Antes de publicar reproduzimos cada passo em pelo menos duas marcas quando depende do anfitrião. ou duas vezes em dias distintos quando não. Registamos erros de consola, rótulos que mudam por região e actualizamos se moverem um botão. Caminhos e capturas são revistos trimestralmente. Em DNS, SSL ou pagamentos verificamos opções de recuperação e ligamos à documentação oficial.
Visit your site at https://yourdomain.com. If you see a padlock icon in the browser address bar, SSL is already active. If you see a "Not Secure" warning, you need to install or activate SSL. Log into your hosting control panel. many modern hosts (Hostinger, SiteGround, Bluehost) activate Let's Encrypt SSL automatically on all new accounts.
Most hosts include free Let's Encrypt SSL. In cPanel: go to Security → SSL/TLS → Manage SSL sites, or look for an "SSL" icon in the main cPanel dashboard. In Hostinger's hPanel: go to Hosting → Manage → SSL. In SiteGround: Security → SSL Manager. Click "Install" or "Activate" next to your domain. The certificate installs in under 2 minutes.
After SSL is installed, visitors who type yourdomain.com (without https) still reach the unencrypted version. Force HTTPS via cPanel (Force HTTPS Redirect toggle) or by adding redirect rules to your .htaccess file: `RewriteEngine On` / `RewriteCond %{HTTPS} off` / `RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]`. In WordPress, update Settings → General: change both site URL and WordPress URL to https://.
After enabling HTTPS, some pages may show a "Not Secure" warning despite having SSL. This is caused by mixed content: images, scripts, or stylesheets still loading via http://. Use the Better Search Replace plugin to update all http:// URLs in your WordPress database to https://. Or use Really Simple SSL plugin which handles this automatically. Check for mixed content using Chrome DevTools (Console tab) or SSL check tools like whynopadlock.com.
Use SSL Labs (ssllabs.com/ssltest/) to run a full SSL quality test. aim for an A or A+ rating. Verify: the padlock appears on all pages, there are no mixed content warnings in browser DevTools, the certificate expiry date is at least 60+ days away (Let's Encrypt auto-renews every 90 days), and your site redirects properly from http:// to https://.
Update any external links or directory listings you control to use https:// URLs. In Google Search Console, add your https:// version as a separate property if you haven't already, and set it as the preferred domain. Submit an updated sitemap from your https:// URL. Google will gradually re-crawl your site over the following weeks and transfer any existing search rankings to the https:// version.