HTTPS on Blogger: the redirect setting and the certificate

Blogger gives every blog HTTPS. What you have to do depends on whether you use a custom domain.

On a blogspot.com address

Blogger's settings page says that blogspot addresses are always HTTPS. The HTTPS redirect setting for a blogspot address decides what happens when someone opens the old http:// form. With the redirect on, visitors to http://yourblog.blogspot.com always go to the https:// version. With it off, the http:// address is served over an unencrypted connection, and the https:// address over an encrypted one.

On a custom domain

The "HTTPS availability" setting is only for custom domains, because blogspot addresses are always secure. Blogger creates and renews an SSL certificate for your domain by itself after the domain is set up. It can take some time after you connect the domain.

Blogger's custom domain help has one important warning: if you use CAA records on your domain, you must add a record for letsencrypt.org. If you do not, Blogger will not create or renew the SSL certificate. CAA records are a DNS setting that says which companies may issue certificates for your domain. Most domains have none, so most readers can ignore this. Check in your DNS settings if you are not sure.

Turn on the redirect

1. Open Settings.
2. Find the HTTPS section.
3. Turn on HTTPS redirect.

After that, visitors who use the plain http:// address are sent to the secure address.

Check the result

Open your blog in a private window. A padlock appears in the address bar when the page and its parts are loaded securely. If a page shows a warning about mixed content, a picture, script or stylesheet in the page still loads from an http:// address. Open the page in Edit HTML and change http:// to https:// for those files, or choose files from sources that support HTTPS.

If the certificate does not appear

• Wait. A new domain can take a while.
• Check that the two CNAME records from the custom domain setup are still there.
• Check for CAA records without letsencrypt.org.
• Turn the custom domain off and on again in Settings, then wait.

This is an independent guide. It is not connected with Google or Blogger. Blogger, AdSense and Google are names of Google LLC. The steps follow Blogger Help and AdSense Help as read on 13 November 2026; the Blogger screens change from time to time, so a menu may be named a little differently on your screen.