{"id":2464,"date":"2025-07-23T08:34:50","date_gmt":"2025-07-23T08:34:50","guid":{"rendered":"https:\/\/cheapsslsecurity.com\/p\/?p=2464"},"modified":"2025-07-23T08:39:09","modified_gmt":"2025-07-23T08:39:09","slug":"how-to-enable-hsts-preload","status":"publish","type":"post","link":"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/","title":{"rendered":"How To Enable HSTS Preload"},"content":{"rendered":"

How Does HSTS Work?<\/h2>\n

HSTS instructs browsers to only communicate with a server using HTTPS, even if the user attempts to access it via HTTP.<\/p>\n

<\/p>\n

Meanwhile, HSTS Preload is a feature that allows websites to be included in a hardcoded list maintained by major browsers. In simple words, this means that when users visit your site for the first time, their browser will automatically enforce HTTPS before any requests are made, minimizing potential vulnerabilities.<\/p>\n

\"HSTS\"<\/p>\n

How To Enable the HSTS Header & HSTS Preload<\/h2>\n

Step 1: Install Your Trusted SSL Certificate<\/h3>\n

To begin with, you need to obtain and install an SSL certificate<\/strong>. Here you can find an SSL certificate depending on your needs: SSL\/TLS products<\/a><\/p>\n

Generate a key pair:<\/strong> Certificate Signing Request (CSR) and the Private Key. The key pair may be generated using the online tools, such as CheapSSLSecurity CSR Generator<\/a>.<\/p>\n

Then, follow the instructions provided on the order to complete your purchase. You will need to provide the contact information, as well as generate a Certificate Signing Request (CSR) to complete the order generation. <\/p>\n

Depending on your certificate type, you will need to pass domain verification OR domain + organization verification. Here you will find more detailed information regarding the validation process<\/a>.<\/p>\n

Once approved<\/strong>, download the certificate files provided on the order page, and you will get a certificate, an Intermediate, and a Root certificate file.<\/p>\n

You will need to install the files on your web server. Unfortunately, there is no one single instruction on how to install the certificate, as each server has a unique procedure for certificate installation. Here you will find the instructions for the most popular ones: Installation Instructions<\/a><\/p>\n

Update your server configuration files to ensure that HTTPS is enforced. For Apache servers, you might edit the .htaccess file; for Nginx, you would modify the server block.
\nRelated articles: Apache CentOS 8<\/a>, Apache CentOS 6-7<\/a>, Nginx<\/a>, Apache OpenSSL<\/a>.<\/p>\n

Verify that your SSL certificate is correctly installed and configured. You may use our SSL Checker<\/a><\/p>\n

Step 2: Ensure That Your Entire Website Works via HTTPS<\/h3>\n

After your domain is added to the HSTS list<\/strong>, users will be unable to access your website via HTTP in any browser.
\nBe sure that your entire domain (and subdomains) is 100% HTTPS<\/strong> \u2013 no HTTP URLs, no mixed content, etc.<\/p>\n

Step 3: Enable HSTSWhen the SSL certificate is installed and your entire site is running on HTTPS, you can enable HSTS:<\/h3>\n
    \n
  1. Add HSTS Header: You need to add the HSTS header to your server’s configuration. For example, in Apache, you would add the following line to your .htaccess file:\n
    \n
    Header always set Strict-Transport-Security “max-age=31536000; includeSubDomains; preload”<\/div>\n<\/div>\n

    For Nginx, you would add it to your server block:<\/p>\n

    \n
    add_header Strict-Transport-Security “max-age=31536000; includeSubDomains; preload” always;<\/div>\n<\/div>\n

    Note: Here, max-age=31536000<\/strong> specifies that browsers should remember this rule for one year (in seconds). The includeSubDomains directive applies HSTS to all subdomains as well.<\/li>\n

  2. Test Your Configuration: Use online tools like HSTS Preload (https:\/\/hstspreload.org\/) or Security Headers (https:\/\/securityheaders.com\/) to verify that your HSTS header is correctly set.<\/li>\n<\/ol>\n

    Step 4: Submit Your Site for HSTS Preload<\/h3>\n

    Once you\u2019ve enabled HSTS, you can submit your site for inclusion in the HSTS Preload list<\/strong>:<\/p>\n

      \n
    1. Visit the HSTS Preload Submission Page:<\/strong> Go to hstspreload.org<\/a>.
      \n\"HSTS<\/li>\n
    2. Fill Out the Form:<\/strong> Enter your domain name and ensure that all requirements are met:\n
        \n
      • Your domain must serve an HTTPS response.<\/li>\n
      • You must have the Strict-Transport-Security header set with a max-age of at least 31536000.<\/li>\n
      • The includeSubDomains directive must be present.<\/li>\n
      • The site must not allow HTTP connections.<\/li>\n<\/li>\n<\/ul>\n
      • Submit Your Domain:<\/strong> Once you\u2019ve confirmed that all criteria are satisfied, submit your domain for review.<\/li>\n
      • Wait for Approval:<\/strong> It may take some time before your site appears in the preload list across browsers.<\/li>\n<\/ol>\n

        Conclusion<\/h2>\n

        In the constantly evolving landscape of web security, simply having an SSL installed on your server may not be enough. To truly safeguard your users and improve your website’s credibility, we advise you to consider enabling HSTS and submitting your site for HSTS Preload. There are just a few simple steps that need to be done to increase user trust and safety. Don\u2019t miss that opportunity! <\/p>\n

        *Commands in different operating systems may vary or may not be available at all.<\/p>\n","protected":false},"excerpt":{"rendered":"

        How Does HSTS Work? HSTS instructs browsers to only communicate with a server using HTTPS, even if the user attempts to access it via HTTP.<\/p>\n","protected":false},"author":17,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[127],"tags":[],"class_list":["post-2464","post","type-post","status-publish","format-standard","hentry","category-ssl-installation-guides"],"yoast_head":"\nHow To Enable HSTS Preload - Cheap SSL Security<\/title>\n<meta name=\"description\" content=\"Have you ever heard about HTTP Strict Transport Security (HSTS) and submitting your site for HSTS Preload? It is a good time to figure it out.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How To Enable HSTS Preload - Cheap SSL Security\" \/>\n<meta property=\"og:description\" content=\"Have you ever heard about HTTP Strict Transport Security (HSTS) and submitting your site for HSTS Preload? It is a good time to figure it out.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/\" \/>\n<meta property=\"og:site_name\" content=\"Cheap SSL Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/CheapSSLSecurities\" \/>\n<meta property=\"article:published_time\" content=\"2025-07-23T08:34:50+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-23T08:39:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cheapsslsecurity.com\/p\/wp-content\/uploads\/2025\/07\/hsts.png\" \/>\n\t<meta property=\"og:image:width\" content=\"975\" \/>\n\t<meta property=\"og:image:height\" content=\"450\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Vladislavs Dovoreckis\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sslsecurity\" \/>\n<meta name=\"twitter:site\" content=\"@sslsecurity\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Vladislavs Dovoreckis\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/how-to-enable-hsts-preload\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/how-to-enable-hsts-preload\\\/\"},\"author\":{\"name\":\"Vladislavs Dovoreckis\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/#\\\/schema\\\/person\\\/3c82a53e4a962f90f3f1be2948c39eeb\"},\"headline\":\"How To Enable HSTS Preload\",\"datePublished\":\"2025-07-23T08:34:50+00:00\",\"dateModified\":\"2025-07-23T08:39:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/how-to-enable-hsts-preload\\\/\"},\"wordCount\":705,\"image\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/how-to-enable-hsts-preload\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/hsts.png\",\"articleSection\":[\"SSL Installation Guides\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/how-to-enable-hsts-preload\\\/\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/how-to-enable-hsts-preload\\\/\",\"name\":\"How To Enable HSTS Preload - Cheap SSL Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/how-to-enable-hsts-preload\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/how-to-enable-hsts-preload\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/hsts.png\",\"datePublished\":\"2025-07-23T08:34:50+00:00\",\"dateModified\":\"2025-07-23T08:39:09+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/#\\\/schema\\\/person\\\/3c82a53e4a962f90f3f1be2948c39eeb\"},\"description\":\"Have you ever heard about HTTP Strict Transport Security (HSTS) and submitting your site for HSTS Preload? It is a good time to figure it out.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/how-to-enable-hsts-preload\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/how-to-enable-hsts-preload\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/how-to-enable-hsts-preload\\\/#primaryimage\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/hsts.png\",\"contentUrl\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/hsts.png\",\"width\":975,\"height\":450,\"caption\":\"HSTS\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/how-to-enable-hsts-preload\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"SSL Help\",\"item\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SSL Installation Guides\",\"item\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/ssl-installation-guides\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"How To Enable HSTS Preload\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/#website\",\"url\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/\",\"name\":\"Cheap SSL Security\",\"description\":\"Shop for SSL Certificates at Cheap Prices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cheapsslsecurity.com\\\/p\\\/#\\\/schema\\\/person\\\/3c82a53e4a962f90f3f1be2948c39eeb\",\"name\":\"Vladislavs Dovoreckis\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/678b0f8742583ba7eb96e5c4a0db9417f91f18ad9732a624504fed3fb4f2ac24?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/678b0f8742583ba7eb96e5c4a0db9417f91f18ad9732a624504fed3fb4f2ac24?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/678b0f8742583ba7eb96e5c4a0db9417f91f18ad9732a624504fed3fb4f2ac24?s=96&d=mm&r=g\",\"caption\":\"Vladislavs Dovoreckis\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How To Enable HSTS Preload - Cheap SSL Security","description":"Have you ever heard about HTTP Strict Transport Security (HSTS) and submitting your site for HSTS Preload? It is a good time to figure it out.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/","og_locale":"en_US","og_type":"article","og_title":"How To Enable HSTS Preload - Cheap SSL Security","og_description":"Have you ever heard about HTTP Strict Transport Security (HSTS) and submitting your site for HSTS Preload? It is a good time to figure it out.","og_url":"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/","og_site_name":"Cheap SSL Security","article_publisher":"https:\/\/www.facebook.com\/CheapSSLSecurities","article_published_time":"2025-07-23T08:34:50+00:00","article_modified_time":"2025-07-23T08:39:09+00:00","og_image":[{"width":975,"height":450,"url":"https:\/\/cheapsslsecurity.com\/p\/wp-content\/uploads\/2025\/07\/hsts.png","type":"image\/png"}],"author":"Vladislavs Dovoreckis","twitter_card":"summary_large_image","twitter_creator":"@sslsecurity","twitter_site":"@sslsecurity","twitter_misc":{"Written by":"Vladislavs Dovoreckis","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/#article","isPartOf":{"@id":"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/"},"author":{"name":"Vladislavs Dovoreckis","@id":"https:\/\/cheapsslsecurity.com\/p\/#\/schema\/person\/3c82a53e4a962f90f3f1be2948c39eeb"},"headline":"How To Enable HSTS Preload","datePublished":"2025-07-23T08:34:50+00:00","dateModified":"2025-07-23T08:39:09+00:00","mainEntityOfPage":{"@id":"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/"},"wordCount":705,"image":{"@id":"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/#primaryimage"},"thumbnailUrl":"https:\/\/cheapsslsecurity.com\/p\/wp-content\/uploads\/2025\/07\/hsts.png","articleSection":["SSL Installation Guides"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/","url":"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/","name":"How To Enable HSTS Preload - Cheap SSL Security","isPartOf":{"@id":"https:\/\/cheapsslsecurity.com\/p\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/#primaryimage"},"image":{"@id":"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/#primaryimage"},"thumbnailUrl":"https:\/\/cheapsslsecurity.com\/p\/wp-content\/uploads\/2025\/07\/hsts.png","datePublished":"2025-07-23T08:34:50+00:00","dateModified":"2025-07-23T08:39:09+00:00","author":{"@id":"https:\/\/cheapsslsecurity.com\/p\/#\/schema\/person\/3c82a53e4a962f90f3f1be2948c39eeb"},"description":"Have you ever heard about HTTP Strict Transport Security (HSTS) and submitting your site for HSTS Preload? It is a good time to figure it out.","breadcrumb":{"@id":"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/#primaryimage","url":"https:\/\/cheapsslsecurity.com\/p\/wp-content\/uploads\/2025\/07\/hsts.png","contentUrl":"https:\/\/cheapsslsecurity.com\/p\/wp-content\/uploads\/2025\/07\/hsts.png","width":975,"height":450,"caption":"HSTS"},{"@type":"BreadcrumbList","@id":"https:\/\/cheapsslsecurity.com\/p\/how-to-enable-hsts-preload\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"SSL Help","item":"https:\/\/cheapsslsecurity.com\/p\/"},{"@type":"ListItem","position":2,"name":"SSL Installation Guides","item":"https:\/\/cheapsslsecurity.com\/p\/ssl-installation-guides\/"},{"@type":"ListItem","position":3,"name":"How To Enable HSTS Preload"}]},{"@type":"WebSite","@id":"https:\/\/cheapsslsecurity.com\/p\/#website","url":"https:\/\/cheapsslsecurity.com\/p\/","name":"Cheap SSL Security","description":"Shop for SSL Certificates at Cheap Prices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cheapsslsecurity.com\/p\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cheapsslsecurity.com\/p\/#\/schema\/person\/3c82a53e4a962f90f3f1be2948c39eeb","name":"Vladislavs Dovoreckis","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/678b0f8742583ba7eb96e5c4a0db9417f91f18ad9732a624504fed3fb4f2ac24?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/678b0f8742583ba7eb96e5c4a0db9417f91f18ad9732a624504fed3fb4f2ac24?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/678b0f8742583ba7eb96e5c4a0db9417f91f18ad9732a624504fed3fb4f2ac24?s=96&d=mm&r=g","caption":"Vladislavs Dovoreckis"}}]}},"_links":{"self":[{"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/posts\/2464","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/comments?post=2464"}],"version-history":[{"count":0,"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/posts\/2464\/revisions"}],"wp:attachment":[{"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/media?parent=2464"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/categories?post=2464"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cheapsslsecurity.com\/p\/wp-json\/wp\/v2\/tags?post=2464"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}