Most people think of SEO as content, keywords, and links. Those matter, but they all sit on top of a layer almost nobody looks at: your domain settings. This is the plumbing of your site, the configuration that decides what address your pages actually live at and how every other version of that address behaves. Get it right and Google sees one strong, consistent website. Get it wrong and the exact same content can appear at four different web addresses at once, splitting your authority and quietly capping how high you can rank.
This guide walks through the domain configuration that every site should have nailed down before chasing rankings: your DNS records, the choice between www vs non-www, forcing HTTPS everywhere, picking a single canonical domain, and using 301 redirect rules to consolidate the rest. None of this requires writing a single new blog post. It is configuration work, and it is some of the highest-leverage SEO you can do because it is the foundation everything else stands on.
Why Domain Settings Quietly Decide Your Ceiling
Here is the problem in one sentence: search engines treat http://example.com, https://example.com, http://www.example.com, and https://www.example.com as four different websites unless you tell them otherwise. If all four are reachable and return a 200 response, you have published the same content at four addresses. That is textbook duplicate content, and it dilutes the signals that should be pointing at one place.
The consequences are not theoretical. When authority gets spread across multiple versions of the same page, no single version is as strong as it should be. Internal links, backlinks, and crawl budget all get fragmented. In the audits we run, accessible duplicate versions of a homepage are one of the most common foundational issues we find, and they are almost always invisible to the owner because the site "works fine" in their browser.
The four-versions trap
The fastest way to see whether you have this problem is to type each variation into your browser by hand and watch what happens. The correct behavior is that three of the four versions redirect to the fourth. The broken behavior is that two or more of them load independently. If you can reach your site at both www and non-www, or at both http and https, without a redirect kicking in, you have work to do.
Start With DNS: The Address Book of the Internet
Before search engines worry about anything, a visitor's browser has to find your server. That is what DNS does. The Domain Name System translates a human-friendly name like example.com into the numeric IP address of the machine that serves your pages. Your DNS records live at your domain registrar or a DNS provider, and a handful of record types do almost all the work.
The records that matter most
- A record — points your root domain (the bare
example.com) at an IPv4 address. This is the anchor record for most sites. - AAAA record — the same idea for IPv6 addresses. Add it if your host supports IPv6.
- CNAME record — points one name at another name rather than an IP. The classic use is sending
www.example.comtoexample.comso you only manage one underlying address. - MX records — direct email, not web traffic. They will not affect your rankings, but breaking them while editing DNS will break your inbox, so leave them alone unless you mean to change mail.
- TXT records — used for verification (such as proving ownership in Google Search Console) and for email authentication like SPF and DKIM.
A note on propagation
DNS changes are not instant. Each record carries a TTL, or time-to-live, that tells resolvers how long to cache the old answer. After you edit a record, expect anywhere from a few minutes to a couple of days for the change to be seen everywhere. Lower the TTL a day before a planned migration so the switch takes effect quickly, then raise it again afterward.
Choosing One Canonical Domain
The single most important decision in this whole exercise is picking your canonical domain: the one true address you want every visitor and every search engine to land on. Everything else redirects to it. This is not about which version is "better" for SEO, because there is no ranking advantage to www over non-www or the reverse. The advantage comes entirely from picking one and enforcing it consistently.
The www vs non-www decision
The www vs non-www debate is largely a matter of preference, with one genuine technical wrinkle. A bare root domain cannot use a CNAME record at the apex on many DNS providers, which can complicate pointing it at a CDN or load balancer. The www subdomain has no such limitation, which is why large sites often prefer it. For a typical small-business website on standard hosting, either choice is fine. What is not fine is leaving both reachable.
How to decide quickly
- If you use a CDN or expect to scale infrastructure, lean toward
wwwbecause it plays nicely with CNAME-based routing. - If you prefer the cleaner-looking bare domain and your host supports apex aliasing, non-
wwwis perfectly fine. - Whatever you pick, set it once in Search Console-aware infrastructure and your server config, then never second-guess it.
Forcing HTTPS across the whole site
Serving your site over HTTPS is non-negotiable. It encrypts traffic, it is a confirmed lightweight ranking signal, and browsers now actively warn visitors away from pages served over plain HTTP. The work is twofold: install a valid SSL/TLS certificate (free certificates from Let's Encrypt are fine and auto-renew), and then redirect every HTTP request to its HTTPS equivalent so the insecure version is never the one that loads.
A common half-finished state is a site that has a certificate installed but still serves both protocols. The padlock appears, the owner assumes they are done, and meanwhile http:// versions of every page remain crawlable as duplicates. Installing the certificate and forcing the redirect are two separate jobs, and both have to happen.
Consolidating Everything With 301 Redirects
Once you have chosen your canonical domain and protocol, the mechanism that ties it all together is the 301 redirect. A 301 is a permanent redirect, and it does two things that matter for SEO: it sends the visitor to the right place, and it tells search engines to pass the ranking signals from the old address to the new one. This is the engine of domain consolidation. Every non-canonical version of every URL should issue a 301 to the canonical version.
The redirect chain you want
Done correctly, all roads lead to one place in a single hop. Here is the order of operations to implement:
- Pick your canonical form, for example
https://example.com(HTTPS, non-www). - Redirect HTTP to HTTPS so no insecure version ever loads.
- Redirect the non-canonical host, sending
wwwto non-www(or the reverse, matching your choice). - Normalize trailing slashes and index files, so
/page/and/page/index.htmlresolve to one form rather than loading as two pages. - Avoid redirect chains. A request should reach the canonical URL in one redirect, not bounce through three. Multi-hop chains waste crawl budget and slowly leak authority.
The trailing-slash detail people miss
One pattern we see repeatedly is a page that loads at both /path/ and /path/index.html, both returning a 200. That is the same duplicate content problem in miniature. A small server rule that 301-redirects the index-file form to the clean directory form fixes it. The same care applies to trailing slashes: pick one convention and redirect the other so a single page never has two live addresses.
Back it up with the canonical tag
The 301 redirect handles addresses that are reachable. The rel="canonical" tag handles the subtler cases, like URLs with tracking parameters, where you want a page to remain reachable but still tell Google which version is the master copy. Redirects and canonical tags are complementary tools: redirects for versions that should not exist independently, canonical tags for versions that legitimately exist but should consolidate their signals.
Verifying You Got It Right
Configuration without verification is just hope. After making these changes, confirm the behavior rather than assuming it. The checks are quick and worth running every time you touch domain settings.
- Type all four address variations into a browser and confirm three of them 301 to the fourth.
- Use a command-line tool or an online header checker to confirm the response is a
301, not a302(temporary) or a soft redirect via JavaScript, which does not pass signals reliably. - Curl the exact URLs listed in your XML sitemap and confirm each returns a
200, not a301. A sitemap that lists redirecting URLs sends Google a mixed message about your canonical form. - Check Google Search Console's coverage and page-indexing reports for "Duplicate without user-selected canonical" and "Alternate page with proper canonical tag" notices, which surface consolidation problems directly.
- Confirm the SSL certificate is valid and not expiring soon, and that no mixed-content warnings appear from assets still loading over HTTP.
Not sure how your domain is configured right now?
The fastest way to find out whether you have duplicate versions, broken redirects, or missing HTTPS enforcement is a technical audit. See how we evaluate the foundations of a site on our SEO audits page, or explore the full scope of our SEO services built on top of a clean technical base.
Get a Technical Domain ReviewA Safe Migration Playbook
If you are fixing these settings on a live site that already has rankings, treat it as a migration, not a quick edit. The goal is to consolidate signals without dropping traffic during the switch.
Before you change anything
- Lower your DNS TTL the day before so changes take effect fast and any mistake is quick to roll back.
- Crawl the current site and save a full list of live URLs and their current responses as a baseline.
- Make sure your canonical domain is verified in Search Console so you can monitor it through the transition.
After the switch
- Re-run the verification checklist above on a sample of real URLs, not just the homepage.
- Submit the updated sitemap and watch the page-indexing report for new errors over the following weeks.
- Update internal links to point directly at the canonical URLs so you are not relying on redirects for your own navigation.
The principle behind all of it
Every one of these steps serves a single idea: one piece of content should live at exactly one address, served securely, reachable one way, with every other path leading there in a single hop. When that is true, every link you earn and every page you publish reinforces the same strong signal instead of being split across copies of itself.
Where to Start Today
If you do nothing else after reading this, run the four-versions test on your homepage right now. If more than one version loads without redirecting, you have found a foundational issue worth fixing before you spend another dollar on content or links. From there, confirm HTTPS is forced, pick your canonical domain, and put the 301 redirect rules in place to consolidate the rest. These settings are not glamorous, but they are the floor your entire SEO program stands on. A clean foundation does not guarantee high rankings on its own, but a broken one quietly caps everything you build above it.