Fix Guide

How to Enable HTTPS / Fix a Missing SSL Certificate

Serve your site over an encrypted HTTPS connection — a baseline requirement for ranking and trust.

Medium Critical Impact 30 min

Why It Matters

Without HTTPS, Chrome marks your site "Not Secure", data travels in plain text, and Google ranks you lower (HTTPS is a confirmed signal). A free Let's Encrypt certificate removes any excuse not to have it.

How to Fix

Install a certificate

Use a free Let's Encrypt certificate (most hosts offer one-click) or your CDN's managed SSL.

Force HTTPS everywhere

301-redirect all HTTP traffic to HTTPS and update internal links + canonicals to the https:// version.

Fix mixed content

Make sure images, scripts and styles all load over https:// so the padlock stays green.

Code Fix

nginx

Before (broken)

# Site served on http:// only

After (fixed)

# nginx: redirect all HTTP to HTTPS
server {
  listen 80;
  server_name example.com;
  return 301 https://$host$request_uri;
}

Platform-Specific Instructions

WordPress

Enable SSL in your host's panel, then set the WordPress + Site Address to https:// and use a plugin like "Really Simple SSL" to fix mixed content.

Next.js

Terminate SSL at your host/CDN (Vercel, Cloudflare) — it's automatic on most platforms.

Check with our tool

SSL Certificate Checker

Want to find all issues at once?

Run a free audit and get a prioritized fix list with auto-generated code.

Run a free audit