Security
SSL certificate for WordPress: install and configure
10 May 2025 · 5 min read
An SSL certificate encrypts the communication between your website and your visitors. Since 2018, Google marks all websites without SSL as "not secure". This is deadly for visitor trust and your search engine rankings.
At WP Maintainer a free SSL certificate is standard with all our maintenance plans. We not only arrange the installation, but also the correct configuration. In this article we share our knowledge.
What is SSL and why is it important?
SSL (Secure Sockets Layer) is an encryption protocol that ensures data is exchanged securely between browser and server. HTTPS is the secure variant of HTTP. Benefits of SSL: - **Security:** Encrypted data exchange - **SEO benefit:** Google rewards HTTPS with higher rankings - **Trust:** The padlock in the browser gives visitors confidence - **Conversion:** Visitors trust HTTPS sites more for purchases - **PCI compliance:** Required for payments on your website
Step 1: Request an SSL certificate
Most hosting providers offer free SSL certificates via Let's Encrypt. Requesting usually goes via the hosting panel: 1. Log in to cPanel, DirectAdmin or Plesk 2. Look for "SSL/TLS" or "Let's Encrypt" 3. Select your domain name 4. Click on "Issue" or "Install" 5. The certificate is active within minutes
Step 2: Force WordPress to HTTPS
After installation you must configure WordPress to use HTTPS: 1. Change the site URL in Settings > General to https:// 2. Add these lines to wp-config.php: define('FORCE_SSL_ADMIN', true); 3. Update all internal links to HTTPS 4. Redirect HTTP to HTTPS via .htaccess
Step 3: Solve mixed content
Mixed content occurs when an HTTPS page loads HTTP elements. This gives a warning in the browser. **Solution:** - Use a plugin such as Really Simple SSL - Or search and replace all http:// to https:// in the database - Check hardcoded URLs in themes and plugins
Monitoring and renewal
SSL certificates have a limited validity (usually 90 days for Let's Encrypt). Ensure automatic renewal or monitor the expiry date. At WP Maintainer we monitor your SSL certificate every 30 seconds and renew it automatically.