How To Install A Free SSL Security Certificate On Your WordPress Website
Articles,  Blog

How To Install A Free SSL Security Certificate On Your WordPress Website


Welcome back for another video my name is
Adam from WPCrafter.com were I make videos for non-techies now this is to be a longer
than normal video and working to talk SSL and that is adding a security certificate
to your website working to talk about what’s the difference between some of the the paid
certificates and the free certificates and what Webhost will except I want to try to
explain everything in this video as concisely as possible now let me first tell you in SSL
certificate has nothing to do with website security of someone hacking in your website
it has nothing to do that and the reason I bring bring this up as I did make an SSL video
before some guy was all criticizing me that I didn’t have an SSL certificate on my website
in and I’m not practicing what I’m preaching and stuff like that but SSL certificates are
for securing in encrypting information that goes from your website to someone’s computer
that’s what it’s doing is not preventing someone from hacking into your website now typically
if you’re going to take any kind of credit card payments on your website now nothing
about PayPal and someone goes your website clicks a button and then it takes them over
to PayPal that does not require an SSL certificate because all the payment information goes back
and forth on PayPal’s website not your website but if you want to use the PayPal where you’re
actually taking the payment on your website or if you want to use stripe which is one
of the most popular online payment integrations for pretty much any e-commerce platform then
you need an SSL certificate on your website so that information that goes back-and-forth
will be fully encrypted now there’s different types of security certificates there some
free ones and there some that cost reasonable amounts of money like 10 or $20 or $50 and
then there’s some that are in the hundreds of dollars and I just kinda want to explain
in layman’s terms what’s the difference between all of these so for instance let me just show
you that the easiest way is to show you all and let me go back if you see on my website
I did add an SSL certificate to my website Lemme let me step back a minute the reason
why you really want to give some serious consideration to adding an SSL certificate your website
is because number one it’s a and SCO factor for Google so basically if you had the same
content on a non-SSL site and and and a website that did have a certificate Google’s gonna
favor the one that has the security certificate Google wants everything encrypted so much
so in the year 2017 on the Google Chrome web browser they are going to have notices when
people go to a website and it’s not running behind an SSL certificate so this right here
is an image of what that warnings gonna look like so right now you can see right here is
if someone was on your website and trying to login it would look normal that’s Outlook
today but come 2017 this big warning sign this is not secure is going to show and that
might freak some people out in people the average users not even in the know what the
heck that means they’re going to think that the whole website is not secure so that would
appear kind of right here this nonsecure message so that is a another important reason why
you have a lot of web people saying right now you really want to get onto an SSL certificate
and start encrypting the traffic on your website so that is that so those are two reasons why
you really gotta give some strong consideration to implementing it now there are some different
categories of paid certificates so when you’re looking at a Google search I just did a quick
search for by SSL certificate and I want to show you the difference between what a six
dollars certificate costs and looks like in a web browser and what a more expensive and
the hundreds of dollars certificates can look like and so let me just click on this first
adhere kinda stinks there good paper that click this is a normal certificate you got
the padlock in the top left and it says in green HTTPS that your typical basic security
certificate let me show you the difference between the ones that cost a lot more when
I click on this link you see right here it doesn’t just have the padlock it says in green
the name of the company that is called an EV certificate which stands for extended validation
certificate and those of the ones that cost in the hundreds of dollars so for instance
this website right here sells that EV certificate for $300 so it’s gonna cost a lot more so
six bucks or even freeing him to talk about that will give you get to this padlock and
that’s what I have but if you want to spend more money now if you’re a big e-commerce
website or if you have anything to do in the banking financial industry you really want
to pay the money and get the EV certificate to have it say your name there you really
that that’s a must that’s a definite must but if you’re just the average web user and
you’ve got a website and you don’t want people to get that morning when they’re using Google
Chrome and visiting your website then a basic certificate is going to be fine so let me
show you some of the options to get a free certificate there is a new project that started
I think it might’ve been in 2015 called let’s encrypt and they are a free certificate issuing
entity so you can essentially get a security certificate for free now there are a lot of
Webhost that support let’s encrypt and there’s a lot of Webhost that don’t and I don’t know
why Webhost in 2016 I think was early 2016 it was in all the news and so I wonder if
the Webhost are taking a wait-and-see approach with them and that’s why they don’t so all
your big name of Webhost do not support let’s encrypt security certificates including the
Webhost that I use and I recommend which is InMotion hosting they don’t support it at
all now there’s an alternative if you want a free security certificate on your website
and I use this extensively and it’s through a company called cloud of flair they make
it super easy I want all my websites through cloud of flair they give you a content delivery
network is a free service by the way a free security certificate and they’d have some
denial of service protection of someone’s attacking your website they protect you from
that as well and you get all this for free so in this video I just want to show you how
to get a free certificate with cloud of flair running on your website and one of the reasons
I wanted to make this video was for people that I’ve suggested go to InMotion hosting
and then they want a free security certificate that’s why wanted to make this video that
you just wanted to pay for a security certificate you’re fine with that by far the easiest way
is just the log into your web hosting and order it some it might be 50 bucks or 100
bucks and they do everything for you and some of them require was called the static IP address
all this techie stuff but they’ll handle it all for you you just pay the price and that’s
an annual fee if you wanted to do something like that that that’s by far the easiest I
know with InMotion hosting that button right there you just click on it you pay for it
and you’ll have your certificate in 24 hours so if you want to do it that way that’s totally
fine or you can go the cloud of flair route now with cloud flare what you’re going to
do here and sign up for free accounts and then you’re going and let’s just let us take
a look at it together she come here you’re gonna click on hoops I didn’t actually want
to see this video you want to just go ahead and click right here on sign-up in its gonna
take you to this page to get a free cloud flare account just popping your email and
choose a password agree you’ll get an email you click on it it just verifies your email
address and then you can login for the first time in which you want to do is you want to
click on this plus add site right here in the menu on the top right and the right here
you’re just going to put in your website URL so if I go to show demo.com which is one of
my websites and then click on begin scan then what is going to do is it’s going to do some
scanning of something called your DNS records I know it’s a little technical so it’s gonna
get those records and then it’s been instance can a request for you to make a change where
your domain names are registered so if you have your domain name registered it in motion
her name cheap I use name cheap you will have to make a little change to what’s called your
DNS records are your answer you can make a change your name server not your DNS records
so it’s doing is little scan and it should just take a moment and it’s going to give
us some more options that will look at together I’ve been using cloud flare for probably the
last two years it’s pretty amazing service what they do and the and also through using
it service will speed up your websites when people are visiting your website the experience
will be more fluid and more fast okay so stunned doing it scan you would go ahead and click
on continue set up now right here it’s showing you some technical things it’s just it’s just
verifying and confirming your DNS records now this is a little bit too technical for
most people and that’s okay you can just scroll down to the bottom and then click on continue
its to be right these DNS records okay so right here you’re going to choose a plan and
you’re just going to go ahead and choose the free website plan like that and you can see
right here it’s the free SSL go ahead and click on continue and this is where you need
to change your name servers so right here it shows me my current name servers which
are with InMotion hosting but I need to change it and then type in the word change name server
and you will have instructions for itself if it’s name cheap that you’re with you can
even contact their support and I’ll tell you what to click on and how to do it it’s usually
pretty easy in these control panels when you log in and you look at your domain name don’t
be something there that says said her change your name servers and that is something that
you’re going to have to do in order to get it to work you needed to change it to these
two check name servers that it gives you to change it and what this accomplishes is now
when someone visit your website their first going to flow through cloud flare and what
cloud flares can do is some of the content it’s going to serve up off of their servers
which makes your website load a bit quicker and it’s also been allow them to put that
security certificate in so you can want to go ahead and do that and when you make this
change it might take a few hours to go into effect and you’ll come here and be able to
verified some just going to go ahead and click on continue and see how it’s a status pending
its goodness that say status pending until it verifies that this changes done in this
change goes into effect and by default you can see right here it’s going to add a security
certificate but I want to go ahead and click on full and what you’re going to want to do
is changes from full to flexible and flexible is going to be the most easy way to get the
security certificate on your website you can easily click help right here to read what
the differences but just go ahead and choose on flexible and you don’t have to click save
it’s one of the things I like about cloud of flair they are good soon as you change
the option it’s going to save that for you so now it’s just a waiting game you’re probably
going to have to wait 24 hours for the certificate to be issued and if you make your change to
the name server for that all to go into effect and what you’re gonna want to do as you gonna
want to test your website by entering a HTTP as and then the website URL in seeing if it
gives you what’s called a certificate warning so that’s a warning that says there’s no valid
certificate now if the certificates been issued it’s not can give you that warning now all
that’s good to be left is you’re going to have to install a plug-in on your WordPress
based the website and what this plug-ins going to do is it’s good to do everything word press
needs to make it so whenever someone visits your website they’re going to get the HT TBS
the secure version of your website so someone types HT to and then your website URL it’s
gonna redirect them to the secure version HT to the and that’s what this plug-ins can
to do which is called really simple SSL I have a full video on the plug and it really
easy all you have to do is go to plug-ins add new search for really simple SSL install
and activate in a pretty much does everything for you it couldn’t be any easier and I have
a video on that up with a link to that video down below also put some links to cloud a
flare for you and I’ll put a link to let’s encrypt it as well but this is the easiest
way to get an SSL certificate on your website so in January when Google Chrome’s going to
start throwing up that warning you will not have that warning for your website visitors
and you’ll also get this SCO boost in this SCO benefit of having a security certificate
on your website so that’s all there is to installing a free SSL certificate on your
website now I know this might be a little more technical or a little more complicated
than some of my other videos if you need help in this process feel free to leave a comment
down below and I’ll gladly respond to you and help you in any way if I might’ve left
a little piece here out or there if you’re running into any trouble I totally want to
help you get an SSL certificate on your website before you go I have something for you and
before I get into that I wanted to ask you to do something for me if you could give me
a thumbs up on this video and if you’re not a subscriber click on the subscribe button
right beneath me if you have a question on this video be happy to answer it you can also
leave a comment or question down below this video hey I put together a course and just
for you and I’m in a give it to you for free all you have to do is click on the button
right here on the right it’s called the three steps to WordPress success it’s an awesome
course you’re gonna love it I would love for you to join in and enroll as a student in
this course thanks for watching this video I really appreciated and I do it just for
you that there’s a lot of Webhost that won’t support it but I do know they had some security
problems with the certificates to these now if you don’t know how to do this you can easily
Google it and come up with an answer so you would google the name of where your domain
names are registered

100 Comments

  • Zeeshan Ahmad

    The auto SSL host issued by Cpanel installed on my site and Cloudflare SSL is not active after the 24 hours, what should I do?

  • tonsfocus

    I recommend that people do their homework and see what other people are reporting (their experience using free Cloudflare SSL) before blindly going the Cloudflare route. Let's Encrypt is now very broadly supported and recognized by the main browsers, and it too is totally free. I'm having good luck going that route, so far… fyi.

  • yan zhong

    It's working! you just gotta wait for 24 hrs to get everything done. Might get a 404 page right after you get your SSL but it's gon be alright 24 hrs later! thx, it's really helpful!

  • Ojo Olusegun

    OMG its works, I have been thinking about buying this SSL but am limited on funds, I have also read a case study of a guy that crushed his affiliate marketing business by just installing SSL, you are a great man, thanks a lot, am just so happy

  • sabershot2360

    I am an INFOSEC professional and I HIGHLY recommend you do not set your SSL setting to "flexible". Do yourself a favor and install an SSL cert onto your origin server so all communication is encrypted.

  • Emma Johansson

    Hey! i have an issue or two, i installed a ssl certificate for my website and followed all the step's in this video. but it have failed for me. some people have poblem when they trying to visit my website and get's the varning that the website is unsecured. For me when i'm trying to go in to the website i get also the varning but only when i'm using my computer and ipad. But when im using my cellphone it's works great, until for a couple of minutes ago.. The whole website disapears and it says that the website has moved or something.. i really need som advice for how to solve this problem! And the website loads slowly after the ssl certificate installation.

  • Rocket Sled Design - Chris Allison

    Great video. Thanks for providing some great information, even for people who have been doing this for a long time.

  • Change Your Life dbb

    I followed your steps to install a free SSL cert form Cloudflare; however, now I keep getting the message that there are "too many redirects" and my website won't load, nor am I able to access my wordpress dashboard through my hosting site. Why is this happening?

  • Edwin Chew

    My page not loading properly after installing SSL Does Selecting full cert solve the issue? I added website on cloudflare but removes it because page loading incorrectly and also I found error when adding one-click ssl on wordpress showing my 4 urls don't support https. Cannot find those urls on editor or anywhere !

  • Shahzad Afzal

    Dear Sir I have a problem in speed up my wordpress website in GT Metrix which is badly damaging my SEO working on all my websites, please help me out, the problem is "Enable Keep Alive" having f0 score in GT Metrix, I have entered the code in htaccess file to keep alive but it does not work, please also let us know why only the homepage having this error while all the landing pages are working well.

  • Leena Stark

    Adam, you are my WordPress & Web Guru ! Every time I encounter an issue or have doubts about something, I come here and look through your vids. You're an excellent instructor. Thank you for sharing your knowledge with the rest of us mere mortals 🙂

  • Heroine Clouds

    every time i do change name servers my wordpress website disappears can't access admin page. this works for actual website but not for an wordpress website not for me tho i need help baldy guy

  • Stefanie Rey

    That was so helpful. Thank you very much! You are easy to understand, your instructions are right on and I got my website secure in under one hour!! Can't wait to see how it effects my traffic. Thank you again!

  • Ransford Ohene Wiredu

    Thanks for this tutorial it helped a lot… Actually mine process and verification did not take 24 hours, but i've noticed my site information still telling me: Your connection to this site is not secured. OR should i still wait for the 24 Hours to be sorted out?

  • AndyDOHD1

    HI Adam, I wondered with respect to Cloudflare whether clients would be put on the free or, in your opinion, would they require to be put on one of the other packages?

  • I Am A Stepaholic

    Thank you very simple to follow and even though not technie I understood everything you said (so perhaps I know more than I thought). Thanks again.

  • johnny burke

    after signing up for Cloudflare yesterday, i now have a free SSL certificate, but the site speed is reduced to a crawl- is this normal?

  • Imran Riasat

    Hi Crafter, I installed the certificate from cloud fare and status is active on cloudflare.but on my wordpress dashboard I got an issue that says "a definition of a siteurl or homeurl was detected in your wp-config.php but the file is not writable.
    Setup your wp-config.php to writable and reload this page.
    What should I do in this situation. My webhost is Amazon AWS.

  • Adventures 2 U

    my domain is from go daddy and hosting is from hostgator, i contacted godaddy and they told me that if i change the nameservers my site will be down? is this true

  • Jamie Gregory

    Hey, really helpful video! Thank you!

    However really worried now as both access to my wordpress site and /admin have stopped. I did everything said in the video, and cloudflare says my SSL cert is active but I'm getting the following message:

    ERR_SSL_VERSION_OR_CIPHER_MISMATCH

    Think I'm definitely missing something but now can't even get on my wordpress dash, hopefully you can help!

  • AmpOnMex

    I've got a cert from cloudflare and followed the instructions but it will not show and im getting constant errors when trying load pages, basically my website is ruined, ive cheked my cert on sslshopper, its's fully active on cloud flare, but using this plugin it says no cert found! pulling my hair out for 5 hrs on this!

  • Faith Peace

    I need help please. Should I use Flexible or full SSL? My website is still down and some are suggesting using Full SSL on Cloudflare. What are the disadvantages of Full or Flexible? Thanks so much.

  • Kaupo Põder

    I got error when I try to change nameserver:
    DNSSEC is active but nameserver is missing an DNSKEY: keytag=978 (amber.ns.cloudflare.com)

    DNSSEC is active but nameserver is missing an DNSKEY: keytag=978 (chad.ns.cloudflare.com)

  • Rooibo Quallity

    I liked this video but, although I understand that you want to explain and compare things for 'non-techies', for 'techies' it would be nicer if you'd just show how to get the free SSL certificate.

  • Chris Zotalis

    Hello, how do you remove the ssl certification from cloudfare? I removed my site domain from cloudefare and now I cannot enter the back-end of my wordpress site.

  • Tony Sellick

    Hi Adam. Will this system work with sub domains? E.g. I have www.example. maindomain.co.uk and www.example2.maindomain.co.uk If I apply an SSL to maindomain.co.uk will both example AND example2 have a certificate?

  • Surath Chandra

    It is showing that vfeedz.com is not able to secure a connection after i changed the nameserver and installed the plugin. I cant access my site man

  • Basil Abu-Attiyeh

    Hello brother, great video! Very simple and informative, I just have one quick question, so I followed all of these steps, got SSL from cloudflare and then installed the cloudflare ssl plugin on wordpress and activated it. Unfortunately, I was hoping that it would make my website secure however whenever I try to customize my site on wordpress, or type in https:// and then my website name, I get a "not secure" in red and on the page it tells me "your connection is not private, attackers may steal your information" and so on, got any advice? Thank you !

  • Marlene Hibbard

    Such a big help. ONly problem is, I can't even get into my site … I waited too long to get secure. How can I even get SSL if Word Press won't let me in. I've tried all day. Turned my computer off thinking it was just a cliche of some kind. Now I realize it's because I didn't heed the warning. HELP

  • Jonni Gotti

    Before you initiate transfer make a back up beacause any website you have on it wil be lost and cannot be recovered!

  • Laura Oquendo

    Dear jeff I join cloudflare everything went swell. All I'm waiting for my ssl to be ready. And open my website that I could open up later. Thank you!

  • Abdullah O.

    Hello brother

    my domain name registered with name.com and my web hosting with hostbig ..
    mean already i add nameserver for hostbig in name.com tomake web work…so still can i add more nameservers or not? if not how can solve this pls… thank you

  • Eugene Lee

    Just a note on Inmotion hosting. It's 2.5 years later and they now support these free SSL cert. It's even a part of their cPanel.

  • Maverik

    So i did everything in the video and the "Not Secure" text has disappeared. My website now directs to "https://" instead of http://."
    However, I still don't have the green lock. I'm assuming i just wait it out? As of typing this comment it's been about an hour.
    Thanks again.

  • Rohit Rajani

    Hey Adam, thanks for this video. I have a question – does the hosting provider change after you change the name servers, in this case, Cloudfare? So will the website be hosted on Cloudfare instead of the current hosting provider? If yes, can I then cancel my current hosting account and use Cloudfare?

  • Hamza Mansoor

    your video is great. you explain very well as compare to other youtubers. but i am facing a issue , when i activate cloudflare then my site showing "redirected too many times" kindly help me to get rid of this.

  • Fawad Malik

    Hey wpcrafter my website giving this error even cloudlfare is sctive showing certificate active but it shows
    This is the default SSL vhost for the shared hosting server.

    The reason you are seeing this is you are browsing to the site https://www.itsmeadeel.ml using HTTPS (SSL) however that site (www.itsmeadeel.ml) does not have SSL enabled !
    Why like this CAN ANYONE HELP ME WITH

  • Jeff Zamiri

    I just wan to show my appreciation to you, I have been learning a lot from you for the past two years, I think you are great. THANK YOU.
    Jeff

Leave a Reply

Your email address will not be published. Required fields are marked *