How to Force HTTPS on WordPress (.htaccess, Nginx, and Plugin Options)

Preferred approach

• Force HTTPS at the server layer (fastest and most reliable).

Apache (.htaccess)

• Add a 301 redirect rule to send HTTP → HTTPS.
• Avoid redirect chains by combining rules cleanly.

Nginx

• Add a server block that listens on 80 and returns 301 to https.
• Keep HSTS disabled until you confirm HTTPS works everywhere.

WordPress-level

• Update Site Address to https.
• Regenerate permalinks.
• Clear cache/CDN.

Next steps