Configuration

HTTPS

Why use HTTPS

If you sign in to WordPress.com via a non-secure Internet connection, like a public Wi-Fi connection at your local coffee shop, your account may be more vulnerable to hijacking. To keep the bad guys out, we recommend using HTTPS.

↑ Table of Contents ↑

Enabling HTTPS

To enable HTTPS you need to head on over to the Users –> Personal Settings screen.

Once there you want to check the box that says “Always use HTTPS when visiting administration pages” and then press the Save Changes button at the bottom of the page. When you log back in, you’ll be rolling with SSL encryption.

↑ Table of Contents ↑

Frequently Asked Questions

Does it slow down WordPress.com ?
With this option turned on, you may find that WordPress.com is more sluggish over the https connection. That’s because nothing that’s transmitted over SSL is cached, so it takes some extra work to re-download all the information on a page.

How do I get those annoying security warnings to go away?
If you’re using Internet Explorer, you may receive warnings as you navigate around your admin with HTTPS enabled. To disable those, follow this process:

  1. Go to Tools > Internet Options in your browser menu.
  2. Add *.wordpress.com to your list of trusted sites under the Security tab. Make sure to uncheck the box for “Require server verification (https:) for all sites in this zone.”
  3. Set Internet Options> Security> Trusted Sites> Custom Level> Miscellaneous> Display Mixed Content to “Enable” (you’ll have to do lots of scrolling to get there).
  4. Click OK on all windows.
Security -> Trusted Sites

Security -> Trusted Sites

Add *.wordpress.com to trusted sites

Add *.wordpress.com to trusted sites

Enabled the display of mixed content

Enabled the display of mixed content

Still confused?

Contact support.