LetsEncrypt Free SSL for WordPress:The importance for Security is increasing day by day. Google had announced that HTTPS will be a Factor that is going to effect Ranking of Web Sites in Google. Its not late to add SSL for websites. Google Chrome started showing a “Not Secure” Warning when accessing non-https websites. Its all showing the importance of ssl for websites.
What is SSL?
SSL (Secure Socket Layer) is the standard security technology for establishing an encrypted link between a web server and a browser. This secure link ensures that all data transferred remains private. It’s also called TLS (Transport Layer Security). Millions of websites use SSL encryption everyday to secure connections and keep their customer’s data safe from monitoring and tampering.
Why Use SSL?
Every website on the Internet should be served over HTTPS. Here’s why:
- Performance: Modern SSL can actually improve page load times.
- Search Ranking Boost: Search engines favor HTTPS websites.
- Security: Encrypting traffic with SSL ensures nobody can snoop on your users’ data.
- Trust: By displaying a green lock in the browser’s address bar, SSL increases visitor’s trust.
- Regulatory Compliance: SSL is a key component in PCI compliance.
reference: CloudFlare SSL
I had implemented CloudFlare Free SSL for WordPress for this Website. I recommend that everyone implement SSL as soon as possible with any delay.
LetsEncrypt Free SSL for WordPress:
What is Let’ Encrypt SSL?
Let’s Encrypt is a free, automated, and open certificate authority (CA), run for the public’s benefit. It is a service provided by the Internet Security Research Group (ISRG).
We give people the digital certificates they need in order to enable HTTPS (SSL/TLS) for websites, for free, in the most user-friendly way we can. We do this because we want to create a more secure and privacy-respecting Web.
The key principles behind Let’s Encrypt are:
- Free: Anyone who owns a domain name can use Let’s Encrypt to obtain a trusted certificate at zero cost.
- Automatic: Software running on a web server can interact with Let’s Encrypt to painlessly obtain a certificate, securely configure it for use, and automatically take care of renewal.
- Secure: Let’s Encrypt will serve as a platform for advancing TLS security best practices, both on the CA side and by helping site operators properly secure their servers.
- Transparent: All certificates issued or revoked will be publicly recorded and available for anyone to inspect.
- Open: The automatic issuance and renewal protocol will be published as an open standard that others can adopt.
- Cooperative: Much like the underlying Internet protocols themselves, Let’s Encrypt is a joint effort to benefit the community, beyond the control of any one organization.
Install LetsEncrypt Free SSL for WordPress:
Lets Encrypt is not supported by All Web Hosts. Do check with the Web Hosting Company whether they provide LetsEncrypt SSL for their customers. Sadly, If there is no Let’s Encrypt SSL Option available for the Host, We can Install a Free SSL using CloudFlare .
- Check Whether the Web Host Provides Let’s Encrypt Feature by logging into the CPanel.
- Click on Let’s Encrypt SSL found in Security Tab.
- Click on the + Issue button.
- You will be asked to select additional domain to Install certificate. Select as required and Click Issue
- Tada! We have successfully Added LetsEncrypt FREE SSL for WordPress.
After we have Installed the certificate from the Cpanel we need to configure WordPress to use https instead of http.
Make Changes to WordPress Settigns:
- Logon to WordPress Dashboard and Go to General Settings.
- Change Site URL from http://www.yourdomain.com to https://www.yourdomain.com
- Install Really Simple SSL Plugin.
- Activate the Plugin.
Now you have Successfully Installed the certificate and also made necessary changes to WordPress Settings. The SSL should be working fine by now. Go ahead at give it a test drive. Let me know if you face any issue or got into any trouble.
The method is tried and tested and I have personally installed LetsEncrypt SSL for some of my websites and they are running fine without any issues. A lot of people worry about getting Mixed Content issue, which basically causes loops but I never faced the issue. Follow the Instructions carefully. Installing an SSL via LetsEncrypt Free SSL is much easier than Implementing CloudFlare Free SSL because we need very less effort to setup LetsEncrypt SSL, less steps and just one simple plugin for WordPress.