Introduction
Most websites use the Hyper Text Transfer Protocol (HTTP) which isn’t secure by default. However, it’s entirely possible to make your website secure by installing an SSL certificate. A combination of HTTP and SSL enables websites to maintain an encrypted connection over the internet.
Let’s Encrypt is an open source certificate authority that makes it easy for everyone to install SSL certificates. In this article, we will guide you through a step by step tutorial on how you can install a free SSL certificate to your WordPress site. But before we begin, let’s take a look at what SSL certificates are and why you may want one on your site.
Let’s get cracking!
What Is an SSL Certificate?
As we briefly mentioned above, HTTP acts like a connecting bridge between your site and the user’s browser. By default, HTTP isn’t encrypted which poses a potential security threat to your site’s visitors. To fence this weak link, SSL is used as a checkpoint to guarantee the security of the data being exchanged over the web.
Data encryption is enabled by installing an SSL certificate so that your WordPress site uses HTTPS instead of HTTP. Every site is issued with a unique SSL certificate for identification purposes. There are three types of certificates that indicate the levels of trust by the user in the SSL negotiation:
1. Domain Validated Certificate
2. Organization Validation Certificate
3. Extended Validation Certificate
Benefits of Implementing an SSL Certificate
Switching over to HTTPS is a great way to increase your WordPress site’s security. In addition to this, it also allows potential customers and subscribers to interact with your site without having to worry about their personal data being intercepted. This would not only help in building trust but would also give your search engine ranking a boost.
- Transactions. Security is one of the major concerns. Especially if you are running an e-commerce site because payments need to be accepted securely. You need your site to be encrypted if you want to prevent yourself from losing sales and safeguarding your customers from vulnerability. Additionally, this is a definite plus for your site’s image and reputation.
- Web forms. Companies dealing with web forms which contain personal information of the users need to have a secure connection. Understandably so, users wouldn’t want their information going into wrong hands, therefore, it’s a better idea to use an SSL certificate.
- User login information. Keeping your user’s login information secure is vital. If you’re running a membership site then it’s important that your site’s visitors know that their login credentials are encrypted in the back end.
- SEO. As we mentioned before, HTTPS is already being used as a ranking factor for search engines and it is expected in the future that it would have an even greater impact. To ensure that websites shift to HTTPS, Google has made it a bare minimum that every site that shows up in the search engine is using secure protocols. This would improve the quality of SEO and help in identifying unique content.
Now that we know what an SSL certificate is and why it’s a good idea to install one, let’s take a look at how you can easily get a free SSL certificate and implement it on your WordPress site – the right way.
How to Install an SSL Certificate From Let’s Encrypt
Let’s Encrypt is a certificate authority that has hugely simplified installing an SSL certificate. Back in the day, acquiring an SSL certificate was not only cumbersome but costly, as well. Today, Let’s Encrypt offers free, automated certificates for everyone giving them what they need to enable HTTPS on their websites.
Since you’ll be messing around with WordPress’ back end, as a precautionary step, creating a full backup of your website is one of the most important things to do before you begin.
Step 1: Install Your Free SSL Certificate
If your hosting provider offers free SSL certificates from Let’s Encrypt then you can easily install it from within your hosting account.
Start out by logging into your hosting account. Next, head over to SSL > Add Certificate > Let’s Encrypt certificate. The exact names for each section and page may be different though the process remains the same. Once you’re there, select the domain you want to install the SSL certificate to and save changes.
If your hosting provider doesn’t offer free SSL certificate installation then you can modify the .htacess file directly. Open the file in a file editor and add the following lines of code to it:
RewriteEngine On
RewriteCond%{SERVER_PORT} 80
RewriteRule ^(.*)$ https://yourdomain.com/$1 [R,L]
Let’s Encrypt’s official documentation has a detailed account of how you can install an SSL certificate to your site manually. If the steps outlined above don’t work for you then you can always do it yourself.
Step 2: Update Your WordPress URLs
Once you are done with the initial step, from a technical viewpoint, your site is using HTTPS. To get maximum benefit out of it, you need to change the URLs of your Word Press site. This is to ensure that the traffic doesn’t keep going back and forth between the insecure and secure link. So it’s important to inform your browser about the changes you have made to the domain.
If you have a new WordPress website then all you have to do is change the URLs from your site’s settings page.
1. Go to the General Settings menu from your WordPress admin panel by navigating to Settings > General.
2. Scroll down to WordPress Address URL and Site Address URL.
3. Update fields by replacing http with https in both text boxes.
On the other hand, if your website is already being indexed by search engines then you’ll have to update the URLs by installing a plugin. We recommend going with the Really Simple SSL plugin because you don’t have to configure any settings – once you’ve activated it, it’ll update your WordPress site’s URLs automatically.
If you are having a problem in updating the URL of your WordPress sites head over to the WordPress Codex for more information.
Step 3: Update Your Google Analytics Settings
Google Analytics is an analytical tool that allows you to monitor your traffic and lets you manage the site related progress and problems. If you use it then you’ll have to update your site’s URL from Google Analytics’ Property Settings.
Start off by logging into your Google Analytics account. From the dashboard, head over to Admin and click on Property Settings. Next, click on http:// and choose https//. Finally, click the Save button at the bottom of the page to update the settings.
Sucuri and SSL
Sucuri is a website security platform that offers a suite of tools designed to help website owners protect their sites from attacks and clean up hacked sites. By using their products – Sucuri Firewall and Sucuri Platform – you can optimize your website for performance, detect malware, leverage DDoS mitigation, and much more.
On top of all of this, Sucuri has partnered with Let’s Encrypt to provide free SSL certificates to all customers using Sucuri Firewall. The one-click SSL certificate installation is incredibly easy to follow and allows users to get up and running with the HTTPS protocol in ten minutes. By opting forSucuri Firewall, you get access to neat features like performance optimization, DDoS mitigation, and stop hackers, in addition to a free SSL certificate. It’s a win-win!
Conclusion
In the article we discussed what an SSL Certificate is and how it can help you encrypt the connection between the visitor’s browser and your site, why opting for SSL certificates is a good idea, and how you can acquire an SSL certificate from Let’s Encrypt.
The installation and updating procedure can be divided into three very simple steps:
1. Install free SSL certificate either manually or through your current hosting provider.
2. Update WordPress site URLs to divert your site traffic through a secure channel.
3. Update Google Analytics settings to ensure that the data being analyzed after migrating to HTTPS is accurate.
We hope that this article has been helpful. If there are any queries regarding installing an SSL certificate that we have not addressed in this article then be sure to let us know in the comments section below.
The post How To’s & TutorialsA Beginner’s Guide to Installing a Free SSL Certificate on Your WordPress Site appeared first on ThemeFuse.