Change the canonical link to https

seo.basics.canonical_insecure · effort: minutes

Why it matters

The homepage is served over https, but its canonical link names the http address. That tells search engines to index the insecure version and can send visitors there from search results.

The fix

  1. Change the href of the canonical link to the full https address of the homepage, and use the same https address in the sitemap and in internal links.
  2. Find where the http address comes from (a base URL setting, a template, a plugin) and fix it at the source.
html
<link rel="canonical" href="https://example.com/">

The examples use example.com. Replace it with your own domain.

Read the documentation (opens in a new tab)

Scan your domain to see whether this applies to you.