Cloudflare Docs
SSL/TLS
Cloudflare Docs
SSL/TLS
Edit this page
Report an issue with this page
Log into the Cloudflare dashboard
Set theme to dark (⇧+D)
  1. Products
  2. SSL/TLS
  3. ...
  4. Additional options
  5. Always Use HTTPS

Always Use HTTPS

Always Use HTTPS redirects all your visitor requests from http to https, for all subdomains and hosts in your application.

Cloudflare recommends not performing redirects at your origin web server, as this can cause redirect loop errors.

​​ Availability

FreeProBusinessEnterprise

Availability

YesYesYesYes

​​ Encrypt all visitor traffic

To redirect traffic for all subdomains and hosts in your application, you can enable Always Use HTTPS.

To enable Always Use HTTPS in the dashboard:

  1. Log in to your Cloudflare account and go to a specific domain.
  2. In SSL/TLS > Overview, make sure that your SSL/TLS encryption mode is not set to Off. When you set your encryption mode to Off, the Always Use HTTPS option will not be visible in your Cloudflare dashboard.
  3. Go to SSL/TLS > Edge Certificates.
  4. For Always Use HTTPS, switch the toggle to On.

To enable or disable Always Use HTTPS with the API:

  1. Make sure that your SSL/TLS encryption mode is not set to Off.
  2. Send a PATCH request with always_use_https as the setting name in the URI path, and the value parameter set to your desired setting ("on" or "off").

​​ Limitations

Forcing HTTPS does not resolve issues with mixed content, as browsers check the protocol of included resources before making a request. You will need to use only relative links or HTTPS links on pages that you force to HTTPS. Cloudflare can automatically resolve some mixed-content links using our Automatic HTTPS Rewrites functionality.