We plan to install SSL certificate in Magento store and I was wondering if there are any SEO implications to take into consideration? We mean to use the HTTPS on all pages of the site.

Does Magento automatically 301 redirect the non-secured url's to secured ones or do we need to make some server side redirection of all pages?


Also please note that this question is not about how to set the https in use in Magento, but how to make the change as safely as possible considering SEO.


I added this to my .htaccess file to make sure that all HTTP pages are 301 redirected to the HTTPS version of the same pages:

RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://www.example.com/$1 [L,R=301]

  • Possible duplicate of How to show https on all pages of site?
    – MagenX
    Commented Jun 29, 2016 at 9:59
  • Absolutely no answer to my question there. Plese read the question. Not a duplicate of that.
    – Webninja
    Commented Jun 29, 2016 at 10:05
  • lol this is exactly the safest option to change https for SEO, make both unsecure and secure link as https:// and Auto-redirect to Base URL set to NO
    – MagenX
    Commented Jun 29, 2016 at 12:49
  • So it will automatically 301 redirect http-version of all pages to https-version of the same pages?
    – Webninja
    Commented Jun 29, 2016 at 12:55

2 Answers 2


Yes, Magento does automatically do a 301 redirect. But only on and to the homepage. So http://www.example.com is redirected to https://www.example.com. And http://www.example.com/x.html is also redirected to https://www.example.com. So it is advisable to do a .htaccess redirect which takes into consideration the deeper pages of the site.

Furthermore you can check what happens if you try to access your site with and without the www subdomain in relation to http and https. In some cases both are accessible which you do not want because of duplicate content.

EDIT: Also check your setting for System > Configuration > General > Web > Url Option > Auto-redirect to Base URL

BONUS EDIT: While you are at it. In most cases the CMS homepage is also accessible trough www.example.com/home. You might want to redirect that page to to avoid another case of duplicate content.

  • One web page suggested that you should also do this in .htaccess: RewriteCond %{HTTPS} off RewriteCond %{HTTP_HOST} ^www.domain.co.uk$ [NC] RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] So there is no need for this?
    – Webninja
    Commented Jun 29, 2016 at 10:10
  • Do you mean the 301 redirect? Yes, it might be a good idea do that. In that case you will be absolutely sure your redirects are setup correct. In SEO you don't want to take any chances. Does the page suggest a "why"?
    – Akif
    Commented Jun 29, 2016 at 10:13
  • 1
    Not sure. Here is the page Case 1 there.
    – Webninja
    Commented Jun 29, 2016 at 10:18
  • I would implement a solution in the .htaccess as suggested. Just to be 100% sure. Like I said you don't want to take any risks with SEO. Besides it doesn't hurt anything or cost much time.
    – Akif
    Commented Jun 29, 2016 at 10:28
  • Should the Auto-redirect to Base URL be set to no or yes?
    – Webninja
    Commented Jun 29, 2016 at 10:32

Moving to https is usually causes bump of positions in serp.

If you want to minimise the consequences let crawler to index urls with https first and only after it is done place 301 redirect.

You can do for this:

  • change canonical tags (place there urls with https);
  • change links in your content (it is hard, but do it if possible);
  • change links in template.
  • update sitemap.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.