{"id":12053,"date":"2020-09-12T15:00:07","date_gmt":"2020-09-12T13:00:07","guid":{"rendered":"https:\/\/qodeinteractive.com\/magazine\/?p=12053"},"modified":"2020-11-17T09:51:29","modified_gmt":"2020-11-17T08:51:29","slug":"how-to-add-free-ssl-certificate-wordpress","status":"publish","type":"post","link":"https:\/\/qodeinteractive.com\/magazine\/how-to-add-free-ssl-certificate-wordpress\/","title":{"rendered":"How to Add a Free SSL Certificate in WordPress"},"content":{"rendered":"

[vc_row][vc_column][vc_column_text]Any internet user has, at one time or another, come across an insecure site while browsing. Depending on the website, there could be a small notice next to the site\u2019s URL \u2013 \u201cNot secure\u201d or a red, warning page. Such a sight can scare users and make them think that their data might be stolen or that they might have acquired some malware. As such, visitors quickly turn away from or leave such sites and they usually never try to access them again. To address this issue, most webmasters have opted to add an additional security layer to their sites in the form of SSL certificates. In fact, adding SSL is a must, no matter if you are a beginner or an advanced WordPress user. Therefore, we decided to make a guide explaining how to add free SSL in WordPress quickly and easily. Please note that this guide is aimed mostly towards beginners, but it contains information that anyone can find useful.
\n[\/vc_column_text][vc_empty_space height=”68px”][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n

Importance of SSL<\/h2>\n

[\/vc_column_text][vc_column_text]Two important internet security protocols were developed in the past\u2014SSL and its successor TLS. They are often referred to as SSL\/TLS but in most circles, only the name SSL has stuck. Therefore, we will refer to it as such in this article, as well.
\n[\/vc_column_text][vc_empty_space height=”28px”][vc_column_text]SSL means Secure Socket Layer. It adds an important layer of encryption to any data used or shared on the site. As such, it\u2019s mandatory for any eCommerce website. Users can feel safe if they want to use their login or credit card information on a site that has an SSL certificate. SSL also provides an added layer of security against malware and it has a positive influence on your website speed. By adding SSL, you will be switching from an HTTP protocol to HTTPS (Hypertext Transfer Protocol Secure). However, to enjoy all those advantages, your SSL needs to be generated by a certificate authority (CA), whose trustworthiness can be recognized by browsers. Only then your site will have the secure padlock next to the URL.
\n[\/vc_column_text][vc_empty_space height=”50px”]

\n
\n \"Secure <\/div>\n<\/div>[vc_empty_space height=”78px”][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n

Free SSL certificate configuration<\/h2>\n

[\/vc_column_text][vc_column_text]A couple of years ago, SSL certificates needed to be paid for, which made them less accessible for the general public. However, since then, various free SSL certificate authorities have emerged. One of the most famous is Let\u2019s Encrypt<\/a>. It is a non-profit organization, supported by Google Chrome, Mozilla Firefox, Facebook, OVH, and many others. They make acquiring, setting, and maintaining SSL certificates much easier. Nowadays, most hosting providers offer free SSL certificates, and those are often from Let\u2019s Encrypt. However, depending on the hosting provider, the SSL configuration process may vary substantially. As such, we suggest asking your hosting provider first whether a free SSL certificate is included in your hosting plan and how to implement it.[\/vc_column_text][vc_empty_space height=”28px”][vc_column_text]If your hosting provider doesn\u2019t offer an SSL certificate or you weren\u2019t able to implement it properly, you can always try to find a website that issues free SSL certificates. The one we\u2019re going to use to explain the process is SSL For Free<\/a>, which functions thanks to Let\u2019s Encrypt.[\/vc_column_text][vc_empty_space height=”28px”][vc_column_text]To create and configure your free SSL certificate, enter your domain URL<\/strong>. Please note that the https:\/\/ is already included<\/strong>, so make sure not to double it, and press the Create Free SSL Certificate<\/em> button<\/strong>.[\/vc_column_text][vc_empty_space height=”50px”]

\n
\n \"Creating <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]This will open a sign-up window. If you don\u2019t already have an account with SSL For Free, you can create one for free now. Simply insert a valid email address, input a password, and press the Register<\/em> button<\/strong>.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"Creating <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]Then, press the Next Step<\/em> button<\/strong> since you will have the domain URL already inserted.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"Creating <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]In the following window, make sure that the Free<\/em> option is selected<\/strong> and press the Next Step<\/em> button<\/strong>.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"Creating <\/div>\n<\/div>[vc_empty_space height=”50px”][vc_column_text]Then, choose the HTTP File Upload<\/em> as the verification method<\/strong> and click on the Download Auth File<\/em> link<\/strong>, which will download a .txt verification file.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"Creating <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]Afterward, open a new browser tab<\/strong> and log in to cPanel<\/strong> using your cPanel credentials. Navigate to File Manager option<\/strong>, located in the Files section at the top.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"cPanel <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]Then, navigate to the root WordPress directory of your domain<\/strong>, often called public_html, and press the +Folder<\/em> option<\/strong> at the top to create a new folder within that directory. Insert \u201c.well-known\u201d as the folder name<\/strong> and press the Create New Folder<\/em> button<\/strong> below.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"cPanel <\/div>\n<\/div>[vc_empty_space height=”60px”]
\n
\n \"cPanel <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]Open the newly created .well-known folder<\/strong> and add a new folder within it named \u201cpki-validation\u201d<\/strong>.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"cPanel <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]From within the pki-validation<\/em> folder, select the Upload<\/em> option<\/strong> found near the top. In the following window drag and drop the .txt verification file<\/strong> that you downloaded and wait until it is finished uploading<\/strong>.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"cPanel <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]Afterward, return to the first tab<\/strong> where you\u2019re setting up your SSL certificate, and press the Next Step<\/em> button<\/strong>.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"Creating <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]In the following window, press the Verify Domain<\/em> button<\/strong> and wait a bit<\/strong> until the domain verification process is done.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"Creating <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]Then, click the gray Download Certificate (.zip)<\/em> button, followed by a click on the Next Step<\/em> button<\/strong>.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"Creating <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]Meanwhile, unzip the file you downloaded. Inside it, you will see three different files: ca_bundle.crt<\/strong>, certificate.crt<\/strong>, and private.key<\/strong>, you\u2019ll need them for the following steps.[\/vc_column_text][vc_empty_space height=”28px”][vc_column_text]Press the Help Centar<\/em> link<\/strong> that will lead you to the documentation<\/a> describing the remaining steps for the certificate installation.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"Creating <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]The instructions are separated based on different server types you can have. Choose the appropriate link for you and follow the instructions<\/strong>. If you aren\u2019t sure what your server type is or if you can implement the steps outlined in the instructions, we advise you to ask your hosting provider for help<\/strong>.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"Creating <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]After you\u2019ve completed all the steps outlined in the appropriate installation link, return to the Install Certificate<\/em> window<\/strong> and press the Check Installation<\/em> button<\/strong> to see whether the SSL certificate was installed properly.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"Creating <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]If all went well, you should be able to see the following success screen.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"Creating <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]The only thing that remains now is to implement a 301 redirection rule. To do so, navigate once more to the File Manager<\/em> option<\/strong>, located in the Files section in cPanel.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"cPanel <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]Open your root WordPress directory and find a file named .htaccess within it.<\/strong> If you aren\u2019t able to see it, make sure to enable the options for viewing hidden files<\/a>. You can do so within cPanel. Click the Settings<\/em> option<\/strong> in the top right corner, tick the checkbox next to the Show Hidden Files (dotfiles)<\/em> option<\/strong>, and press the Save<\/em> button<\/strong>.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"Creating <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]When you\u2019ve located the .htaccess file, right-click on it<\/strong> and choose the Edit<\/em> option in the dropdown<\/strong>.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"Editing <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]A popup window will appear, you need to press the Edit<\/em> button<\/strong> to edit the file.[\/vc_column_text][vc_empty_space height=”50px”]
\n
\n \"Editing <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]Insert the following code<\/strong> into the file and press the Save Changes<\/em> option<\/strong> found in the top right corner.[\/vc_column_text][vc_empty_space height=”28px”][vc_column_text]<\/p>\n
<IfModule mod_rewrite.c>\r\nRewriteEngine On\r\nRewriteCond %{HTTPS} !=on\r\nRewriteCond %{ENV:HTTPS} !=on\r\nRewriteRule .* https:\/\/%{SERVER_NAME}%{REQUEST_URI} [R=301,L]\r\n<\/IfModule><\/pre>\n
[\/vc_column_text][vc_empty_space height=”50px”]
\n    
\n                                    \"Editing                        <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]If you don\u2019t have access to cPanel, you can also add the redirection code via FTP<\/a>. If you have difficulty finding the .htaccess via FTP, make sure to enable the option for viewing hidden files within your preferred FTP client.[\/vc_column_text][vc_empty_space height=”28px”][vc_column_text]With that, the SSL certificate configuration process using SSL For Free is done.[\/vc_column_text][vc_empty_space height=”80px”][vc_widget_sidebar sidebar_id=”new-top-picks-banner”][vc_empty_space height=”81px”][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n
Changing URLs from HTTP to HTTPS<\/h2>\n
[\/vc_column_text][vc_column_text]However, even though we configured and activated the SSL certificate, the process of adding SSL to your WordPress website isn’t over yet. Some additional steps need to be taken, and we will quickly cover them in this section. But, before we start, we suggest that you manually back up your WordPress site,<\/a> or ask your hosting provider for help making a backup.[\/vc_column_text][vc_empty_space height=”72px”][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n
Changing WordPress URLs<\/h3>\n
[\/vc_column_text][vc_column_text]The first thing you need to do is to change the WordPress URLs from your dashboard. Those include your Site Address (the URL your visitors type in to access your site) and your WordPress Address (the location of your WordPress folders and files).[\/vc_column_text][vc_empty_space height=”28px”][vc_column_text]Changing your WordPress URLs is done by navigating to Settings > General and updating them to HTTPS. Press the Save Changes<\/em> button afterward.<\/strong>[\/vc_column_text][vc_empty_space height=”50px”]
\n    
\n                                    \"Site                        <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]But, doing so will change only these two addresses. If your site is new, and if you haven\u2019t added any content to it (such as links, images, files, etc.), then you have successfully added SSL to your site and you\u2019re done. However, for the vast majority of users, this is not the case since they already have content on their site. Therefore, there are some added steps you need to take to change the URLs found in the site content and we will cover them in the next section.[\/vc_column_text][vc_empty_space height=”28px”][vc_column_text]In case you weren\u2019t able to change your URLs directly from your dashboard, you can try other ways of changing WordPress URLs<\/a>.[\/vc_column_text][vc_empty_space height=”72px”][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n
Using Really Simple SSL plugin<\/h3>\n
[\/vc_column_text][vc_column_text]After changing the WordPress URLs, you need to install the Really Simple SSL<\/a> plugin. It is a very user-friendly plugin, which is also lightweight and it makes the process of moving to HTTPS a rather simple task.[\/vc_column_text][vc_empty_space height=”50px”]
\n    
\n                                    \"Really                        <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]After installing it, you will be redirected to Plugins > Installed Plugins<\/strong> where you will see the Almost ready to migrate to SSL!<\/strong><\/em> message at the top section of your screen. Simply click on the Go ahead<\/em>, activate SSL!<\/em> button to activate the plugin<\/strong>. Doing this will also log you out of your dashboard. Log back in<\/strong> using your admin credentials.[\/vc_column_text][vc_empty_space height=”50px”]
\n    
\n                                    \"Login                        <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]The process is mostly over by this point. You can navigate to Settings > SSL to see what the Really Simple SSL plugin has done and if it has some further suggestions. Have in mind that some features are restricted to the premium version of the plugin.[\/vc_column_text][vc_empty_space height=”50px”]
\n    
\n                                    \"Really                        <\/div>\n<\/div>[vc_empty_space height=”82px”][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n
Solving mixed content issues<\/h3>\n
[\/vc_column_text][vc_column_text]The main features of the Really Simple SSL plugin are setting 301 redirects and a mixed content error fixer that changes your HTTP links into HTTPS. However, some links might not have been changed and remain HTTP despite the plugin being active. This is what is referred to as a mixed content issue<\/strong><\/em>.[\/vc_column_text][vc_empty_space height=”28px”][vc_column_text]In most cases, those links belong to images that were uploaded using the HTTP protocol or, rarely, some CSS or JS files. To solve this issue, we first need to acquire a list of insecure resources that are causing it. You can do this by going to the Why no padlock<\/a> site. Once there, insert your site\u2019s URL, tick the reCAPTCHA, and click on the TEST PAGE<\/em> button<\/strong>.[\/vc_column_text][vc_empty_space height=”50px”]
\n    
\n                                    \"Why                        <\/div>\n<\/div>[vc_empty_space height=”38px”][vc_column_text]The test report will show if your site is secure or not. It will also give you a list of insecure resources if it finds a mixed content issue. If the results list only contains links for images, you simply need to re-upload the images causing the issue. However, if the insecure URLs are located in a CSS or JS file, you will need to edit the files manually to solve the issue. For the less programming savvy, we suggest that you ask your hosting provider for assistance. You can also contact the developers of your theme or plugins if the insecure files are part of a theme or plugin that you\u2019re using.[\/vc_column_text][vc_empty_space height=”72px”][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n
Updating Google Analytics URL<\/h3>\n
[\/vc_column_text][vc_column_text]Google Analytics is a widely-used web analytics service, offering various kinds of site-relevant data. It includes data on website activity, visitors and their geographical location, poorly performing pages, advert or shop revenue, and much more. So, if you don\u2019t want to miss on all the data that is so neatly packed in your Google Analytics dashboard it is important to update your URL after adding an SSL certificate[\/vc_column_text][vc_empty_space height=”28px”][vc_column_text]To update your URL, you must first log in to the Google Analytics website<\/a> with your credentials, and head to the Admin section. Click on Property Settings<\/em> and locate the Default URL<\/em> option<\/strong>. Click on the protocol part of the URL and select https:\/\/ as your protocol<\/strong>. This will update your URL, so you can keep getting all the currently relevant site data.[\/vc_column_text][vc_empty_space height=”50px”]
\n    
\n                                    \"Google                        <\/div>\n<\/div>[vc_empty_space height=”78px”][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n
Final Thoughts<\/h2>\n
[\/vc_column_text][vc_column_text]This concludes our guide on adding free SSL. If you have any further questions regarding any of the steps covered or want some additional tips, we suggest that you also take a look at our in-depth guide on switching from HTTP to HTTPS.<\/a>[\/vc_column_text][vc_empty_space height=”28px”][vc_column_text]Switching to HTTPS and using SSL will do a lot for your site security. And it will let your visitors rest easy knowing their information is secure and your site trustworthy. So don\u2019t wait, make sure to add free SSL to your WordPress site today! Use the information from this article and follow the steps carefully so your site will reflect the best security practices out there.[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"
Adding a free SSL certificate in WordPress will give your site an extra layer of protection. Make your visitors feel both safe and welcome while browsing.<\/p>\n","protected":false},"author":11229,"featured_media":12208,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[34,4,13],"class_list":["post-12053","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tutorials","tag-security","tag-tips","tag-wordpress"],"_links":{"self":[{"href":"https:\/\/qodeinteractive.com\/magazine\/wp-json\/wp\/v2\/posts\/12053","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qodeinteractive.com\/magazine\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/qodeinteractive.com\/magazine\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/qodeinteractive.com\/magazine\/wp-json\/wp\/v2\/users\/11229"}],"replies":[{"embeddable":true,"href":"https:\/\/qodeinteractive.com\/magazine\/wp-json\/wp\/v2\/comments?post=12053"}],"version-history":[{"count":0,"href":"https:\/\/qodeinteractive.com\/magazine\/wp-json\/wp\/v2\/posts\/12053\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/qodeinteractive.com\/magazine\/wp-json\/wp\/v2\/media\/12208"}],"wp:attachment":[{"href":"https:\/\/qodeinteractive.com\/magazine\/wp-json\/wp\/v2\/media?parent=12053"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/qodeinteractive.com\/magazine\/wp-json\/wp\/v2\/categories?post=12053"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/qodeinteractive.com\/magazine\/wp-json\/wp\/v2\/tags?post=12053"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}