Q: We're finally moving HTTP to HTTPS — what's the full checklist so I don't break anything?

Q: We're finally moving HTTP to HTTPS — what's the full checklist so I don't break anything?

This trips people up because it feels small but touches everything. Take it in order.

Short answer: it's a site move in Google's eyes — treat it like one.

Long answer:
— Install the certificate, confirm it covers www and non-www (and any subdomains).
— Update all internal links, canonicals, and hreflang to https. Don't rely on redirects to fix internal links.
— 301 every http URL to its https twin, one-to-one.
— Fix mixed content: images, scripts, fonts still loading over http will throw warnings.
— Update your sitemap to https and resubmit.
— Add the https property in Search Console (it's a separate property).
— Update canonical tags, Open Graph URLs, and any hardcoded links in templates.

Next step: crawl the https site and confirm zero http URLs return 200 directly.