Trusted WordPress tutorials, when you need them most.
Beginner’s Guide to WordPress
WPB Cup
25 Million+
Websites using our plugins
16+
Years of WordPress experience
3000+
WordPress tutorials
by experts

How to Get a Free SSL Certificate for Your WordPress Website (Beginner’s Guide)

Google marks all non-SSL websites as “Not Secure.” This can scare away visitors and harm your site’s credibility. An SSL certificate protects your website data and is essential for accepting online payments.

For beginners, paid SSL certificates can be pricey. But don’t worry. There are free options available that provide the same level of security.

In this article, we’ll show you how to get a free SSL certificate for your WordPress website. We’ll also guide you through the simple setup process so you can secure your site quickly.

Let’s make your website secure without breaking the bank. You’ll have peace of mind knowing your visitors’ data is protected.

Getting a free SSL certificate for your WordPress site

We will also cover the following topics:

Ready? Let’s get started.

What Is SSL?

SSL stands for Secure Sockets Layer. It is an internet protocol for securing data transfer between a user’s browser and the website they are visiting.

Every internet user transfers information when they visit websites. This information can often be sensitive, like personal details, payment and credit card information, or login credentials.

Using the normal HTTP protocol means this information can be hijacked by hackers. This is where SSL or HTTPS comes in.

Websites need an SSL certificate issued by a recognized certificate issuing authority. This certificate is verified and highlighted in the user’s browser address bar with a padlock sign and HTTPS instead of HTTP.

Secure SSL icon

Do I Need an SSL Certificate for My WordPress Website?

Yes, you need an SSL certificate for your WordPress website. It is recommended for all websites, particularly sites that collect user information like login details, payment information, credit cards, and more.

If you are running an eCommerce store, a membership website, or a website that requires users to log in, you need to get an SSL certificate immediately.

Most online payment services require your website to use SSL/HTTPs before you can receive payments.

Apart from security, an SSL certificate also creates a positive impression of your brand among your users. Google also recommends using SSL, and research shows that SSL-enabled websites rank slightly higher in search results.

Last but not least, if your website does not use an SSL certificate, Google Chrome will show your users that it is not secure.

Not Secure label

This icon affects your brand image and user’s trust in your website.

How Does SSL Certificate Work?

Now that we have explained SSL and why it is important, you might wonder how an SSL certificate works.

SSL protects information by encrypting the data transfer between a user’s browser and the website.

When a user visits an SSL/HTTPS website, their browser first verifies if the website’s SSL certificate is valid.

If everything checks out, then the browser uses the website’s public key to encrypt the data. This data is then sent back to the intended server (website), where it is decrypted using the public key and a secret private key.

How SSL works to protect data transfer

How Much Do SSL Certificates Cost?

The cost of SSL Certificates differs from one certificate authority to another. Their pricing could be anywhere between $50-200 / year.

Some providers offer add-on services with their certificates, which may also affect the cost of your SSL certificate.

If you are going to purchase an SSL certificate, then we recommend using Domain.com. They are one of the largest domain name registration services in the world, and they offer the best deal on SSL certificates.

They offer simple SSL certificate plans starting from $33 / year, and they come with a $10,000 security warranty and a TrustLogo site seal. Plus, all SSL certificates renew automatically at their regular rate. After you have purchased an SSL certificate, you can ask your hosting provider to install it for you.

But before you do that, you should check to see if you can get the SSL certificate for free.

Video Tutorial

Subscribe to WPBeginner

If you’d prefer written instructions, just keep reading.

How Can I Get an SSL Certificate for Free?

Many website owners are reluctant to use SSL due to the additional cost. This left many small websites vulnerable to data and information theft.

A non-profit project called Let’s Encrypt decided to fix this by establishing a free certificate authority.

The purpose of this certificate authority is to make it easier for website owners to get a free SSL certificate. The Internet will become a safer place if more and more websites start using SSL.

Due to its significance, the project quickly earned the support of major companies like Google, Facebook, Shopify, WordPress.com, and many others.

The challenge is that installing the free SSL certificate by Let’s Encrypt for a beginner user is quite tricky because it requires coding knowledge and server systems knowledge.

Thankfully, all the best WordPress hosting companies are now offering free SSL certificates with all their hosting plans (some are using Let’s Encrypt).

Choosing one of these providers will save you from the hassle of installing the free SSL certificate on your own.

Here are the top WordPress hosting companies that offer free SSL certificates with their hosting plans:

If you are already using one of these companies, then you can turn on your free SSL certificate from your hosting dashboard.

Simply log in to your hosting account’s cPanel dashboard and scroll down to the ‘Security’ section.

Enable free SSL certificate from cPanel

Bluehost users will find the free SSL option a little differently.

You will need to visit the Websites section and click on the ‘Settings’ button below your site.

Bluehost site settings

From here, you can switch to the ‘Security’ tab and turn on the free SSL certificate for your website.

In most cases, Bluehost will automatically turn this option on for your website.

Bluehost SSL turned on

Depending on your hosting company, your web hosting control panel may look different than the screenshot above. If you are having trouble locating the free SSL option, then you can ask your hosting provider to enable it for you.

If your web hosting company does not offer free SSL, then you can easily follow our guide to switch your hosting and move your sites to one of the companies above.

Installing a Free SSL Certificate and Setting up WordPress

Once you have enabled your free SSL Certificate, you will need to set up WordPress to start using HTTPS instead of HTTP in all your URLs.

The easiest way to do this is by installing and activating the Really Simple SSL plugin on your website. For more details, see our step-by-step guide on how to install a WordPress plugin.

Upon activation, the plugin will check to see if your SSL certificate is enabled. After that, it will turn on HTTP to HTTPS redirect and change your website settings to start using SSL/HTTPS.

SSL enabled in WordPress

To make your website completely secure, you need to make sure that your website URLs are loading using the HTTPS protocol. Really Simple SSL plugin does that automatically by fixing the URLs when the page loads.

Even if a single URL still loads using the insecure HTTP protocol, then browsers will treat your entire website as not fully secure.

Connection not fully secure

To fix these URLs, you will need to use your browser’s inspect tool to find them and then replace them with the correct HTTPS URLs. For more on this, see our tutorial on how to fix mixed content errors in WordPress.

Really Simple SSL Plugin makes it super easy to set up a free SSL certificate in WordPress. That’s why we recommend it for all beginners.

However, it catches insecure URLs when the page loads, which increases your page load time a little bit. This is why advanced users who are concerned about WordPress speed use the manual method to set up their free SSL certificate.

We have created detailed step-by-step instructions to help you properly switch WordPress from HTTP to HTTPS (which shows both the manual method and the plugin method).

We hope this article helped you learn how to get a free SSL certificate for your WordPress site. You may also want to see our step-by-step guide on how to create a free business email address for your WordPress site and our expert picks of the best business phone services.

If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.

Disclosure: Our content is reader-supported. This means if you click on some of our links, then we may earn a commission. See how WPBeginner is funded, why it matters, and how you can support us. Here's our editorial process.

Editorial Staff

Editorial Staff at WPBeginner is a team of WordPress experts led by Syed Balkhi with over 16 years of experience in WordPress, Web Hosting, eCommerce, SEO, and Marketing. Started in 2009, WPBeginner is now the largest free WordPress resource site in the industry and is often referred to as the Wikipedia for WordPress.

The Ultimate WordPress Toolkit

Get FREE access to our toolkit - a collection of WordPress related products and resources that every professional should have!

Reader Interactions

77 CommentsLeave a Reply

  1. Syed Balkhi

    Hey WPBeginner readers,
    Did you know you can win exciting prizes by commenting on WPBeginner?
    Every month, our top blog commenters will win HUGE rewards, including premium WordPress plugin licenses and cash prizes.
    You can get more details about the contest from here.
    Start sharing your thoughts below to stand a chance to win!

  2. Dennis Muthomi

    So the free SSL certificates that web hosting providers like Bluehost and SiteGround are offering is by Let’s Encrypt. WOW, now that makes sense.
    Let’s Encrypt are the real heroes.

  3. Dayo Olobayo

    It’s great to see that more and more hosting companies are offering free SSL certificates with their plans. This makes it even easier for website owners to make sure their sites are secure. I got a free one from my hosting plan on Hostinger too. But then, I’m curious to know if there are any differences in the level of security offered by free SSL certificates compared to paid certificates.

    • WPBeginner Support

      There are some differences for very specific advanced needs but for a most sites you can use a free SSL without worrying :)

      Admin

      • Dayo Olobayo

        Thanks for the response. Not that I know what it means but I believe my small website doesn’t belong in the “very specific advanced needs” category. I’ll do just fine with this free version.

  4. Jiří Vaněk

    A few years ago, only a few websites in the Czech Republic had an SSL certificate and it was very expensive. Thanks to the fact that Lets Encrypt started offering free certificates, practically every shared web hosting in the Czech Republic already includes SSL in the price and is free. It’s a great project. At the same time, Google also contributed to this when it started promoting websites with https and thus began to put enormous pressure on all providers to deploy SSL.

    I have a website on my own VPS and today even installing the LE certificate on the server is very simple, e.g. using certbot. After installation, certbot verifies the certificate itself and automatically renews it after 3 months. It’s really easy even for beginners like me.

  5. mohadese esmaeeli

    It may take a short time from enabling SSL certification to the complete switch to the HTTPS protocol. However, if you have gone through the process correctly, the issue will be automatically resolved after a few minutes.

    • WPBeginner Support

      That is true, that is normally due to DNS and other caching updating

      Admin

  6. Linda

    Great post! Glad to know my Bluehost account has a free SSL certificate option! Whew, saved me some money. Thanks so much.

    • WPBeginner Support

      You’re welcome, glad our guide was helpful!

      Admin

  7. Mayuri

    Thank you for information.

    • WPBeginner Support

      You’re welcome :)

      Admin

  8. Saurab Gautam

    nice tutorial
    and i have a problem that is :: Oops! That page can’t be found.
    It looks like nothing was found at this location. Maybe try searching?::
    when i search my website .what is its reason

  9. John

    What about intranet site. How to get lets encrypt certificate?

    • WPBeginner Support

      You would sadly need to check with those in charge of your intranet for what is available.

      Admin

  10. Ewa

    Hi
    Clearly explained thanks. Can you buy SSL certificate from a different provider than the one who’s hosting the website?

    • WPBeginner Support

      It would depend on your hosting provider for what they allow.

      Admin

  11. Sameer

    How to get SSL certificate from my hosting.

    • WPBeginner Support

      If you do not see the option to add it, you would want to reach out to your hosting provider for assistance.

      Admin

  12. Amanda

    Thank you sooooooo much for providing the Free SSL certificate info. Can not thank you enough!

    • WPBeginner Support

      Glad our guide was helpful :)

      Admin

  13. xman

    hi
    if I have SSL enabled from hosting company and also really simple SSL plugin, this is bad in some way for my site? I had to put really simple SSL too because SSL from hosting company still says its not completely secure

    • WPBeginner Support

      The plugin shouldn’t cause you any problems with your SSL with it active

      Admin

  14. Dr.Ismail Khan

    Really informative

    • WPBeginner Support

      Thank you :)

      Admin

  15. Amy

    Because of this article I was able to do the encryption on my own! Thanks sooo much.

    • WPBeginner Support

      You’re welcome, glad our guide could be helpful :)

      Admin

  16. Rahul Rai

    Thank you for helping peoples all around the world through this website and this article is really informative specially for beginner entrepreneurs. So keep sharing your knowledge with us .

    • WPBeginner Support

      You’re welcome, glad you’ve found our tutorials helpful :)

      Admin

  17. Julie

    That not secure notification has been bugging me since I launched my blog. Followed this step by step and I got it fixed. Thank you!

    • WPBeginner Support

      Glad our guide could help :)

      Admin

  18. Sabine

    Hmm, I am on Bluehost, and it tells me “Free SSL Certificate – Unavailable”
    I will figure it out but seems like I must do it some other way, not like you`ve shown here.
    Anyway, thanks for the article. I had no idea that I could get SSL for free.

    • WPBeginner Support

      You may want to reach out to BlueHost, it could also be an issue on their end if there is trouble with their SSL certificate procedure. Glad our article could help :)

      Admin

  19. Paula Caplan

    Which hosting platform do you think is better–Hostgator or Bluehost ? What do you find to be the pros and cons of each, especially with regard to features, pricing, and support. Thanks for your feedback!

  20. Francis

    In case you have not hosted with above hosting firms what do you do?

    • WPBeginner Support

      That would depend on your specific hosting, if you reach out to your hosting provider they should let you know what they accept

      Admin

  21. Sayem Ibn Kashem

    very useful article. Thanks for sharing

    • WPBeginner Support

      Glad it was helpful :)

      Admin

  22. Iulian

    Hey,
    Do you guys know why when I added my website to CloudFlare to get that SSL, my mp3 from the website are acting like live stream? doesn’t work anymore to “browser” on them anymore..

    Any help would be appreciate it.
    Thanks

    • WPBeginner Support

      It would depend on how your embedded the MP3s but changing your SSL normally shouldn’t affect files like that.

      Admin

  23. Chris

    the hosting service I’m using claims free SSL certificate but requires the purchase of a dedicated IP, whatever that is. Sounds like false advertising.

  24. Jim

    I have Hostgator and they want $39.99. I need help. I can not keep spending money. Can you show me in the customer portal what to do. Maybe I need to change hosting.

    • WPBeginner Support

      You would want to reach out to their support about their free SSL to ensure they don’t think you are requesting something else.

      Admin

    • Akash

      Dear Jim, i was reading your comment, i also faced the same issue, i have recently switched my hosting to hostgator of my website and my free ssl was not installing, i contacted their tech support through hostgator account accound and asked to person to install it, the tech person installed it on the website, so you can also try the same. i hope it will work for you.

  25. Himanshu

    Wow! You are terrific! Just last week I went through the installation of a free SSL and manual conversion of some 4 HTTP’s to HTTPS’. GoDaddy does not allow Let’s Encrypt so all my work of free SSL install was a total waste and since I did not know anything about WordPress and web hosting, Lets Encrypt SSL install took me four full 8-hour-days for nothing. Then I installed Cloudflare SSL which was easy. Really Simple SSL is fantastic but I am not sure if I need to keep it on my site after my all of my HHPT’s are converted into HTTPS’ and I see a padlock on address bar for every page of my website.

    Do I need to keep Really Simple SSL plugin on my site or can I remove it?

  26. Vasudo

    Hello,

    Thanks for this, How to add this feature to an existing website?

  27. mohammad

    Thanks for giving such an interesting information of WordPress.

    • WPBeginner Support

      Glad you enjoy our content :)

      Admin

  28. Angela Patrie

    My domain is registered with Blue Host, but I’m using an independent company for hosting who started offering SSL a year ago for $100 as an add-on, which I declined. Do I need to migrate my blog over to Bluehost for hosting to get the free SSL? I’d rather not pay an extra $100 with my current host but am really annoyed and concerned about losing traffic with the “Site Not Secure” message visitors see. Please advise. Thanks.

    • Editorial Staff

      Hi Angela,

      To get the free SSL, you can either migrate back to Bluehost or use any of the other companies we mentioned in the list that offer free SSL. Most good WordPress hosting companies are now offering free SSL, and if your provider is not, then it’s time to switch :)

      Admin

    • WPBeginner Support

      If your current host does not allow free SSL, you would likely want to look into transferring to a host such as BlueHost for the free SSL.

      Admin

  29. SUNIL

    I love the simple language words and detailing in your articles…
    Can I use your page link in my wordpress blogs. So that user can refer to your site for details for some difficult glossary words

    • WPBeginner Support

      You can certainly link to our articles and pages if you like :)

      Admin

  30. Karen

    Thank you so much for this tutorial. I’m just getting back to blogging after a year’s break and was very unhappy to see the not secure prefix to my web address. As my site is already hosted by Bluehost, I was able to get my certificate free. I installed the Really Simple SSL plugin in just a couple of minutes and now have the https prefix. And it was incredibly easy!!!

    • WPBeginner Support

      Glad we could bring the plugin to your attention :)

      Admin

  31. Lauren K

    This was so incredibly helpful, thank you!! I spent so much time designing a beautiful website I definitely didn’t want that pesky not secure msg appearing before my URL. I thought fixing that issue would be a whole ordeal but you made it so seamless. Thank you again!

  32. seun

    my hosting company is charging me for ssl, pls how do i get it free, thanks

  33. Jan

    I have no input tags, just a bunch of static pages. Near as I can tell, it is thinking my own login to my site is what’s causing the not secure error message – I don’t know…

    I have a managed word press site through goDaddy and I already called them and they wanted to sell me a cert for $200. Not interested.

    I am not selling anything, I have no input tags, nothing…

    Any advice would be appreciated.

  34. Paul

    I have an old WordPress site 3.4.2 and want to put an SSL on it, any ideas how to go about this please?

  35. Viola Raw Woolcott

    I am totally lost with this. I have only just noticed that it says that my site is not secure and have no idea what to do about it, so I am reading….and I do not have any ssl on my wordpress site or in the panel…..??? What shall I do?? Any help would be much appreciated.

    • WPBeginner Support

      Hi Viola,

      Please contact your WordPress hosting provider and they may be able to setup Free SSL certificate on your website. After that you can install the Really Simple SSL plugin to make your site secure.

      Admin

  36. Sharon Everest

    My WordPress site is hosted by Bluehost. I have just tried to enable my “free” SSL certificate on Bluehost’s site, but when I follow the instructions as per your advice above I am prompted to “choose a certificate” – and it seems that the only options on offer have a monthly fee attached, ranging from $4.17 to $24.92 per month: see
    Plus there is also a notice that “A Dedicated IP is required to add a SSL certificate. If you do not have one, click “Add” on any of the SSL certificates, and a Dedicated IP will be added automatically for $5.99/mo.”
    I thought Bluehost were meant to be offering SSL certificates for free for sites hosting with them?

    • WPBeginner Support

      Hi Sharon,

      Please login to your Bluehost hosting panel. Take your mouse to your WordPress site and click on manage site button. On the next page, click on the Security tab. From here, you can tun on free SSL certificate by just clicking on a button.

      Admin

  37. Karol

    Congratulations and a big thank you. WPbeginner is my first go to for WordPress help.

  38. Jeffrey

    Great info! Budding web designer with siteground account. Cool that’s there’s no extra cost for SSL. Does that mean that the certificates never expire?

    • WPBeginner Support

      Hi Jeffrey,

      It does, but SiteGround will automatically renew it for you and you wouldn’t need to do anything.

      Admin

Leave A Reply

Thanks for choosing to leave a comment. Please keep in mind that all comments are moderated according to our comment policy, and your email address will NOT be published. Please Do NOT use keywords in the name field. Let's have a personal and meaningful conversation.