex validation process, this certificate is more expensive than a certificate with domain validation. Organization-validated certificates start at roughly $100 per year.<\/p>\n
Certificates with Extended Validation (EV):<\/strong><\/p>\n
The Extended Validation certificate has the highest level of authentication and is generally reserved for large businesses or those dealing with highly sensitive information, although it can also be a great option for medium-sized e-commerce stores. This type of certificate is only issued by specialized authorization offices that check the company information in far more detail. These certificates provide the highest warranty. Prices start at around $700 per year.<\/p>\n
Once you\u2019ve bought the certificate you need from your hosting provider, you can move on to the next step.<\/p>\n
Tip: Hosting providers will often help you install your certificate after purchasing it, so it can be worth reaching out to them for help if you get stuck. Just keep in mind that hosting providers aren\u2019t SEOs, so you\u2019re still responsible for making the changes in the right order and ensuring everything is set up correctly from an SEO standpoint.<\/em><\/p>\n
Before moving on:<\/strong>
\nIn the upcoming sections, we\u2019re going to install the certificate and make the switch from HTTP to HTTPS on our live website. As is always the case when making changes to your site\/server, it\u2019s worth waiting for a time when there\u2019s little traffic going to your site. Check your analytics to see when your website gets the least visitors and try to schedule a few hours to make the changes at this time if possible.<\/p>\nInstalling your SSL certificate<\/strong><\/h3>\n
If you didn\u2019t purchase your SSL certificate from your hosting provider, or if for some reason they don\u2019t offer support for installing it, you\u2019ll need to install your SSL certificate on your own.<\/p>\n
The exact process can differ a lot depending on your hosting setup. That being said, since most of our readers use WordPress, we\u2019ll focus on how to install an SSL certificate on a WordPress website using cPanel.<\/p>\n
To do this, you\u2019ll need to download the ZIP file with the SSL certificate from your provider and log in to your cPanel. Then in cPanel, search for \u201cSSL\u201d:<\/p>\n
![\"cPanel,](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/cPanel-search-for-SSL.png\")
<\/p>\nIn the \u201cSSL\/TLS\u201d menus, click on \u201cManage SSL sites\u201d:<\/p>\n
![\"Manage](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/Manage-SSL-sites.png\")
<\/p>\nNext, select the domain you want to install the certificate on.<\/p>\n
![\"install](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/install-the-certificate.png\")
<\/p>\nThen, using the information in the ZIP file, fill in the remaining fields.<\/p>\n
![\"browse](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/browse-certificates.png\")
<\/p>\nYou can now install the certificate.<\/p>\n
Now that we have the certificate installed, it\u2019s time to ensure all traffic on our site is redirected to the secure HTTPS version.<\/p>\n
Forcing HTTPS<\/strong><\/h4>\n
Forcing HTTPS means redirecting all traffic to the HTTPS version of your website, preventing people from accessing the insecure version and protecting your users.<\/p>\n
Since creating an HTTPS version of each URL is technically creating a new URL, we force HTTPS by using a 301 redirect to ensure all important SEO signals are transferred over to the new URL. This also prevents duplicate content issues<\/a> that might occur due to having multiple versions of the same page – one HTTP version and one HTTPS version – on your website.<\/p>\n
Before we dive into the details, however, it\u2019s important to understand the effect that 301 redirects have on page rank.<\/p>\n
As explained in this article on how 301 redirects pass PageRank<\/a>, almost 100% of a page\u2019s ranking power is passed through a 301 redirect. However, a tiny, almost negligible amount is lost in order to prevent abuse.<\/p>\n
By 301 redirecting all of the URLs with HTTP to HTTPS, we not only ensure that there\u2019s no duplicate content, but also ensure that ranking signals for each page are concentrated on a single URL. By forcing HTTPS, visitors and bots who reach your site through external links that still use the HTTP URL will automatically be redirected to the correct version.<\/p>\n
We want to create a redirect for every single page on our website. This may seem like a ton of work, but luckily this can be done very easily site-wide. That\u2019s because we don\u2019t have to create a redirect for every single page on the site individually!<\/p>\n
Below, we\u2019ll focus on WordPress sites hosted on an Apache server using the .htaccess file<\/a>. This is one of the most common WordPress setups and also the easiest way to implement 301 redirects.<\/p>\n
301 redirects using the .htaccess file<\/strong><\/p>\n
In order to apply the 301 redirect site-wide, you first need to navigate to the .htaccess file.<\/p>\n
First, go to file manager in cPanel.<\/p>\n
![\"file](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/file-manager-in-cPanel.png\")
<\/p>\nThen, navigate to the \u201cpublic_html\u201d folder and right-click on the .htaccess file to edit it.<\/p>\n
![\"public_html\"](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/public_html.png\")
<\/p>\nNow add the following rule to the file:<\/p>\n
RewriteCond %{HTTPS} off
\nRewriteRule .* https:\/\/%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
\n<\/code><\/p>\nCongratulations! Your site has now been moved to HTTPS.<\/p>\n
Next, we need to publish the staging site we created earlier and go through some post-switch changes to ensure that everything is running smoothly.<\/p>\n
Publishing the staging site<\/strong><\/h3>\n
Now that you\u2019ve moved over to HTTPS, it\u2019s time to publish the staging site to ensure your on-page links are all pointing to the secure version of your website.<\/p>\n
If you forgot to make a backup of your site previously, make sure to do so before publishing the staging site so you can recover the original site if something goes wrong.<\/p>\n
The guide we linked to earlier for creating the staging site also covers the step of pushing the staging site. In case you missed it, here\u2019s the link<\/a> explaining how to do it.<\/p>\n
Post-switch changes<\/strong><\/h3>\n
Now that all of your pages redirect to the secure URL, the main migration is complete. However, there are still a number of important tasks that need to be done before you can lie back in your hammock and admire your work\u2026<\/p>\n
Existing 301s<\/strong><\/h4>\n
One of the first things you need to do is to check the existing 301 redirects on your website and change them to point to the final page.<\/p>\n
For example: Say you have page A that redirects to page B (both HTTP):<\/p>\n
https:\/\/mysite.com\/page-A\u00a0\u00a0\u00a0\u00a0 >\u00a0\u00a0\u00a0\u00a0 https:\/\/mysite.com\/page-B<\/p>\n
You should change the URL for page B to the HTTPS version to prevent going through multiple redirects:<\/p>\n
https:\/\/mysite.com\/page-A \u00a0\u00a0\u00a0\u00a0>\u00a0\u00a0\u00a0\u00a0 https:\/\/mysite.com\/page-B<\/p>\n
It can also be worth setting up a redirect from the HTTPS version of page A to the HTTPS version of page B to fully close the loop:<\/p>\n
https:\/\/mysite.com\/page-A\u00a0\u00a0\u00a0\u00a0 >\u00a0\u00a0\u00a0\u00a0 https:\/\/mysite.com\/page-B<\/p>\n
It might be a lot of work if you have a lot of redirects, but sending clear ranking signals and preventing redirect loops is standard SEO best practice.<\/p>\n
CDN links<\/strong><\/h4>\n
If you\u2019re using a CDN <\/a>to serve images or other media, it\u2019s important to check whether they\u2019re being served securely over HTTPS. If not, it\u2019s important to make sure they are from now on so you don\u2019t see warnings about insecure content on the page.<\/p>\n
In most cases, you won\u2019t need to change anything, but it\u2019s worth double checking before moving on to the next step.<\/p>\n
JavaScript, CSS files, images etc.<\/strong><\/h4>\n
Fixing CDN links doesn\u2019t mean all your media issues are solved, however. It\u2019s important to check if embedded media and other important files (images, videos, CSS, JS) are served over HTTPS, too. If they aren\u2019t, browsers will display a warning, even if the page where the media is embedded uses HTTPS.<\/p>\n
If you do run into any mixed content warnings, make sure to fix any embedded media issues as quickly as possible. Here\u2019s how to do it:<\/p>\n
- \n
- \n
- \n
- Identify the resources that are still served over HTTP. You can do this by running a website crawl with Seobility. In the \u201cTech & Meta\u201d section of your on-page audit, you\u2019ll find \u201cNon-HTTPS content on HTTPS pages\u201d:<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n
![\"Non-HTTPS](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/Non-HTTPS-content-on-HTTPS-pages.png\")
<\/p>\n- \n
- Make sure that the files listed there can be accessed via HTTPS and adjust all links pointing to these files. If you\u2019re using a page builder or certain plugins that generate the files, it might be necessary to change the website\u2019 s URL in the plugin settings.<\/li>\n<\/ol>\n
Perform an on-page audit<\/h4>\n
Now that you\u2019ve completed all of the necessary on-page changes, it\u2019s time to double-check your work.<\/p>\n
If you haven\u2019t done so yet, running a crawl on your website now will help you get a clear overview of your site and whether you missed any important changes. Some of the most important things to check in Seobility\u2019s Tech & Meta section (Project > Onpage > Tech & Meta) include:<\/p>\n
Pages crawled & pages with technical problems in the Crawling statistics<\/p>\n
![\"Crawling](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/crawling-statistics.png\")
<\/p>\nNon-HTTPS content on HTTPS pages in the File sources analyses<\/p>\n
![\"File](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/File-sources-analyses.png\")
<\/p>\nAnd the HTTP-Status Overview in its entirety.<\/p>\n
![\"HTTP-Status](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/HTTP-Status-Overview.png\")
<\/p>\nThe most important analysis to check in the Structure section (Project > Onpage > Structure) is the \u201cRedirects\u201d analysis:<\/p>\n
![\"Structure](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/Structure-section.png\")
<\/p>\nIf there are any internal links on your website that still point to the HTTP version of a URL (and if you\u2019ve set up your redirect correctly), they will be listed here, as these links will cause a redirect.<\/p>\n
However, if there are any issues with your redirect, it can create duplicate content problems, which will be displayed in the \u201cContent\u201d section:<\/p>\n
![\"duplicate](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/duplicate-content-problems.png\")
<\/p>\nAnother handy tool that can help you check if your website is properly redirecting to the HTTPS version is the free Seobility Redirect Checker<\/a>.<\/p>\n
![\"free](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/free-Seobility-Redirect-Checker.png\")
<\/p>\nJust enter your domain and choose the URL version that visitors and search engines should be redirected to as the \u201cTarget Base-URL\u201d.<\/p>\n
Backlinks<\/strong><\/p>\n
Once you\u2019ve fixed any on-page issues, it\u2019s worth going through your backlinks to check whether you can change any of them to point to the HTTPS version of your website.<\/p>\n
If you have a list of directories and social channels linked to your website, it\u2019s worth going through them first and changing the links to point to the secure version.<\/p>\n
If you have an account, you can also go to the backlinks section of your project in Seobility (Dashboard > Project > Backlinks). You can also use Seobility\u2019s free Backlink Checker<\/a> to find your off-site profiles:<\/p>\n
![\"free](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/free-backlink-checker.png\")
<\/p>\nIf you have other external links that you can easily change, now is the time to try to point them to the secure version. Although this isn\u2019t highly important, since users will already be redirected to the secure version automatically, it can be good to do this for links that don\u2019t take much time to change.<\/p>\n
Google Search Console & Google Analytics<\/strong><\/h4>\n
Depending on how you set up Google Search Console, you may need to add a new property for the HTTPS version of your site to ensure that it continues to collect data.<\/p>\n
If you used the new Domain Property to add your site to Search Console originally, you don\u2019t need to do anything. If you used the URL prefix method, you should set up a new property to ensure data is collected for the HTTPS version.<\/p>\n
![\"new](\"https:\/\/www.seobility.net\/wp-content\/uploads\/2023\/11\/new-Domain-Property.png\")
<\/p>\nFor Google Analytics, you\u2019ll need to set up a new property in order to keep collecting data. This article by Google<\/a> shows you how to set up your GA4 property correctly.<\/p>\n
Google Ads \/ Microsoft Ads<\/strong><\/h4>\n
If you\u2019re running ads on platforms like Google Ads or Microsoft Ads (Bing), you should change the URLs that your ads point to directly to the new HTTPS version. This will prevent your ads from going through a redirect, improving the user experience. This can be done by changing the target URL field in your ads.<\/p>\n
Other marketing channels\/software<\/strong><\/h4>\n
Next, it\u2019s worth going through any other marketing channels you use to ensure that as many of the links as possible are pointing to your new secure URLs. Some of the channels worth considering include:<\/p>\n
- \n
- Email footers<\/li>\n
- Email marketing software<\/li>\n
- Text\/QR code campaigns<\/li>\n
- Banner ads<\/li>\n
- Invoices\/invoicing software<\/li>\n
- Bing Webmaster Tools<\/li>\n<\/ul>\n
Monitoring your traffic<\/strong><\/h3>\n
Last but not least, it\u2019s important to monitor your traffic in the weeks after you make the switch from HTTP to HTTPS. Although it\u2019s very uncommon for sites to see a drop in traffic after a routine change like this, it\u2019s still good practice to monitor your traffic in case something goes wrong.<\/p>\n
If you see a sudden drop in traffic after making a switch to HTTPS, take some time to try and diagnose what the issue could be. Some things to check include:<\/p>\n
- \n
- Warnings in Google Search Console<\/li>\n
- Issues with your analytics\/GSC setup<\/li>\n
- Issues with canonical tags<\/li>\n
- Issues with redirect loops<\/li>\n
- Current updates or search changes<\/a> rolling out<\/li>\n<\/ul>\n
Summary \/ Checklist<\/strong><\/h2>\n
To recap, here\u2019s a checklist of all the important steps you should consider when switching from HTTP to HTTPS:<\/p>\n
- \n
- Backup your website!<\/li>\n
- Set up a staging site & prepare on-page changes<\/li>\n
- Get an SSL certificate<\/li>\n
- Install your SSL certificate<\/li>\n
- Force HTTPS<\/li>\n
- Publish the staging site<\/li>\n
- Post-switch changes<\/li>\n
- Monitor your traffic<\/li>\n<\/ul>\n
Your site is secure!<\/strong><\/h2>\n
That wasn\u2019t so hard, was it?<\/p>\n
By switching your website from HTTP to HTTPS, you\u2019ve improved your site\u2019s user experience, search optimization and security.<\/p>\n
An easy win!<\/p>\n
If you have any questions or just want to say hi, feel free to leave a comment below and we\u2019ll get back to you as soon as we can.<\/p>\n
- Make sure that the files listed there can be accessed via HTTPS and adjust all links pointing to these files. If you\u2019re using a page builder or certain plugins that generate the files, it might be necessary to change the website\u2019 s URL in the plugin settings.<\/li>\n<\/ol>\n
- Identify the resources that are still served over HTTP. You can do this by running a website crawl with Seobility. In the \u201cTech & Meta\u201d section of your on-page audit, you\u2019ll find \u201cNon-HTTPS content on HTTPS pages\u201d:<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n
- \n
- HTTP (Hypertext Transfer Protocol)<\/a><\/li>