Skip to content

SSL and HTTPS settings ​

This guide explains how to turn on the free SSL included with eligible plans, install a purchased certificate, force visitors onto HTTPS, fix mixed content, and protect a folder with a password.

Before you begin ​

Steps ​

Turn on the free SSL ​

  1. Open the SSL certificates section in the panel for your domain.
  2. Choose the option to request a free certificate, if it is shown for your plan.
  3. Wait for the certificate to be issued. This can take a few minutes after the DNS points to your hosting.

Force HTTPS ​

  1. After the certificate works, open the setting that redirects HTTP to HTTPS, if the panel offers one.
  2. Enable it, then open http://yourdomain.com and check that it goes to https://yourdomain.com.

Fix mixed content ​

  1. Open your site in a browser and check the browser's security or console messages.
  2. Change any link or image that uses http:// to https://. Read Mixed content errors for details.

Protect a folder with a password ​

  1. Open the password-protected directories section.
  2. Choose the folder, add a user name and a strong password.
  3. Test the folder in a private browser window. You should be asked for the user name and password.

Login keys and two-step verification ​

Where offered, login keys let you sign in without typing a password each time. Keep the private key secret. Two-step verification adds a code from your phone. See Account security.

Expected result ​

Your site opens over HTTPS with a padlock, plain http:// addresses redirect to HTTPS, and protected folders ask for a password.

If something goes wrong ​

  • The free SSL option is missing. It may not be included in your plan. Ask support or use a purchased certificate.
  • The certificate is not issued. Check that the domain's DNS points to your hosting. Read SSL not working.
  • The browser shows an insecure connection. Read Browser insecure connection.
  • Redirect to HTTPS loops. Read Too many redirects.

Last reviewed ​

2026-10-27