<\/span><\/h2>\n\n\n\nSSL (Secure Sockets Layer) is a digital certificate that encrypts the data that is being transaction between a website’s users” browser, and your website’s web server. Once add SSL to your website, your website URL will changer from HTTP to HTTPS, and a padlock icon will appear to the left of your address bar.<\/p>\n\n\n\n
Reasons you need SSL<\/strong>:<\/strong><\/p>\n\n\n\n\n- Security: <\/strong>it will protect a user’s data (including logins, payments, and forms).<\/li>\n\n\n\n
- SEO ranking boost:<\/strong> google loves HTTPS websites.<\/li>\n\n\n\n
- User trust:<\/strong> the presence of the padlock icon indicates a safe place for visitors.<\/li>\n\n\n\n
- Compliance:<\/strong> most payment gateways and browsers require SSL by default.<\/li>\n<\/ul>\n\n\n\n
The alternative is a “Not Secure” banner in visitor browsers (a big, red banner).<\/p>\n\n\n\n
Step 2: Obtain a Free SSL Certificate from Let\u2019s Encrypt<\/strong><\/p>\n\n\n\nLet\u2019s Encrypt is a free, open-source Certificate Authority that is recognized and trusted by all major browsers. It will provide you with an SSL certificate at absolutely no cost and automatically renew the certificate every 90 days.<\/p>\n\n\n\n
Here are your steps:<\/strong> <\/p>\n\n\n\n\n- Identify your web server or hosting provider.<\/li>\n\n\n\n
- Follow the on-site installation instructions, or use certbot for an automated installation.<\/li>\n\n\n\n
- Once it is in place, your site URL should now be changed to HTTPS.<\/li>\n<\/ul>\n\n\n\n
If you are using a coding site with a custom backend (like node.js, Django or PHP), you can also manually install the certificate on your server.<\/p>\n\n\n\n
Step 3: Enable SSL within WordPress<\/strong><\/p>\n\n\n\nIf your site is based on the WordPress platform, SSL activation is very easy.<\/p>\n\n\n\n
Option 1: Use a Plugin (Recommended for Beginners)<\/strong><\/p>\n\n\n\nSimply install and activate the Really Simple SSL plugin:<\/p>\n\n\n\n
\n- Head to your WordPress Dashboard \u2192 Plugins \u2192 Add New<\/li>\n\n\n\n
- Search for “Really Simple SSL.”<\/li>\n\n\n\n
- Install and activate.<\/li>\n\n\n\n
- The plugin will recognize your SSL certificate and will switch your website from HTTP to HTTPS automatically.<\/li>\n<\/ol>\n\n\n\n
Option 2: Manual Enable<\/strong><\/p>\n\n\n\nIf you would prefer to do it manually:<\/p>\n\n\n\n
\n- Head to Settings \u2192 General in your WordPress dashboard.<\/li>\n\n\n\n
- Change the WordPress Address (URL) and Site Address (URL) to https:\/\/.<\/li>\n\n\n\n
- Update the changes.<\/li>\n<\/ol>\n\n\n\n
This will redirect all of the traffic to the secure version of your site.<\/p>\n\n\n\n
Step 4. Test that your SSL is installed<\/strong><\/p>\n\n\n\nAfter you have activated it, you want to make sure that the SSL certificate is working.<\/p>\n\n\n\n
You can use several tools for that:<\/p>\n\n\n\n
\n- SSL Checker (sslshopper.com)<\/li>\n\n\n\n
- WhyNoPadlock.com<\/li>\n\n\n\n
- Qualys SSL Labs Test.<\/li>\n<\/ul>\n\n\n\n
These tools will show you if your certificate is active, valid and properly configured.<\/p>\n\n\n\n
Step 5. Fix mixed content issues<\/strong><\/p>\n\n\n\nSometimes, after you enable the SSL on your site you may still get browser warnings that read something along the lines of: \u201cThis site is not fully secure.\u201d This usually happens because some files (like images or scripts) are still pulling over HTTP, instead of HTTPS.<\/p>\n\n\n\n
To fix it:<\/strong><\/p>\n\n\n\n\n- You can use Really Simple SSL or a Better Search Replace plugin that will replace all the old links.<\/li>\n\n\n\n
- Or, you can manually search the database for \u201chttp:\/\/yourdomain.com\u201d and replace with \u201chttps:\/\/yourdomain.com\u201d<\/li>\n<\/ul>\n\n\n\t\t