How to Activate Free SSL Certificate – Free WordPress SSL Setup

An SSL certificate is helpful in protecting your users from cyber attacks. It also builds a level of trust with your website visitors.

SSL is an abbreviation for Secured Socket Layer. It’s an encryption protocol that protects data in transit. Although the SSL abbreviation has stuck, modern SSL certificate actually use TLS (or Transport Layer Security), a more modern and more secure version of SSL.

While most SSL certificates are usually expensive to acquire, there are a few ways to get an SSL certificate at zero cost for your WordPress site. 

This is what we will show you in this step-by-step guide but first of all, let’s talk about why your WordPress website needs an SSL Certificate.

Why Your WordPress Website Needs An SSL Certificate

An SSL certificate is not just for websites that collect and process payment and personal information. It’s one of the most reliable ways of assuring the user that they can trust your website.

By encrypting the information flow between the client and the server, the SSL certificate minimizes the chances of a successful man-in-the-middle attack.

Because it’s such an essential part of securing a website, modern browsers no display prominent warnings whenever you try to access a page that is not protected by an SSL certificate. If you don’t have one, your search engine rankings are also likely to suffer.

In other words, there’s no excuse for ignoring the need for an SSL certificate, regardless of the type of website you’re running.

How an SSL Certificate Works

Now that you understand that having an SSL certificate for your WordPress website is essential. You want to know how an SSL certificate works in reality. 

When a user visits a website with an SSL certificate installed, their browser first verifies that the installed certificate is valid. 

The browser and the server then negotiate the encryption algorithm and start the so-called TLS handshake. During it, they exchange information encrypted with a public key that can only be decrypted with the certificate’s private key. With the handshake complete, another encryption key is generated. This is the one that will encrypt the information exchange during the session.

It’s a complex algorithm that involves both symmetric and asymmetric encryption and ensures the connection is secure.

What is Let’s Encrypt

Let’s Encrypt is a certificate authority that gives out free SSL certificates to all website owners.

If you have a ScalaHosting account, a Let’s Encrypt certificate will be issued and installed automatically as soon as you point your domain to our servers.

You can also manage your free and paid certificates from the SSL Certificates section inside SPanel’s User Interface.

How To Activate Free SSL In WordPress

After enabling an SSL certificate for your WordPress, we will go ahead to activate it on the website.

This activation updates your URL from HTTP to HTTPS indicating that the website is now secure. The SSL certificate won’t work, even after it has been enabled, until the URL is updated. 

To activate the free SSL in WordPress, log in to your WordPress administration dashboard

How to Activate Free SSL Certificate - Free WordPress SSL Setup

Next, go to the Settings option 

How to Activate Free SSL Certificate - Free WordPress SSL Setup

Click on General

How to Activate Free SSL Certificate - Free WordPress SSL Setup

Change your WordPress URL and Site URL to HTTPS

How to Activate Free SSL Certificate - Free WordPress SSL Setup

Click Save

How to Activate Free SSL Certificate - Free WordPress SSL Setup

This process works well if your website is new. However if you have a website already indexed on Google, some of its pages might still load as HTTP and others as HTTPS. This might become worrisome as a website administrator.

Thankfully, there is an easy way out. A few WordPress plugins like ‘Really Simple SSL’ and ‘SSL Insecure Content Fixer’ help to detect website’s SSL status and run all pages on HTTPS

How To Update Your Website URL Using Plugins

Log in to your WordPress Administrator dashboard

How to Activate Free SSL Certificate - Free WordPress SSL Setup

Go to the plugin option

How to Activate Free SSL Certificate - Free WordPress SSL Setup

Click on Add New Plugin

How to Activate Free SSL Certificate - Free WordPress SSL Setup

Click on Upload Plugin

How to Activate Free SSL Certificate - Free WordPress SSL Setup

Upload the downloaded plugin file, Click on Install Now

How to Activate Free SSL Certificate - Free WordPress SSL Setup

After installing the plugin, click on Activate

The activated plugin, automatically detects HTTP pages and runs them on HTTPS.

Conclusion

Your Scalahosting account comes with a Let’s Encrypt certificate preinstalled for free. So you don’t have to worry about generating or installing a free SSL certificate in the beginning.

However, you might need extra encryption if you’re creating subdomains. You can get an SSL certificate for those specific needs, here.

If you ever need a hand with your SSL certificate installation, our support is always available to help you get it done on time.

Was this helpful?

What’s your goal today?

1. Sign up to our newsletter and keep up to date with the latest news. Our team consist of highly skilled ex-sysadmins and hosting veterans, ready to share their unique hosting-related knowledge with you.

Sign up for ScalaHosting monthly News Letter and we will keep you up to date about the most valuable pieces of content we publish on our blog

2. Explore our VPS Hosting - with our 30-day unconditional money-back guarantee and free, effortless migration, you can try our award-winning Managed Cloud VPS solutions risk-free.

Rado
Author

Working in the web hosting industry for over 13 years, Rado has inevitably got some insight into the industry. A digital marketer by education, Rado is always putting himself in the client's shoes, trying to see what's best for THEM first. A man of the fine detail, you can often find him spending 10+ minutes wondering over a missing comma or slightly skewed design.

Write a Comment

Required*

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.