Switching a site to HTTPS
HTTPS (HyperText Transfer Protocol Secure) is an extension of the HTTP protocol. It significantly reduces the risk that personal data (usernames, passwords, bank card numbers, and so on) could be intercepted, and also helps prevent content substitution, including ad replacement, when loading the site.
Before sending data, information is encrypted using the SSL and TLS cryptographic protocols. To use the HTTPS protocol, you need to get a certificate, configure your site's server and make changes to the site.
We recommend switching to HTTPS as a more secure protocol, although you can leave the HTTP version of the site available.
When you switch the protocol, the website address changes. The address may also contain the www prefix. Examples: http://www.example.com, https://www.example.com, http://example.com, https://example.com. This means a single domain can have multiple addresses.
The Yandex robot treats such addresses as different websites. That's why they can be included in search results as separate websites. As a result, such addresses can compete with each other in search results. This may cause one of the addresses to lose traffic and fail to reach desired positions. This situation may remain unchanged until the robot determines that the content on the websites is the same. After that, they will be merged into a group of sites.
When merging, the main website address will be selected automatically. This address will be included in search results. You can speed up merging and specify the main website address by following the instructions below.
Merging website addresses into a group also allows you to transfer some accumulated metrics from the old site to the new one. For example, external links of the old site are treated as external links of the new one. At the same time, on the External links page in Yandex Webmaster, you can see URLs specified on a third-party site. However, merging doesn't guarantee that the number of website pages in search results, the page ranking, or traffic will remain the same.
Step 1. Prepare the SSL certificate
-
Obtain and install the SSL certificate on the server
SSL certificates differ in the level of verification:Certificate
Description
Legal entity
Individual
DV (Domain Validated)
Confirms the domain
OV (Organization Validation)
Ensures that the domain belongs to a specific company
EV (Extended Validation)
Requires advanced verification of a legal entity and is included in the global financial industry standards
The choice of certificate may also depend on the number of sites it is needed for:
Number of sites
Certificate
Note
One domain
All certificate types can be used
For a site with or without the www prefix
Multiple domains
A pre-determined limited list of URLs
Subdomain
DV (Domain Validated)
—
The SSL certificate is issued by the certificate authority. There are several recognized centers. Check with your hosting provider to find out which ones they work with.
After you install the certificate, set up your server. You can usually get the instructions for certificate installation and server setup from the hosting provider.
-
Make sure that the certificate is installed correctly. Go to the Server response check and enter your site URL in the field, for example
https://example.com
.If the SSL certificate contains errors, the message about this will be shown.
To resolve problems with the SSL certificate, contact your certification center or your hosting provider.
Step 2. Change internal links on the site
If a site that uses HTTPS has HTTP links to internal pages or files, browsers, search engine robots and other services consider the site insecure. They may notify users of this.
Change the HTTP protocol to HTTPS in the following places:
- Internal links to pages.
- Internal links to files (CSS styles, JavaScript libraries, images and so on);
- Links in the Sitemap file.
- The Sitemap link in the robots.txt file.
- Alternative links to language versions on the site pages and in the Sitemap file.
Note
You can make internal links to pages and files relative (without specifying a domain). For example, you can change the link http://example.com/page/
to /page/
.
If your site has links or ad blocks that lead to resources that use the HTTP protocol, web analytics systems may not consider your site as a traffic source. To identify the source correctly, add the referrer
meta tag in the HTML code of the pages:
<meta name="referrer" content="origin"/>
The origin
value passes the protocol and domain.
Step 3. Check if the site can be accessed via HTTPS
Open your site in the browser with the URL that looks like https://example.com
. If the settings are correct, the page will load and the browser will notify you of the secure connection. Check other site pages the same way. For example, in Yandex Browser, the connection status icon looks like this:
For more information about connection statuses, see Yandex Browser Help.
Step 4. Set up a redirect
On your server, set a permanent or temporary redirect (for example, with a 301 or 302 HTTP code) from the old website's pages to the corresponding pages on the new website, which should be included in the search.
Make sure the redirect is set:
- From the home page of the old site to the home page of the new one. This is necessary for a proper site move.
- From the internal pages of the old site to the corresponding pages of the new one. This will transfer metrics to the new pages and help site visitors find the information they need.
If possible, don't set a redirect from all pages of the old site to the main page of the new one. Such redirects are inconvenient for users and, consequently, slow down the new site indexing by the Yandex robot.
This allows you to transfer certain accumulated metrics (such as original texts and external links) to the new site URL.
Step 5. Use the "Relocate site" tool»
The robot learns about the protocol change the next time when it crawls the site. To speed up detection of changes, add both website versions (HTTP and HTTPS) to Yandex Webmaster and report the need to move using the Relocate site tool:
- Go to Yandex Webmaster and choose the website you want to move from.
- Go to Indexing → Relocate site and enable the Add HTTPS option.
- Click Save.
Questions and answers
Does the HTTPS protocol affect site ranking?
Yandex tries to take into account all data that concerns the site quality. Security is important for users, and the use of the HTTPS protocol is one of the security indicators. By choosing the secure protocol, the site owner protects the user's data. This can influence the ranking.
Is there a risk of losing traffic after moving?
According to Yandex research, traffic levels remain the same if you follow the above recommendations when moving to HTTPS.
Will the SQI be saved when switching to HTTPS?
Yes, the site quality index is kept after migration, although updating the SQI value may take some time.
What will happen to my regions from Yandex Catalog?
When moving you need to set the regions again. You can set one region for each website through Yandex Webmaster and an unlimited number of branches in Yandex Business.
Yandex Webmaster doesn't have information about the HTTPS version of my site
Add the HTTPS site to Yandex Webmaster and verify your rights to manage it. To learn more, see Getting started.
HTTPS version appeared in the search results and the browser reports about possible unsecure connection
Your site is likely to be available via two protocols — HTTP and HTTPS. To ensure that only the HTTP version remains in the search, use the instructions.
Learn more
A link located on another site.